last executing test programs: 3m4.092101336s ago: executing program 1 (id=156): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 3m3.23963041s ago: executing program 1 (id=177): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000200090000003c000380140002007663616e3000000000010000000000000800030000000000080001000100000014000600ff"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 3m3.171072108s ago: executing program 1 (id=179): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3m3.122192969s ago: executing program 1 (id=182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='security.selinux\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {0x4, 0x4}, [{0x8, 0x6}], {}, {0x20, 0x5}}, 0x2c, 0x2) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400e614100001042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="28800100000000000500110001000000140003006272"], 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 3m3.068900683s ago: executing program 1 (id=185): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f00000005c0)="f4416eb4e859495d589fefa788a8684c88a8", 0x36, 0x0, &(0x7f0000002780)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) statx(r0, 0x0, 0x6000, 0x2, &(0x7f0000000140)) 3m3.020187073s ago: executing program 1 (id=187): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000500090000003c000380140002007663616e3000000000010000000000000800030000000000080001000100000014000600ff"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2m49.772042595s ago: executing program 0 (id=395): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'wg1\x00', &(0x7f00000004c0)=@ethtool_rx_ntuple={0x35, {0xe, @udp_ip4_spec={@broadcast, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e22, 0x4e1f}, @ah_ip4_spec={@multicast2, @remote, 0x5, 0x80}, 0xfffa, 0xd, 0x9, 0x1, 0xffffffffffffffff}}}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="280000002c000100000000000000006604000080140016"], 0x28}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000300000055"]) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f000000c840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0xfffffffffffffff5, r4, {0x7, 0x27, 0x0, 0xffffffff80500004, 0x4, 0x0, 0x3e809755, 0x7, 0x0, 0x0, 0x4, 0x1}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', '\x00'}, 0x0, 0xfffffffffffffcef) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) read$FUSE(r3, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0xfffffffffffffc8d) write$FUSE_INTERRUPT(r3, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1c}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x100080c0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}]}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="09002cbd7000feffffff0a00000008000300", @ANYRES32=r11, @ANYBLOB="14005080050009000200000005000200000000000a0006000802110000010000"], 0x3c}}, 0x0) 2m49.771654548s ago: executing program 0 (id=396): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge_slave_1\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x7, 0x58, "41f9917ccd73d5fc0ec9158ccb5889414504c95267932b2539a571b5c3f99f118bbcb7575da6530015e943b50afd9f3fb96b64f0fa90ec13ac1187c187180d6e51c7c7e423cca8b6e6a3f3bcad072c874c9b248f6de8cfa3"}}) listen(r0, 0x5) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$CDROM_SEND_PACKET(r2, 0x5393, &(0x7f0000000980)={"a922c04c8653f89782f949ad", &(0x7f0000000880)="1e045112", 0x4, 0x4, 0x0, 0x1, 0x9, 0x5ca, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000002c0)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r5, 0x9, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000226bd7000ffdbdf25010000000c0016000000000000000000050006000300000006000e000200000008000c000100000008001700", @ANYRES32=r5, @ANYBLOB="05002200010000051a14000000000008001700", @ANYRES32=r0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x410) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r6, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000006f3bfc1b0000000000000000b0df8a92a0301cfd71e06dcb4d038930ea1f79c300e51ca97b502fce68840f5fd61db562b0a303121ebe74636400a2ab8c76e6c5550a55dd64df779c721bf55bb530"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) 2m49.642019668s ago: executing program 0 (id=399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100ac1414aa08000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414000c000280050001000000000008000740000000000c0017000000000500000262040016"], 0x74}, 0x1, 0x0, 0x0, 0x8020}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000ffb, 0x2) r3 = socket(0xc, 0x80003, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r4}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000150001ffff0000000000000000", @ANYRESOCT=r5], 0x20}, 0x1, 0x0, 0x0, 0x240040f4}, 0x2000c050) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x13, 0x1, 0x3, "d287202724ca4a4809867c003323de4e0b33e71c059706050000ae035b0e363f", 0x33363248}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@getlink={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10850, 0x20020}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x9}]}, 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="18c1cdff69231d6400000068000100030000000000008000"], 0x18}}, 0x40000) 2m49.638882842s ago: executing program 0 (id=402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (fail_nth: 62) 2m49.421512933s ago: executing program 0 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000240)='./file1\x00', &(0x7f00000001c0)='hostfs\x00', 0x2000000, &(0x7f0000000200)=':\xbe\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f00000000c0)='./file1\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) (async) symlinkat(&(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file1\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000240)='./file1\x00', &(0x7f00000001c0)='hostfs\x00', 0x2000000, &(0x7f0000000200)=':\xbe\x00') (async) 2m49.421239926s ago: executing program 0 (id=406): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setresuid(0x0, 0xee00, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0x6, 0x0, 0x9, 0x7d, 0x4, 0x97, 0x81, 0x3, 0x4, 0x9, 0x75, 0x6, 0x6, 0x0, 0x1f76, [0x8f, 0x7b0]}}) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r4, 0x0) r7 = dup3(r6, r4, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x44) recvmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x43) socket$kcm(0x29, 0x7, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1) 2m47.881262276s ago: executing program 32 (id=187): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000500090000003c000380140002007663616e3000000000010000000000000800030000000000080001000100000014000600ff"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2m34.132967082s ago: executing program 33 (id=406): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setresuid(0x0, 0xee00, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0x6, 0x0, 0x9, 0x7d, 0x4, 0x97, 0x81, 0x3, 0x4, 0x9, 0x75, 0x6, 0x6, 0x0, 0x1f76, [0x8f, 0x7b0]}}) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r4, 0x0) r7 = dup3(r6, r4, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x44) recvmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x43) socket$kcm(0x29, 0x7, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1) 46.260911522s ago: executing program 4 (id=2969): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}) io_uring_enter(r2, 0x567, 0x20, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) 46.170455681s ago: executing program 4 (id=2971): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10010, r0, 0x7eebf000) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r10, 0xa, 0x3, &(0x7f0000000480)="dcaa04a3ce3c50c7c5f65d4ff41a089809ffd0428b008e90400517ab17e9ca2505c6c5beb5a4ccf2da9e57688a65de1d96994a74a275e3ef28b1a635568883b61278e0a9c7d62e8f7abb89e73ef24d22aca1bc77b02b49879b20d90337c4d10d6923bf64cd530a41ec5a32f89f778f9c42a4b699b7e1966b5583a3c8a6f5cfa38fcde59f0a810435db163b24a74dd217d537ff01929de231db5d86eeedb33d787efcbaf48efce160fd65d7b4ad789ed8a4f268c4a6fcc5fde39128f21c845432", 0xc0) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x80a40, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r11, 0x2, &(0x7f0000000580)={0x3, 0x6}, 0x0) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x13}, 0x8000) close_range(r1, r10, 0x2) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000740)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r12, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x84) r14 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0xca040, 0x0) bind$nfc_llcp(r14, &(0x7f0000000880)={0x27, r8, 0x0, 0x6, 0x10, 0xe, "20a11f5945014705ca8e0c9579c5993f023919e81397f27b693d8d3e3961c2510662fe8461c6b385ce001cf96cf602bee20809ce5414b6e8dfec8ba206b5df", 0x39}, 0x60) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000000980)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000009c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r12, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x200000d1) close_range(r15, r15, 0x2) 46.169630895s ago: executing program 4 (id=2974): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f844", 0x3a}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 45.276755064s ago: executing program 4 (id=2992): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x1040}, 0x2400808c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 45.190924701s ago: executing program 4 (id=2993): syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) epoll_create1(0x0) socket(0x10, 0x803, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x200182) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_clone(0xb9332000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x7ffff000) r7 = syz_open_procfs(r4, &(0x7f0000000100)='stack\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x8d7d) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000b000040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x20040810) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x61, 0x5f, 0x30, 0x0]}}, 0x0, 0x1e, 0x0, 0x40, 0x0, 0x0, @void, @value}, 0x28) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000011ce8bdc19f4a400000000000000000000bbfe8000000000000000000000000000aa0200907800000000605b29ab00001100fc0100000000000000000000000000000000000000000000000000000000000000000000000000000521000000000000fb36eeca6fad50b375a22a584d16ca55"], 0x0) r9 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r9, &(0x7f00000015c0)=[{{&(0x7f00000000c0)=@tipc=@id, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000180)=""/161, 0xa1}], 0x2, &(0x7f0000000280)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001280)=@nfc_llcp, 0x80, &(0x7f0000001480), 0x0, &(0x7f00000014c0)=""/236, 0xec}, 0x1}], 0x2, 0x40002000, &(0x7f0000001640)={0x0, 0x989680}) 44.920501146s ago: executing program 4 (id=2994): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x601) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="62a82aee345fd487f498e794884ad2eddcae95f5cc9dbaf5f323c9c7d668443ac0c99266d2bf82b41b2a853dff952d0d265497132539c94b71389d21044b108aa251a96431eaca", 0x47}, {&(0x7f00000000c0)="2bf1a315589752e28ab9b9ae48406664fbd5a462d22d71c7d63bc55f5cddadab05dd3b134ded0f6ec5c004a8110a", 0x2e}, {&(0x7f0000000440)="97c1f67518fa08076e8fb8", 0xb}], 0x3}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000005c0)) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000001200)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 44.88438378s ago: executing program 34 (id=2994): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x601) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="62a82aee345fd487f498e794884ad2eddcae95f5cc9dbaf5f323c9c7d668443ac0c99266d2bf82b41b2a853dff952d0d265497132539c94b71389d21044b108aa251a96431eaca", 0x47}, {&(0x7f00000000c0)="2bf1a315589752e28ab9b9ae48406664fbd5a462d22d71c7d63bc55f5cddadab05dd3b134ded0f6ec5c004a8110a", 0x2e}, {&(0x7f0000000440)="97c1f67518fa08076e8fb8", 0xb}], 0x3}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000005c0)) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000001200)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 2.886929654s ago: executing program 2 (id=3808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 2.820592255s ago: executing program 2 (id=3812): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.770192675s ago: executing program 2 (id=3816): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003d0007010000000000000000047c0000040000000c000180080016"], 0x24}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x6c, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x1}, @clear_death, @clear_death={0x400c630f, 0x2}, @increfs_done={0x40106308, 0x3}, @request_death={0x400c630e, 0x1}], 0x12, 0x0, &(0x7f0000000240)="b65d9a51728654d797d608b226aaad82745b"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@acquire={0x400c6314, 0x1}, @increfs], 0x0, 0x0, 0x0}) sendto$inet6(r0, &(0x7f0000000000)="2640bba54012077046848e7a2cbfd240a50ee56ceca16e004aeb8143290773586eb33efb1ee83dee0fa138c058feddc07321fd410c9c790da9d05c648cf713866803fa48f15b855a811cd4bc04c4eabb529a07eec80cdcb321cf8c2a4845306fb2c1a592e6d6e1a32da2a16a4f10c58506992071d593c36902aa", 0x7a, 0x4002, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48a00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="440f789e0060000066bad104ed8f4948971fc74424000b000000c744240203000000c7442406000000000f0114240f001eb92e0b00000f32c744240087dfffffc7442406000000000f011424b9760800000f3248b80e000000000000000f23d00f21f835100000050f23f826430f07", 0x6f}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0xd2d1f9e1f6a54709, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x40400c0, &(0x7f0000000200)={0xa, 0x4e23, 0x7, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0xa) sendmmsg$sock(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)="7025c4af02e462d31861f3cd933d516bcaf3b8237a253209796341a7d1739d506b6a260e2277f76bb7a11abd925d8f0e27ec083a3ee9f6331fdedc7209123843233d193fe9ff431ae0c2610346e98fe1c9341c829ee01d609afeefa8c677631c", 0x60}], 0x1}}], 0x1, 0x80) 1.840104577s ago: executing program 2 (id=3830): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500ff80fc00000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 1.838649346s ago: executing program 2 (id=3831): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8}]}, 0x5e}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400fff0000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 1.77014065s ago: executing program 2 (id=3832): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x56209516, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x6, 0x19, 0x3, "923a759a4c67"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x17f0, 0x7}}}}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, 0x0, &(0x7f0000002fc0)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103102, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r9 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0xc0105b08, &(0x7f0000000100)) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = eventfd(0x2) r13 = eventfd(0x20) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000100)={r13, 0x0, 0x2, r12}) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000400)={r13, 0xffffffff, 0x2, r13}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}}) 1.060657618s ago: executing program 6 (id=3849): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e", 0xa2}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 550.46439ms ago: executing program 3 (id=3855): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0xf401, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 416.805753ms ago: executing program 3 (id=3858): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 413.790445ms ago: executing program 3 (id=3860): add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r1], 0x3c}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="6400000000141a000002000000240001801400018008000100e000000108000200e0000001000c0002800500010000000000240002801400018008000100000002800500010000000000080007400000000100"/101, @ANYRESDEC=r8, @ANYBLOB="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"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000108012581ba96000000000003000002050003003a00fdff0500030006000000"], 0x24}, 0x1, 0x0, 0x0, 0x2000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801600018008000100e000000108000200e00000010c0002800500000000000000100005800a000100482e323435000000"], 0x48}}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)={0x9, 0x0, [{0xb8a, 0x0, 0xd}, {0xb85, 0x0, 0x7}, {0x90a, 0x0, 0x2}, {0xbaf, 0x0, 0x3}, {0x334, 0x0, 0x800}, {0x8fa}, {0xa8d, 0x0, 0x10001}, {0x34, 0x0, 0x6}, {0x8fc, 0x0, 0x4}]}) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e400000000010104000000000000000003000000100004800c00038005000100f70000004800048044000380080003400000000108000240000100000800034000800d5f05000100030000000500010000000000080003400000004f050001000600000005000100080000003c0010800800014000000dfe0800020c000000000800024000000004080001400000000808000140000000020800014000000001080003400000000308001540000000022c001880080001400000000608000340000000000800014000000000080003400000000f080001400000f8d20600124000040000"], 0xe4}, 0x1, 0x0, 0x0, 0x24048000}, 0x4040001) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, 0x0) 340.156871ms ago: executing program 5 (id=3861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x606100, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) unshare(0x62040200) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000c00)="c988a800"/14, 0xe}, {&(0x7f0000000100)="551dda68", 0x4}], 0x2) 269.33151ms ago: executing program 5 (id=3862): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80fc3f000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 269.113656ms ago: executing program 3 (id=3863): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8}]}, 0x5e}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400fffe000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 268.982396ms ago: executing program 3 (id=3864): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 267.724297ms ago: executing program 5 (id=3865): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1265) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 190.628486ms ago: executing program 3 (id=3866): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) (fail_nth: 10) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 190.090619ms ago: executing program 5 (id=3867): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) (async) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) (async) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000100100000100"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x18, 0x500}}], 0x2, 0x0) (async) getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000280)=""/184, 0x2000006a) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) flock(0xffffffffffffffff, 0x3) (async) listen(r2, 0x3) (async) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r5, 0xee01) (async) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000340)={{0x87, @empty, 0x4e21, 0x4, 'sh\x00', 0x4, 0x6, 0x31}, {@multicast1, 0x4e24, 0x2000, 0x3, 0x1, 0x5}}, 0x44) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r8 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r8, @ANYRESDEC], 0x52) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c80657273696f6e3d3970323030302e752c00"]) (async) close_range(r6, r3, 0x0) (async) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000001900), 0x4) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) (async) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r10, 0x50009405, &(0x7f0000000180)) (async) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x10) fanotify_mark(r10, 0x2, 0x40000019, r11, &(0x7f00000000c0)='./file0\x00') 189.987903ms ago: executing program 5 (id=3868): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [0x0, 0x3c2], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 189.72585ms ago: executing program 6 (id=3869): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="80fd"], 0x9) 130.910264ms ago: executing program 5 (id=3870): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00c300028000001294", 0x2e}], 0x1}, 0x0) 60.860083ms ago: executing program 6 (id=3871): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020500031000000000000000004c000002000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001000000000000000002000100000040000000040c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x20000080) 60.59361ms ago: executing program 6 (id=3872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 468.63µs ago: executing program 6 (id=3873): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0xf6ff, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 0s ago: executing program 6 (id=3874): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'vxcan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r6], 0x2c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002880)={0xffffffffffffffff, 0xe0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000025c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000002600)=[0x0, 0x0, 0x0], &(0x7f0000002640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000002680)=[{}, {}], 0x10, 0x10, &(0x7f00000026c0), &(0x7f0000002700), 0x8, 0x4, 0x8, 0x8, &(0x7f0000002740)}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a40)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="da88b8f2cd89135f95b7e42275b58ffc286fb12fbe42b705b9aea8465395312da2c20652c6e727d9d25661da118b6cfdfbb79df11fba9959e6b0daf5d0f88d104afd6e084798d5165c885cb4e7a03847314d705998a858f1a2abeb6a7781e26631b5cb198fcdacbf10876ef1b86a949605ebdc0f5dbd6143bcc6d29f48e9a8452266d6755aad699c5d", 0x89}, {&(0x7f0000000100)="274574a0fdc2d3425000dc824474ef81721454d5", 0x14}, {&(0x7f0000000140)="1678db3b34b936ab1934f63472d5b0b56c6a8b8affe1148a914ded163038ce687778ad2a002c2a1cbf", 0x29}, {&(0x7f0000000300)="ace8d4847487327fba9ac003b32cfb6e9a0ee5187e6c18d652e92daf0b", 0x1d}], 0x4, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x7, 0x1, 0x6, [{@remote}, {@loopback, 0xb}, {@private=0xa010100, 0x3ff}, {@private=0xa010100, 0x1e8722dc}, {@remote, 0x8}]}, @rr={0x7, 0x7, 0xde, [@local]}, @timestamp={0x44, 0x8, 0x12, 0x0, 0xc, [0x9]}, @lsrr={0x83, 0xf, 0x5b, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xa, 0x3, 0x7, [{@empty, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}, {@private=0xa010102, 0xe2b}, {@remote, 0xd}, {@local, 0xfffffff8}, {@remote, 0x7ff}]}, @ssrr={0x89, 0x13, 0xb3, [@loopback, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0xc}]}, @timestamp_prespec={0x44, 0x24, 0x3d, 0x3, 0x7, [{@loopback, 0x80}, {@empty, 0x10}, {@loopback, 0x7}, {@local, 0x7f}]}, @cipso={0x86, 0x9, 0x7, [{0x6, 0x3, "b2"}]}, @generic={0x89, 0xf, "cd58899d01cbd8e7fe62be7d65"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @local}}}], 0x1b0}}, {{&(0x7f0000000480)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000700)="52974ba9a449fa08093bd38d9ea7bca5cd93d1c2b364373218858c537ae4ab5e5f9497be461ef13740312a11221cc326f031c541c45119f68eed4be2eb42faaca6e1731053a695dd2508c8dd5461e0233782d247fedd5cd47986f6f9bc470346e1dfcc0e37e276469976d850d56a0224c1171aec1229d3e7a2ba9ffadff6955f6786e90df259a975f60c1298f7c6ef9b8cba06666a242a67ced2ddd763c86cd0110c7a9be8b0a8d15085f93c7d33", 0xae}, {&(0x7f00000007c0)="4febb115db929f93f9932053813cfc480c2d6c8da2aa548827a0d5b08246b5b30e494f8be377909c8d1a894cc90c8581280528e55c43441454fe0d300d0966679bb97f84cf53b1eaf01bba308afbeb423d7b03931b35f0048911a3fec6a2234721324b4c9f7d346bcbdcec83e5c6eba28b6e5f3fe613ce8e7abe2e389bcf50116c18a65efbbb6eb2de4ce1b76313c0f3e21a", 0x92}], 0x2, &(0x7f0000000bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @empty}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x75, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2]}, @timestamp_addr={0x44, 0x24, 0xf6, 0x1, 0x7, [{@private=0xa010100, 0x6}, {@multicast2, 0x7}, {@rand_addr=0x64010100, 0x6}, {@multicast2, 0x3}]}, @timestamp={0x44, 0x8, 0xbe, 0x0, 0xb, [0x1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0xc0}}, {{&(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002000)=[{&(0x7f0000000cc0)="d6738a3c0ef7d71af9b2e57e4a81df6776e38080a36bb15e3f3a6b3c6e3077bdd447b22c238c9d88a46d0281c7ca728c5e21d502aeae6e5d71038c461f1a5e686648b51b", 0x44}, {&(0x7f0000000d40)="3087918db1373bec340e4e065c074684dd6ea1bd8e92aaeba141a426dc8e094081146c291630f045432208c8266a9935cb8366298a47e6543236b6335940a35104d167d119b91997e517102f5e7ebf47c805fef64f5f79f37620c9b05a188f97b868aa7dc704d1959f542b6ece3e7c3690", 0x71}, {&(0x7f0000000dc0)="03addc98b71c0c5981a3725b97242f613f1702181cfe068d608152eddb75143667b75c11ffaf05f7a5103a62f5921ecab767d100de01368d327a5e83307d6609b0e9b03916675907b15d11ac7b48a3d502ba6ba09815e78005d7f7a87feb4937debac7b51b0909326c32b94744fdd234ff5dc2b2b4ba1d53df99b12e48dd2d94a257784cb94112301e523991e6ed0e91a6d06ce46beee871ba44e822b5749ce58bbf6749f59b75eabfdc8b16d88f5891d949c335", 0xb4}, {&(0x7f0000000e80)="e1a1e02124757219f53bb92eb7e7676a29fa71b738b3ffee320676cacc1b1ed841a2b8808a64d25fe29048f1b46735297c4804ddbb0236b7dc433016dc073714acca69b466e65218b51f82cc454ad02fec63ba0ff7937f2736fcb1236d8057a48a4a6e7010abe3b09500f251bcc8b8c5c706895820ab9f9a628c3e6b56ea7e44ddc2ebaf", 0x84}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="f3d94b7f4ce08ec48984802d2f9d8334a73c6d6d6cb43309516920ed0d9132662bca986fe1d85e0714aee661e6aef93880512a789496da0cdb2ce216e0938b7d91c597b323bbb78d17ecdc5571f009b6f8b702ce1738e63d1261cf554db50a14c2fdfe109fe59ffca59c2010a21cbb193808b4aaff396d28db0369f67ac6d87e9f41b4d2183959f23e5dc59d7b94ae05d5", 0x91}], 0x6, &(0x7f0000002080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x1b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x5, 0x12, "b521eedc05c0f6b6049b363e1b32c9c3"}]}, @generic={0x7, 0x4, "44ca"}, @timestamp_addr={0x44, 0x44, 0x18, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5e0fc7fa}, {@loopback, 0x7cc40bab}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x7}, {@multicast1, 0x1}, {@remote, 0xe}]}, @ra={0x94, 0x4, 0x21}, @timestamp_addr={0x44, 0x24, 0xea, 0x1, 0x7, [{@loopback, 0x1}, {@local}, {@rand_addr=0x64010102, 0x7}, {@broadcast, 0x98}]}, @generic={0x89, 0xe, "435a1783cea4f2d55b431c6d"}]}}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000002180), 0x0, &(0x7f00000021c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffb}}], 0x18}}, {{&(0x7f0000002200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f0000002340)=[{&(0x7f0000002240)="0ae32a549a04fd1a4917392e1cf84d5e5274e86201fef86c5e3657202e1fcc3ecb269eca28d16ad511237db0c12df0f3399b36116047d35bf00030018dd229c4f4e961c7b68351752fa245a4ea4d27ed8e846c3639a1e4aae5982b8b", 0x5c}, {&(0x7f00000022c0)="9227e821d8016e48971403dd9bdf883a48cadff302bd44f54b8ae59bf75916d225d9a3fc2d95f1d2a0424a45473b8d83e7a1a078de2779446fd78e85e5efe29a931832f09e6ff2d8eb659d61fa6c69e92f1b5a4c583fc4fb7fd432a62e54148377bf6baa2d6d368919203650e8e113a26ea00592c9a0", 0x76}], 0x2, &(0x7f0000002380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @multicast2}}}], 0x38}}, {{&(0x7f00000023c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000002500)=[{&(0x7f0000002400)="c44d2809bd3cc1023b25f8e99981eeb3d5dc4803632ddc5fe57c3fafda3eb80a68bcbe7339a9992afa0395f17e45ab29e58ceb78068265df30356caa5d67c4fb0bc13694e6a7ea8d26ff83fd9e86d3b2d7dcced5c3e8ac1c800f73a0d48b73f3f13c85031be194b61fd1c157fa09", 0x6e}, {&(0x7f0000002480)="c2a4125a71ea69f3d4ce336950b66f8d5b9b77fc2d51b2aded9919b0fc02a3b60c9dda06b8bbc2609186eaa027474aac17b8cadf55d37f6609af14475b8efdb0ccfddd91d8f30996e96a695b7879e47108ccde57c33ee7b945506880326cc386057d81ea1d59bc", 0x67}], 0x2, &(0x7f0000002540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}}, {{&(0x7f0000002580)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0xfffffffffffffffc, 0x0, &(0x7f0000002c00)=[@ip_retopts={{0xb8, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x7, 0x3b, [@empty]}, @ssrr={0x89, 0x17, 0x9f, [@rand_addr=0x64010100, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}]}, @noop, @noop, @cipso={0x86, 0x6e, 0x2, [{0x1, 0x9, "222b948fe0f0a1"}, {0x1, 0x8, "0cb6099edc50"}, {0x1, 0x9, "14b02d89ae0859"}, {0x7, 0xd, "b956c73d547bdf3c55abce"}, {0x2, 0x12, "592978079edffe5dfed36300800000dc"}, {0x6, 0x10, "15ed436b691ef4a081c471a7c941"}, {0x2, 0xe, "ef55fb8267247f8bff866a89"}, {0x2, 0xb, "8240ee810a3041b855"}, {0x5, 0x6, "44b33cf9"}]}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x5, [{@loopback, 0x1}, {@local, 0x4}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x864}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @remote}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xbe, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0xf}, 0xffff}, {@remote, 0xfff}, {@rand_addr=0x64010100, 0x1}]}, @timestamp={0x44, 0x8, 0x78, 0x0, 0x8, [0x7fffffff]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x39}}], 0x170}}], 0x7, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x8, &(0x7f0000000040)="e1", 0x1) getsockopt$inet_opts(r9, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000340)=0x10) ioctl$NBD_SET_SOCK(r0, 0xab00, r8) ioctl$NBD_SET_SOCK(r0, 0xab00, r8) r10 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r10, 0xab0a, 0x1000001000104) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r12, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r12, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xfffffffc}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x28, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x5}]}]}, 0x28}}, 0x0) ioctl$NBD_SET_SOCK(r10, 0xab00, r8) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r10, 0xab04) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 179.704971][T12638] netlink: 'syz.2.2497': attribute type 1 has an invalid length. [ 179.746352][T12641] overlayfs: failed to resolve './file1': -2 [ 179.762850][T12638] 8021q: adding VLAN 0 to HW filter on device bond22 [ 179.773677][T12638] bond21: (slave bond22): making interface the new active one [ 179.776791][T12638] bond21: (slave bond22): Enslaving as an active interface with an up link [ 179.798915][T12648] tmpfs: Bad value for 'mpol' [ 179.906771][ T39] audit: type=1400 audit(1734999969.994:648): avc: denied { getopt } for pid=12649 comm="syz.4.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.918433][ T39] audit: type=1326 audit(1734999969.994:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12649 comm="syz.4.2501" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62a5d85d29 code=0x80000000 [ 179.959975][T12664] overlayfs: failed to clone lowerpath [ 180.004380][T12666] netlink: 'syz.2.2508': attribute type 10 has an invalid length. [ 180.007143][T12665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.147056][T12674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.361218][T12686] binder: 12685:12686 ioctl 400c620e 20000140 returned -22 [ 180.552840][T12692] can: request_module (can-proto-4) failed. [ 180.558567][T12702] __nla_validate_parse: 1 callbacks suppressed [ 180.558584][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2520'. [ 180.559211][T12701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.617297][T12706] loop6: detected capacity change from 0 to 524287999 [ 180.633148][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 180.637369][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.640996][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.680325][T12716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.683195][T12716] IPv6: NLM_F_CREATE should be set when creating new route [ 180.686547][T12719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2526'. [ 180.768542][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2528'. [ 180.857092][T12731] netlink: 'syz.4.2531': attribute type 1 has an invalid length. [ 180.894530][T12731] 8021q: adding VLAN 0 to HW filter on device bond34 [ 180.899443][T12731] bond33: (slave bond34): making interface the new active one [ 180.901849][T12731] bond33: (slave bond34): Enslaving as an active interface with an up link [ 180.979372][T12747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2536'. [ 180.982367][T12747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.030350][T12752] overlayfs: overlapping lowerdir path [ 181.104941][ T39] audit: type=1326 audit(1734999971.194:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200c385d29 code=0x7fc00000 [ 181.111312][T12761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.116238][ T39] audit: type=1326 audit(1734999971.194:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200c385d29 code=0x7fc00000 [ 181.126236][ T39] audit: type=1326 audit(1734999971.194:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200c385d29 code=0x7fc00000 [ 181.137942][ T39] audit: type=1326 audit(1734999971.194:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200c385d29 code=0x7fc00000 [ 181.149312][ T39] audit: type=1326 audit(1734999971.194:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200c385d29 code=0x7fc00000 [ 181.158655][ T39] audit: type=1326 audit(1734999971.194:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200c385d29 code=0x7fc00000 [ 181.169941][ T39] audit: type=1326 audit(1734999971.194:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200c385d29 code=0x7fc00000 [ 181.190232][ T39] audit: type=1326 audit(1734999971.194:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.2.2535" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200c385d29 code=0x7fc00000 [ 181.311275][T12777] xt_cluster: you have exceeded the maximum number of cluster nodes (8192 > 32) [ 181.345481][T12779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.348403][T12779] IPv6: NLM_F_CREATE should be set when creating new route [ 181.453139][T12791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.520024][T12793] overlayfs: failed to resolve './file1': -2 [ 181.596290][T12802] team0: Device vlan0 is up. Set it down before adding it as a team port [ 181.627082][T12806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.628896][T12806] IPv6: NLM_F_CREATE should be set when creating new route [ 181.660883][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2561'. [ 181.663269][T12808] netlink: 'syz.4.2561': attribute type 30 has an invalid length. [ 181.665214][T12808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2561'. [ 181.774669][T12818] use of bytesused == 0 is deprecated and will be removed in the future, [ 181.780099][T12818] use the actual size instead. [ 181.884094][T12829] loop6: detected capacity change from 0 to 524287999 [ 181.910684][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 181.924483][T12835] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2574'. [ 181.949681][T12837] 9pnet_fd: Insufficient options for proto=fd [ 181.953621][T12837] tmpfs: User quota block hardlimit too large. [ 181.987303][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2576'. [ 182.016768][T12850] team0: Device vlan0 is up. Set it down before adding it as a team port [ 182.027269][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2581'. [ 182.032706][T12856] netlink: 'syz.4.2581': attribute type 30 has an invalid length. [ 182.036109][T12856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2581'. [ 182.163534][T12876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.168879][T12876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.206966][T12886] team0: Device vlan0 is up. Set it down before adding it as a team port [ 182.209999][T12888] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 182.222259][T12888] overlayfs: failed to resolve 'seclabel': -2 [ 182.277180][T12894] netlink: 'syz.5.2597': attribute type 30 has an invalid length. [ 182.429343][ T6228] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 182.433459][T12911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.436390][T12911] IPv6: NLM_F_CREATE should be set when creating new route [ 182.437547][T12913] xt_cluster: you have exceeded the maximum number of cluster nodes (49667 > 32) [ 182.599293][ T6228] usb 8-1: Using ep0 maxpacket: 8 [ 182.602708][ T6228] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.611148][ T6228] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.614142][ T6228] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.617330][ T6228] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.626329][ T6228] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.628793][ T6228] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.695280][T12942] xt_cluster: you have exceeded the maximum number of cluster nodes (262144 > 32) [ 182.837293][ T6228] usb 8-1: GET_CAPABILITIES returned 0 [ 182.840239][ T6228] usbtmc 8-1:16.0: can't read capabilities [ 182.929871][T12962] binder: Unknown parameter 'suats' [ 182.960158][T12972] team0: Device vlan0 is up. Set it down before adding it as a team port [ 183.056760][ T832] usb 8-1: USB disconnect, device number 11 [ 183.469249][ T2297] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 183.629159][ T2297] usb 9-1: Using ep0 maxpacket: 8 [ 183.635712][ T2297] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.641179][ T2297] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 183.645370][ T2297] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 183.650780][ T2297] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.655110][ T2297] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 183.664735][ T2297] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.667527][ T2297] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.670129][ T2297] usb 9-1: Product: syz [ 183.671598][ T2297] usb 9-1: Manufacturer: syz [ 183.672987][ T2297] usb 9-1: SerialNumber: syz [ 183.770356][T12997] xt_cluster: you have exceeded the maximum number of cluster nodes (67108864 > 32) [ 183.810709][T13001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.812953][T13001] IPv6: NLM_F_CREATE should be set when creating new route [ 183.967973][T13014] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003 [ 184.017057][T13022] overlayfs: failed to resolve './file0': -2 [ 184.074190][T13033] validate_nla: 2 callbacks suppressed [ 184.074202][T13033] netlink: 'syz.5.2652': attribute type 9 has an invalid length. [ 184.180115][T13050] netlink: 'syz.3.2658': attribute type 1 has an invalid length. [ 184.230065][T13050] 8021q: adding VLAN 0 to HW filter on device bond6 [ 184.232795][T13050] bond5: (slave bond6): making interface the new active one [ 184.235115][T13050] bond5: (slave bond6): Enslaving as an active interface with an up link [ 184.300638][T13065] overlayfs: failed to resolve './file0': -2 [ 184.433402][T13082] xt_cluster: you have exceeded the maximum number of cluster nodes (536870912 > 32) [ 184.465570][T13084] cgroup: Name too long [ 184.704962][T13093] bridge0: port 3(erspan0) entered blocking state [ 184.707109][T13093] bridge0: port 3(erspan0) entered disabled state [ 184.709558][T13093] erspan0: entered allmulticast mode [ 184.712003][T13093] erspan0: entered promiscuous mode [ 184.713994][T13093] bridge0: port 3(erspan0) entered blocking state [ 184.715977][T13093] bridge0: port 3(erspan0) entered forwarding state [ 184.900387][T13101] netlink: 'syz.5.2676': attribute type 30 has an invalid length. [ 184.930349][T13105] xt_hashlimit: size too large, truncated to 1048576 [ 184.989415][ T39] kauditd_printk_skb: 7439 callbacks suppressed [ 184.989427][ T39] audit: type=1400 audit(1734999975.084:8097): avc: denied { name_connect } for pid=13109 comm="syz.2.2680" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 184.994117][T13110] overlayfs: failed to clone upperpath [ 185.122716][ T39] audit: type=1400 audit(1734999975.214:8098): avc: denied { accept } for pid=13119 comm="syz.2.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 185.824601][T13135] netlink: 'syz.5.2689': attribute type 21 has an invalid length. [ 185.827664][T13135] __nla_validate_parse: 49 callbacks suppressed [ 185.827676][T13135] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2689'. [ 185.839157][T13137] netlink: 'syz.5.2689': attribute type 21 has an invalid length. [ 185.842971][T13137] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2689'. [ 185.913183][T13142] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2691'. [ 185.922558][T13141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.052616][T13149] team0: Device vlan0 is up. Set it down before adding it as a team port [ 186.058043][ T2297] cdc_ncm 9-1:1.0: bind() failure [ 186.061426][ T2297] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 186.063348][ T2297] cdc_ncm 9-1:1.1: bind() failure [ 186.066258][ T2297] usb 9-1: USB disconnect, device number 10 [ 186.081886][T13151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2695'. [ 186.134561][T13157] xt_cluster: you have exceeded the maximum number of cluster nodes (4278189951 > 32) [ 186.167877][T13159] netlink: 1275 bytes leftover after parsing attributes in process `syz.2.2699'. [ 186.170978][T13159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.235596][ T39] audit: type=1400 audit(1734999976.324:8099): avc: denied { read } for pid=13166 comm="syz.3.2703" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 186.244707][ T39] audit: type=1400 audit(1734999976.334:8100): avc: denied { open } for pid=13166 comm="syz.3.2703" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 186.271032][T13170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2705'. [ 186.274039][T13170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.276255][T13171] team0: Device vlan0 is up. Set it down before adding it as a team port [ 186.377642][T13189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.380808][T13189] IPv6: NLM_F_CREATE should be set when creating new route [ 186.623884][T13208] netlink: 'syz.5.2718': attribute type 10 has an invalid length. [ 186.635716][T13205] gtp0: entered promiscuous mode [ 186.637212][T13205] gtp0: entered allmulticast mode [ 186.682025][T13213] overlayfs: failed to clone upperpath [ 186.876471][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2729'. [ 186.915208][T13243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.918837][T13243] IPv6: NLM_F_CREATE should be set when creating new route [ 187.028734][T13256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.038333][T13258] xt_cluster: node mask cannot exceed total number of nodes [ 187.083421][T13256] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.174940][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2740'. [ 187.240340][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2742'. [ 187.243706][T13270] netlink: 'syz.2.2742': attribute type 30 has an invalid length. [ 187.246779][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2742'. [ 187.322487][T13278] xt_cluster: node mask cannot exceed total number of nodes [ 187.634717][T13297] overlayfs: failed to clone upperpath [ 187.676610][T13301] netlink: 'syz.2.2757': attribute type 10 has an invalid length. [ 187.690425][T13301] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.694244][T13301] bond0: (slave team0): Enslaving as an active interface with an up link [ 187.712719][T13304] xt_cluster: node mask cannot exceed total number of nodes [ 187.832022][T13320] netlink: 'syz.2.2764': attribute type 30 has an invalid length. [ 187.907076][T13328] xt_cluster: node mask cannot exceed total number of nodes [ 187.945997][T13330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.982881][T13334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.986720][T13334] IPv6: NLM_F_CREATE should be set when creating new route [ 188.040054][T13332] securityfs: Unknown parameter '&&%*-![^-:Z$).' [ 188.055654][T13340] overlayfs: failed to clone upperpath [ 188.096327][T13342] team0: Device vlan0 is up. Set it down before adding it as a team port [ 188.152000][T13351] xt_cluster: node mask cannot exceed total number of nodes [ 188.166098][T13354] overlayfs: failed to resolve './file1': -2 [ 188.238941][T13361] br: renamed from lo (while UP) [ 188.302827][T13367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.306479][ T39] audit: type=1400 audit(1734999978.394:8101): avc: denied { bind } for pid=13366 comm="syz.5.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.315516][T13367] mmap: syz.5.2786 (13367) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 188.362635][T13371] program syz.3.2788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.411193][ T39] audit: type=1400 audit(1734999978.504:8102): avc: denied { connect } for pid=13377 comm="syz.2.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 188.435879][T13388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.438039][T13388] IPv6: NLM_F_CREATE should be set when creating new route [ 188.441939][T13385] team0: Device vlan0 is up. Set it down before adding it as a team port [ 188.481673][T13391] overlayfs: failed to clone upperpath [ 188.486765][T13398] gretap0: entered promiscuous mode [ 188.491251][T13398] gretap0: left promiscuous mode [ 188.540766][ T39] audit: type=1400 audit(1734999978.634:8103): avc: denied { nlmsg_write } for pid=13400 comm="syz.2.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 188.683698][ T39] audit: type=1400 audit(1734999978.774:8104): avc: denied { accept } for pid=13429 comm="syz.4.2806" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 188.706969][T13434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.709627][T13434] IPv6: NLM_F_CREATE should be set when creating new route [ 188.891956][ T39] audit: type=1400 audit(1734999978.984:8105): avc: denied { ioctl } for pid=13453 comm="syz.4.2811" path="socket:[41879]" dev="sockfs" ino=41879 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 189.160608][T13479] loop7: detected capacity change from 16384 to 16383 [ 189.236689][T13482] XFS (nullb0): Invalid superblock magic number [ 189.361813][T13497] xt_cluster: node mask cannot exceed total number of nodes [ 189.386427][T13499] bond0: (slave team0): Releasing backup interface [ 189.391049][T13499] team0: Cannot enslave team device to itself [ 189.393825][T13501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.543072][T13523] xt_cluster: node mask cannot exceed total number of nodes [ 189.554002][ T39] audit: type=1400 audit(1734999979.644:8106): avc: denied { write } for pid=13524 comm="syz.3.2832" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 189.578663][T13529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.672905][T13536] macvtap0: mtu greater than device maximum [ 189.777272][T13550] xt_cluster: node mask cannot exceed total number of nodes [ 189.905223][T13565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.907426][T13565] IPv6: NLM_F_CREATE should be set when creating new route [ 190.158396][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.166294][T13581] netlink: 'syz.3.2856': attribute type 30 has an invalid length. [ 190.194547][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.199836][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.205532][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.208872][ T66] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 190.213361][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.310107][T13578] chnl_net:caif_netlink_parms(): no params data found [ 190.396660][T13578] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.397825][ T39] audit: type=1400 audit(1734999980.484:8107): avc: denied { listen } for pid=13591 comm="syz.3.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 190.400317][T13578] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.400484][T13578] bridge_slave_0: entered allmulticast mode [ 190.415685][T13578] bridge_slave_0: entered promiscuous mode [ 190.418038][T13597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4376 sclass=netlink_route_socket pid=13597 comm=syz.4.2859 [ 190.424280][T13578] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.426991][T13578] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.431364][T13578] bridge_slave_1: entered allmulticast mode [ 190.434322][T13578] bridge_slave_1: entered promiscuous mode [ 190.480644][T13578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.486267][T13601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.489083][T13601] IPv6: NLM_F_CREATE should be set when creating new route [ 190.507481][T13578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.597680][T13607] netlink: 'syz.4.2864': attribute type 30 has an invalid length. [ 190.597719][T13578] team0: Port device team_slave_0 added [ 190.606953][T13578] team0: Port device team_slave_1 added [ 190.652991][T13578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.655340][T13578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.666055][T13578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.671240][T13578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.674232][T13578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.684408][T13578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.701226][T13619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16152 sclass=netlink_route_socket pid=13619 comm=syz.2.2869 [ 190.733198][T13578] hsr_slave_0: entered promiscuous mode [ 190.745076][T13578] hsr_slave_1: entered promiscuous mode [ 190.747794][T13578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.751984][T13578] Cannot create hsr debugfs directory [ 190.755555][T13625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.758477][T13625] IPv6: NLM_F_CREATE should be set when creating new route [ 190.853470][T13636] __nla_validate_parse: 23 callbacks suppressed [ 190.853483][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2876'. [ 190.868170][T13627] cgroup: release_agent respecified [ 190.904473][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2876'. [ 190.934808][T13638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.024323][T13578] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.093561][T13578] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.167740][T13578] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.244144][T13578] team0: Port device netdevsim0 removed [ 191.248536][T13578] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.313052][T13665] team0: Device vlan0 is up. Set it down before adding it as a team port [ 191.356188][T13670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.391153][T13672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.394197][T13672] IPv6: NLM_F_CREATE should be set when creating new route [ 191.422954][T13670] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.462539][T13578] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.468170][T13578] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.475408][T13578] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.476093][T13675] overlayfs: missing 'lowerdir' [ 191.484157][ T8000] udevd[8000]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 191.496869][T13578] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.591999][T13687] overlayfs: overlapping lowerdir path [ 191.594013][T13686] team0: Device vlan0 is up. Set it down before adding it as a team port [ 191.616831][T13578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.641947][T13578] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.644358][T13690] overlayfs: missing 'lowerdir' [ 191.657913][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.661063][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.672758][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.675624][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.713173][T13694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.754643][ T39] audit: type=1400 audit(1734999981.844:8108): avc: denied { getopt } for pid=13698 comm="syz.4.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.754785][T13701] netlink: 'syz.4.2900': attribute type 1 has an invalid length. [ 191.818375][T13578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.824554][ T39] audit: type=1400 audit(1734999981.924:8109): avc: denied { shutdown } for pid=13708 comm="syz.4.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.890774][T13719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2905'. [ 191.991385][T13578] veth0_vlan: entered promiscuous mode [ 191.998162][T13578] veth1_vlan: entered promiscuous mode [ 192.015662][T13578] veth0_macvtap: entered promiscuous mode [ 192.020146][T13578] veth1_macvtap: entered promiscuous mode [ 192.026073][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.029897][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.033041][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.036024][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.038873][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.042762][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.045605][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.048933][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.052524][T13578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.058396][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.067791][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.070084][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2911'. [ 192.072724][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.074358][T13735] netlink: 'syz.3.2911': attribute type 30 has an invalid length. [ 192.078681][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.078702][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.078717][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.078739][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.082806][T13735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2911'. [ 192.084730][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.101247][T13578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.106304][T13578] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.109773][T13578] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.112338][T13578] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.114861][T13578] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.197867][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.202918][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.224661][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.227247][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.259398][ T39] audit: type=1400 audit(1734999982.344:8110): avc: denied { mounton } for pid=13578 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 192.269738][ T66] Bluetooth: hci2: command tx timeout [ 192.302358][T13733] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2908'. [ 192.304425][T13755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.322372][T13759] xt_cluster: node mask cannot exceed total number of nodes [ 192.386436][T13755] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.441851][T13766] SELinux: policydb string length 14080 does not match expected length 8 [ 192.442193][T13767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.445488][T13766] SELinux: failed to load policy [ 192.447935][T13767] IPv6: NLM_F_CREATE should be set when creating new route [ 192.454512][T13766] SELinux: policydb version -1801041534 does not match my version range 15-33 [ 192.457500][T13766] SELinux: failed to load policy [ 192.511093][T13772] overlayfs: missing 'lowerdir' [ 192.576738][T13780] overlayfs: missing 'lowerdir' [ 192.620351][T13786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2930'. [ 192.629925][T13791] overlay: Bad value for 'workdir' [ 192.632943][T13791] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 192.660135][T13796] xt_cluster: node mask cannot exceed total number of nodes [ 192.698032][T13800] loop6: detected capacity change from 0 to 524287999 [ 192.709064][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 192.713858][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.717436][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.821640][T13809] overlayfs: missing 'lowerdir' [ 192.829990][T13813] netlink: 'syz.4.2940': attribute type 1 has an invalid length. [ 192.866036][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2942'. [ 192.867654][T13813] 8021q: adding VLAN 0 to HW filter on device bond37 [ 192.870101][T13819] netlink: 'syz.5.2942': attribute type 30 has an invalid length. [ 192.873997][T13813] bond36: (slave bond37): making interface the new active one [ 192.875852][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2942'. [ 192.880207][T13813] bond36: (slave bond37): Enslaving as an active interface with an up link [ 192.916334][T13821] nft_compat: unsupported protocol 0 [ 192.921342][T13823] xt_cluster: node mask cannot exceed total number of nodes [ 192.958483][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'. [ 192.965740][T13831] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.968044][T13831] IPv6: NLM_F_CREATE should be set when creating new route [ 192.993274][T13834] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 192.994130][T13835] overlayfs: missing 'lowerdir' [ 193.037473][T13844] netlink: 'syz.5.2952': attribute type 30 has an invalid length. [ 193.044805][T13846] netlink: 'syz.4.2953': attribute type 1 has an invalid length. [ 193.050823][ T39] audit: type=1400 audit(1734999983.144:8111): avc: denied { ioctl } for pid=13847 comm="syz.3.2954" path="socket:[47308]" dev="sockfs" ino=47308 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.064857][T13853] xt_cluster: node mask cannot exceed total number of nodes [ 193.096141][T13846] 8021q: adding VLAN 0 to HW filter on device bond39 [ 193.100190][T13846] bond38: (slave bond39): making interface the new active one [ 193.103290][T13846] bond38: (slave bond39): Enslaving as an active interface with an up link [ 193.103305][ T39] audit: type=1400 audit(1734999983.194:8112): avc: denied { sqpoll } for pid=13857 comm="syz.2.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 193.208122][T13868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.269654][T13874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.272356][T13874] IPv6: NLM_F_CREATE should be set when creating new route [ 193.343288][T13878] xt_cluster: node mask cannot exceed total number of nodes [ 193.405628][T13883] netlink: 'syz.4.2965': attribute type 30 has an invalid length. [ 193.657597][T13890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.681922][T13894] loop6: detected capacity change from 0 to 524287999 [ 193.695985][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 193.766786][T13904] program syz.3.2973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.781873][ T39] audit: type=1400 audit(1734999983.874:8113): avc: denied { mounton } for pid=13903 comm="syz.3.2973" path="/proc/510/cgroup" dev="proc" ino=47457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 194.131226][T13927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.134331][T13927] IPv6: NLM_F_CREATE should be set when creating new route [ 194.243743][T13935] br: renamed from lo (while UP) [ 194.431133][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.431998][T13949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.433095][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.623609][T13953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.625806][T13953] IPv6: NLM_F_CREATE should be set when creating new route [ 195.007798][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.086091][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.182952][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.187907][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.191833][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.192304][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.200960][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.205472][ T5952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 195.209851][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.222579][T13968] loop6: detected capacity change from 0 to 524287999 [ 195.258693][T13971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.271671][ T39] audit: type=1400 audit(1734999985.364:8114): avc: denied { map } for pid=13967 comm="syz.2.2999" path="socket:[44877]" dev="sockfs" ino=44877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.284932][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.288423][ T39] audit: type=1400 audit(1734999985.374:8115): avc: denied { read } for pid=13967 comm="syz.2.2999" path="socket:[44877]" dev="sockfs" ino=44877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.342156][T13962] chnl_net:caif_netlink_parms(): no params data found [ 195.444380][T13962] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.446534][T13962] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.448628][T13962] bridge_slave_0: entered allmulticast mode [ 195.451465][T13962] bridge_slave_0: entered promiscuous mode [ 195.461841][T13962] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.463859][T13962] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.465913][T13962] bridge_slave_1: entered allmulticast mode [ 195.468039][T13962] bridge_slave_1: entered promiscuous mode [ 195.806527][ T11] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 195.813253][ T11] bond0 (unregistering): Released all slaves [ 195.817867][ T11] bond1 (unregistering): Released all slaves [ 195.823049][ T11] bond2 (unregistering): Released all slaves [ 195.827895][ T11] bond3 (unregistering): (slave bond4): Releasing backup interface [ 195.831269][ T11] bond3 (unregistering): Released all slaves [ 195.927181][ T11] bond4 (unregistering): Released all slaves [ 195.931852][ T11] bond5 (unregistering): Released all slaves [ 195.936680][ T11] bond6 (unregistering): (slave bond7): Releasing backup interface [ 195.940610][ T11] bond6 (unregistering): Released all slaves [ 196.059378][ T11] bond7 (unregistering): Released all slaves [ 196.064384][ T11] bond8 (unregistering): Released all slaves [ 196.069779][ T11] bond9 (unregistering): (slave bond10): Releasing backup interface [ 196.072969][ T11] bond9 (unregistering): Released all slaves [ 196.164935][ T11] bond10 (unregistering): Released all slaves [ 196.172143][ T11] bond11 (unregistering): Released all slaves [ 196.179816][ T11] bond12 (unregistering): (slave bond13): Releasing backup interface [ 196.183447][ T11] bond12 (unregistering): Released all slaves [ 196.269908][ T11] bond13 (unregistering): Released all slaves [ 196.279231][ T11] bond14 (unregistering): (slave bond15): Releasing backup interface [ 196.281986][ T11] bond14 (unregistering): Released all slaves [ 196.351018][ T66] Bluetooth: hci2: command tx timeout [ 196.362965][ T11] bond15 (unregistering): Released all slaves [ 196.367754][ T11] bond16 (unregistering): (slave bond17): Releasing backup interface [ 196.372256][ T11] bond16 (unregistering): Released all slaves [ 196.487041][ T11] bond17 (unregistering): Released all slaves [ 196.492308][ T11] bond18 (unregistering): (slave bond19): Releasing backup interface [ 196.495838][ T11] bond18 (unregistering): Released all slaves [ 196.598162][ T11] bond19 (unregistering): Released all slaves [ 196.603192][ T11] bond20 (unregistering): Released all slaves [ 196.610288][ T11] bond21 (unregistering): (slave bond22): Releasing backup interface [ 196.613733][ T11] bond21 (unregistering): Released all slaves [ 196.709876][ T11] bond22 (unregistering): Released all slaves [ 196.714607][ T11] bond23 (unregistering): (slave bond24): Releasing backup interface [ 196.717341][ T11] bond23 (unregistering): Released all slaves [ 196.813274][ T11] bond24 (unregistering): Released all slaves [ 196.818791][ T11] bond25 (unregistering): (slave bond26): Releasing backup interface [ 196.822217][ T11] bond25 (unregistering): Released all slaves [ 196.924014][ T11] bond26 (unregistering): Released all slaves [ 196.931501][ T11] bond27 (unregistering): Released all slaves [ 196.936139][ T11] bond28 (unregistering): Released all slaves [ 196.943881][ T11] bond29 (unregistering): (slave bond30): Releasing backup interface [ 196.947427][ T11] bond29 (unregistering): Released all slaves [ 197.039465][ T11] bond30 (unregistering): Released all slaves [ 197.045515][ T11] bond31 (unregistering): (slave bond32): Releasing backup interface [ 197.048641][ T11] bond31 (unregistering): Released all slaves [ 197.150008][ T11] bond32 (unregistering): Released all slaves [ 197.154812][ T11] bond33 (unregistering): (slave bond34): Releasing backup interface [ 197.157521][ T11] bond33 (unregistering): Released all slaves [ 197.241621][ T66] Bluetooth: hci0: command tx timeout [ 197.266150][ T11] bond34 (unregistering): Released all slaves [ 197.270583][ T11] bond35 (unregistering): Released all slaves [ 197.275728][ T11] bond36 (unregistering): (slave bond37): Releasing backup interface [ 197.278437][ T11] bond36 (unregistering): Released all slaves [ 197.375119][ T11] bond37 (unregistering): Released all slaves [ 197.380063][ T11] bond38 (unregistering): (slave bond39): Releasing backup interface [ 197.382843][ T11] bond38 (unregistering): Released all slaves [ 197.482198][ T11] bond39 (unregistering): Released all slaves [ 197.486627][T13996] __nla_validate_parse: 13 callbacks suppressed [ 197.486651][T13996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3004'. [ 197.494678][T13996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.551248][T13962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.598330][T13962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.689683][T14009] wireguard0: entered promiscuous mode [ 197.691307][T14009] wireguard0: entered allmulticast mode [ 197.693604][T14011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.717239][T13962] team0: Port device team_slave_0 added [ 197.719865][ T11] : left promiscuous mode [ 197.831362][T13962] team0: Port device team_slave_1 added [ 197.900581][ T11] tipc: Disabling bearer [ 197.905422][ T11] tipc: Left network mode [ 197.930061][T13962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.932257][T13962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.940782][T13962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.967662][T13962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.969946][T13962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.977290][T13962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.011345][T13962] hsr_slave_0: entered promiscuous mode [ 198.013538][T13962] hsr_slave_1: entered promiscuous mode [ 198.015517][T13962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.017804][T13962] Cannot create hsr debugfs directory [ 198.439218][ T66] Bluetooth: hci2: command tx timeout [ 198.814376][T14026] netlink: 'syz.3.3011': attribute type 1 has an invalid length. [ 199.310834][ T66] Bluetooth: hci0: command tx timeout [ 199.598037][T14027] 8021q: adding VLAN 0 to HW filter on device bond8 [ 199.600890][T14027] bond7: (slave bond8): making interface the new active one [ 199.603305][T14027] bond7: (slave bond8): Enslaving as an active interface with an up link [ 199.606284][T14029] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.644357][T14032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.667598][T14037] team0: Device vlan0 is up. Set it down before adding it as a team port [ 199.709755][T13962] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 199.720799][ T11] hsr_slave_0: left promiscuous mode [ 199.722876][ T11] hsr_slave_1: left promiscuous mode [ 199.745111][ T11] veth1_macvtap: left promiscuous mode [ 199.747076][ T11] veth0_macvtap: left promiscuous mode [ 199.748968][ T11] veth1_vlan: left promiscuous mode [ 199.750672][ T11] veth0_vlan: left promiscuous mode [ 200.099512][T14041] block nbd3: shutting down sockets [ 200.276137][T14052] overlayfs: missing 'workdir' [ 201.355354][T13962] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 201.359543][T13962] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 201.365621][T13962] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 201.390974][ T5953] Bluetooth: hci0: command tx timeout [ 201.410750][T14063] Cannot find add_set index 0 as target [ 201.436466][T14066] netlink: 'syz.3.3025': attribute type 1 has an invalid length. [ 201.449782][T14068] loop6: detected capacity change from 0 to 524287999 [ 201.487797][T14066] 8021q: adding VLAN 0 to HW filter on device bond10 [ 201.493052][T14066] bond9: (slave bond10): making interface the new active one [ 201.495325][T14066] bond9: (slave bond10): Enslaving as an active interface with an up link [ 201.541198][T13962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.558097][T13962] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.567048][ T1190] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.569242][ T1190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.582708][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.584662][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.606423][T13962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.634036][T14085] program syz.5.3031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.653151][T14088] team0: Device vlan0 is up. Set it down before adding it as a team port [ 201.707522][T13962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.714277][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3035'. [ 201.739801][T14101] netlink: 'syz.3.3036': attribute type 1 has an invalid length. [ 201.756769][T14101] 8021q: adding VLAN 0 to HW filter on device bond12 [ 201.759576][T14101] bond11: (slave bond12): making interface the new active one [ 201.762490][T14101] bond11: (slave bond12): Enslaving as an active interface with an up link [ 201.794542][T14113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3039'. [ 201.797468][T14113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.826322][T13962] veth0_vlan: entered promiscuous mode [ 201.829292][ T11] IPVS: stop unused estimator thread 0... [ 201.831321][T13962] veth1_vlan: entered promiscuous mode [ 201.833726][T14120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.835848][T14120] IPv6: NLM_F_CREATE should be set when creating new route [ 201.857770][T14124] team0: Device vlan0 is up. Set it down before adding it as a team port [ 201.866404][T13962] veth0_macvtap: entered promiscuous mode [ 201.869530][T13962] veth1_macvtap: entered promiscuous mode [ 201.875964][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.881319][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.884133][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.887103][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.890052][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.893001][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.895729][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.898664][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.901636][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.904576][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.910306][T13962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.917324][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.921383][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.925502][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.929298][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.932391][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.935492][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.938413][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.941955][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.943207][T14132] --map-set only usable from mangle table [ 201.944939][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.944951][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.945645][T13962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.012493][T13962] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.015654][T13962] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.018538][T13962] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.021640][T13962] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.022004][T14137] netlink: 'syz.3.3048': attribute type 2 has an invalid length. [ 202.025697][T14140] netlink: 'syz.2.3049': attribute type 1 has an invalid length. [ 202.031463][ T39] audit: type=1326 audit(1734999992.124:8116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.3.3048" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe590385d29 code=0x7ffc0000 [ 202.032775][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3048'. [ 202.041082][ T39] audit: type=1326 audit(1734999992.124:8117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.3.3048" exe="/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fe590385d29 code=0x7ffc0000 [ 202.047784][ T39] audit: type=1326 audit(1734999992.124:8118): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.3.3048" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe590385d29 code=0x7ffc0000 [ 202.053453][T14140] 8021q: adding VLAN 0 to HW filter on device bond24 [ 202.059617][T14140] bond23: (slave bond24): making interface the new active one [ 202.062042][T14140] bond23: (slave bond24): Enslaving as an active interface with an up link [ 202.065157][ T39] audit: type=1326 audit(1734999992.124:8119): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.3.3048" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe590385d29 code=0x7ffc0000 [ 202.082847][ T39] audit: type=1326 audit(1734999992.124:8120): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.3.3048" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe590385d29 code=0x7ffc0000 [ 202.089848][ T39] audit: type=1326 audit(1734999992.124:8121): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.3.3048" exe="/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe590385d29 code=0x7ffc0000 [ 202.096509][ T39] audit: type=1326 audit(1734999992.124:8122): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.3.3048" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe590385d29 code=0x7ffc0000 [ 202.109354][ T39] audit: type=1326 audit(1734999992.124:8123): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.3.3048" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe590385d29 code=0x7ffc0000 [ 202.118135][ T39] audit: type=1326 audit(1734999992.124:8124): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.3.3048" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe590385d29 code=0x7ffc0000 [ 202.128074][ T39] audit: type=1326 audit(1734999992.124:8125): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.3.3048" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe590385d29 code=0x7ffc0000 [ 202.134882][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.137837][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.164757][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.167391][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.170871][T14154] team0: Device vlan0 is up. Set it down before adding it as a team port [ 202.177729][T14153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.353371][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.362632][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.364111][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3060'. [ 202.366177][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.367520][T14175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.375723][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.406225][ T66] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 202.413890][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.437979][T14177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.440885][T14177] IPv6: NLM_F_CREATE should be set when creating new route [ 202.443201][T14177] IPv6: NLM_F_CREATE should be set when creating new route [ 202.445403][T14177] IPv6: NLM_F_CREATE should be set when creating new route [ 202.527627][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3064'. [ 202.538711][T14172] chnl_net:caif_netlink_parms(): no params data found [ 202.611063][T14200] loop6: detected capacity change from 0 to 524287999 [ 202.644991][T14172] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.646860][T14172] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.648711][T14172] bridge_slave_0: entered allmulticast mode [ 202.650614][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3069'. [ 202.650780][T14172] bridge_slave_0: entered promiscuous mode [ 202.662788][T14172] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.664794][T14172] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.666931][T14172] bridge_slave_1: entered allmulticast mode [ 202.680669][T14172] bridge_slave_1: entered promiscuous mode [ 202.701469][T14206] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3070'. [ 202.727523][T14172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.735752][T14172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.769553][T14172] team0: Port device team_slave_0 added [ 202.776976][T14172] team0: Port device team_slave_1 added [ 202.797847][T14172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.801494][T14172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.811145][T14172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.833296][T14213] netlink: 'syz.6.3073': attribute type 10 has an invalid length. [ 202.833654][T14172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.838736][T14172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.847559][T14172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.873009][T14212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.891335][T14172] hsr_slave_0: entered promiscuous mode [ 202.893913][T14172] hsr_slave_1: entered promiscuous mode [ 202.896013][T14172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.898204][T14172] Cannot create hsr debugfs directory [ 202.987005][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3076'. [ 202.989814][T14221] netlink: 'syz.5.3076': attribute type 30 has an invalid length. [ 202.992351][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3076'. [ 202.992700][T14223] netlink: 'syz.3.3077': attribute type 1 has an invalid length. [ 203.016504][T14172] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.048375][T14223] 8021q: adding VLAN 0 to HW filter on device bond14 [ 203.051453][T14223] bond13: (slave bond14): making interface the new active one [ 203.054105][T14223] bond13: (slave bond14): Enslaving as an active interface with an up link [ 203.055795][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3078'. [ 203.092486][T14172] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.102043][T14229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.131258][T14233] loop6: detected capacity change from 0 to 524287999 [ 203.137773][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 203.141263][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.144004][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.176474][T14237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3082'. [ 203.179626][T14237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3082'. [ 203.186791][T14172] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.261135][T14172] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.325371][T14245] --map-set only usable from mangle table [ 203.351021][T14172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.354590][T14172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.358146][T14172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.361892][T14172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 203.381339][T14172] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.383909][T14172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.386519][T14172] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.389063][T14172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.418903][T14172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.425560][T14172] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.435051][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.441783][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.442222][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'. [ 203.446459][T14253] netlink: 'syz.3.3087': attribute type 30 has an invalid length. [ 203.448619][T14253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3087'. [ 203.469440][ T5953] Bluetooth: hci0: command tx timeout [ 203.481411][T14255] overlay: Unknown parameter 'smackfsdef' [ 203.499489][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.502001][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.512964][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.516111][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.558970][T14172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.565801][T14172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.575630][T14262] loop6: detected capacity change from 0 to 524287999 [ 203.638013][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 203.647813][T14172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.650015][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.652628][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.664057][T14172] veth0_vlan: entered promiscuous mode [ 203.665332][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 203.668188][T14172] veth1_vlan: entered promiscuous mode [ 203.673645][ C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.676458][ C1] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 203.682233][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.686625][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.709081][T14172] veth0_macvtap: entered promiscuous mode [ 203.712750][T14172] veth1_macvtap: entered promiscuous mode [ 203.720415][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.723514][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.726185][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.729380][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.732149][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.734974][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.737700][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.741005][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.745097][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.749479][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.753328][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.757274][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.762923][T14278] netlink: 'syz.3.3095': attribute type 1 has an invalid length. [ 203.762936][T14172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.784987][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.789428][ T5953] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 203.792253][ T5953] Bluetooth: hci2: Injecting HCI hardware error event [ 203.796343][ T5953] Bluetooth: hci2: hardware error 0x00 [ 203.801002][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.804175][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.807156][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.810173][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.813057][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.815810][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.818665][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.821733][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.824762][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.827590][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.830569][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.836019][T14172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.848297][T14278] 8021q: adding VLAN 0 to HW filter on device bond16 [ 203.853234][T14278] bond15: (slave bond16): making interface the new active one [ 203.855990][T14278] bond15: (slave bond16): Enslaving as an active interface with an up link [ 203.858619][T14281] br: renamed from lo (while UP) [ 203.874267][T14172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.878401][T14172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.882255][T14172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.885748][T14172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.904081][T14285] delete_channel: no stack [ 203.904485][T14284] team0: Device vlan0 is up. Set it down before adding it as a team port [ 203.950333][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.952599][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.971539][T14292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.973629][T14292] IPv6: NLM_F_CREATE should be set when creating new route [ 203.975682][T14292] IPv6: NLM_F_CREATE should be set when creating new route [ 203.979793][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.982117][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.985230][T14294] loop6: detected capacity change from 0 to 524287999 [ 204.009595][ C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 204.013028][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 204.032575][T14305] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.035152][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.037651][ C3] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 204.040422][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.092793][T14312] team0: Device vlan0 is up. Set it down before adding it as a team port [ 204.092935][T14311] netlink: 'syz.5.3107': attribute type 1 has an invalid length. [ 204.114692][T14313] br: renamed from lo (while UP) [ 204.120883][T14316] loop6: detected capacity change from 0 to 524287999 [ 204.127107][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.141682][T14311] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.144277][T14311] bond1: (slave bond2): making interface the new active one [ 204.147228][T14311] bond1: (slave bond2): Enslaving as an active interface with an up link [ 204.198591][T14325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.231251][T14329] netlink: 'syz.6.3114': attribute type 30 has an invalid length. [ 204.236228][T14331] loop6: detected capacity change from 0 to 524287999 [ 204.269589][ C3] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 204.326906][T14341] netlink: 'syz.6.3118': attribute type 10 has an invalid length. [ 204.329760][T14340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.345012][T14343] team0: Device vlan0 is up. Set it down before adding it as a team port [ 204.373669][T14345] sctp: [Deprecated]: syz.5.3120 (pid 14345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.373669][T14345] Use struct sctp_sack_info instead [ 204.411876][T14349] syz.5.3121(14349): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 204.419600][T14351] netlink: 'syz.2.3122': attribute type 1 has an invalid length. [ 204.428086][T14351] bond1 (unregistering): Released all slaves [ 204.430245][ T66] Bluetooth: hci4: command tx timeout [ 204.558927][T14370] team0: Device vlan0 is up. Set it down before adding it as a team port [ 204.588282][T14372] loop3: detected capacity change from 0 to 524287999 [ 204.605313][T14376] fuse: Bad value for 'rootmode' [ 204.653782][T14381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.680202][T14383] binder: 14382:14383 unknown command 0 [ 204.681889][T14383] binder: 14382:14383 ioctl c0306201 20000080 returned -22 [ 204.703889][T14372] overlayfs: failed to resolve './file0': -2 [ 204.763457][T14394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.765766][T14394] IPv6: NLM_F_CREATE should be set when creating new route [ 204.767978][T14394] IPv6: NLM_F_CREATE should be set when creating new route [ 204.770517][T14394] IPv6: NLM_F_CREATE should be set when creating new route [ 204.833448][T14403] --map-set only usable from mangle table [ 204.877010][T14408] mkiss: ax0: crc mode is auto. [ 205.075448][T14421] netlink: 'syz.2.3148': attribute type 1 has an invalid length. [ 205.108064][T14421] bond1 (unregistering): Released all slaves [ 205.117705][T14425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.120183][T14425] IPv6: NLM_F_CREATE should be set when creating new route [ 205.122929][T14425] IPv6: NLM_F_CREATE should be set when creating new route [ 205.125651][T14425] IPv6: NLM_F_CREATE should be set when creating new route [ 205.246944][T14435] team0: Device vlan0 is up. Set it down before adding it as a team port [ 205.247773][T14437] loop6: detected capacity change from 0 to 524287999 [ 205.252988][T14439] random: crng reseeded on system resumption [ 205.339533][T14447] Cannot find add_set index 0 as target [ 205.414973][T14457] netlink: 'syz.2.3165': attribute type 1 has an invalid length. [ 205.428464][T14457] bond1 (unregistering): Released all slaves [ 205.453589][T14463] team0: Device vlan0 is up. Set it down before adding it as a team port [ 205.490141][T14467] overlayfs: failed to clone upperpath [ 205.507697][T14469] loop6: detected capacity change from 0 to 524287999 [ 205.540742][T14472] Cannot find add_set index 0 as target [ 205.598904][T14484] vivid-003: disconnect [ 205.659949][T14490] team0: Device vlan0 is up. Set it down before adding it as a team port [ 205.662268][T14483] vivid-003: reconnect [ 205.697488][T14492] netlink: 'syz.2.3178': attribute type 30 has an invalid length. [ 205.751155][T14499] netlink: 'syz.6.3181': attribute type 1 has an invalid length. [ 205.767098][T14499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.769840][T14499] bond1: (slave bond2): making interface the new active one [ 205.776394][T14499] bond1: (slave bond2): Enslaving as an active interface with an up link [ 205.806571][T14504] loop6: detected capacity change from 0 to 524287999 [ 205.827195][T14506] Cannot find add_set index 0 as target [ 205.862606][T14509] netlink: 'syz.2.3185': attribute type 10 has an invalid length. [ 205.873266][T14507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.879200][ T5953] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 205.962514][T14516] team0: Device vlan0 is up. Set it down before adding it as a team port [ 206.000079][T14518] netlink: 'syz.6.3189': attribute type 30 has an invalid length. [ 206.046607][T14520] bond0: entered promiscuous mode [ 206.048627][T14520] bond_slave_0: entered promiscuous mode [ 206.051744][T14520] bond_slave_1: entered promiscuous mode [ 206.238285][T14524] 8021q: adding VLAN 0 to HW filter on device bond18 [ 206.245183][T14524] bond17: (slave bond18): making interface the new active one [ 206.247849][T14524] bond17: (slave bond18): Enslaving as an active interface with an up link [ 206.278713][T14532] --map-set only usable from mangle table [ 206.312581][T14537] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 206.320799][T14537] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 206.406886][T14547] team0: Device vlan0 is up. Set it down before adding it as a team port [ 206.517670][T14566] Cannot find add_set index 0 as target [ 206.518597][T14561] 8021q: adding VLAN 0 to HW filter on device bond20 [ 206.522798][ T5953] Bluetooth: hci4: command tx timeout [ 206.525543][T14561] bond19: (slave bond20): making interface the new active one [ 206.527918][T14561] bond19: (slave bond20): Enslaving as an active interface with an up link [ 206.575343][T14570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.643168][T14579] syz.3.3212: attempt to access beyond end of device [ 206.643168][T14579] nbd3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 206.648543][T14579] VFS: could not find a valid V7 on nbd3. [ 207.991803][T14597] Cannot find add_set index 0 as target [ 208.499498][T14594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.502726][T14594] IPv6: NLM_F_CREATE should be set when creating new route [ 208.538813][T14609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.589558][ T5953] Bluetooth: hci4: command tx timeout [ 208.607786][T14613] 8021q: adding VLAN 0 to HW filter on device bond22 [ 208.613394][T14613] bond21: (slave bond22): making interface the new active one [ 208.616255][T14613] bond21: (slave bond22): Enslaving as an active interface with an up link [ 208.638847][T14620] __nla_validate_parse: 23 callbacks suppressed [ 208.638860][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3228'. [ 208.745130][T14628] overlayfs: lower data-only dirs require metacopy support. [ 208.783641][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3232'. [ 208.787067][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3232'. [ 210.358509][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3239'. [ 210.558728][T14639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.620106][T14652] 9pnet_fd: Insufficient options for proto=fd [ 210.622953][T14652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.639553][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3243'. [ 210.642204][T14658] validate_nla: 8 callbacks suppressed [ 210.642218][T14658] netlink: 'syz.2.3243': attribute type 30 has an invalid length. [ 210.646267][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3243'. [ 210.650152][T14660] netlink: 'syz.3.3244': attribute type 10 has an invalid length. [ 210.669362][ T5953] Bluetooth: hci4: command tx timeout [ 210.673183][T14659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.782010][T14669] netlink: 'syz.2.3248': attribute type 1 has an invalid length. [ 210.799874][T14669] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.802931][T14669] bond1: (slave bond2): making interface the new active one [ 210.805344][T14669] bond1: (slave bond2): Enslaving as an active interface with an up link [ 210.970509][T14679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.972650][T14679] IPv6: NLM_F_CREATE should be set when creating new route [ 211.031391][T14683] team0: Device vlan0 is up. Set it down before adding it as a team port [ 211.060301][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3255'. [ 211.062826][T14685] netlink: 'syz.2.3255': attribute type 30 has an invalid length. [ 211.064921][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3255'. [ 211.109724][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 211.109741][ T39] audit: type=1400 audit(1735000001.204:8154): avc: denied { map } for pid=14686 comm="syz.2.3256" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 211.119156][ T39] audit: type=1400 audit(1735000001.204:8155): avc: denied { execute } for pid=14686 comm="syz.2.3256" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 211.157535][T14689] evm: overlay not supported [ 211.194887][T14691] netlink: 'syz.6.3258': attribute type 1 has an invalid length. [ 211.226999][T14691] 8021q: adding VLAN 0 to HW filter on device bond5 [ 211.234462][T14691] bond4: (slave bond5): making interface the new active one [ 211.237835][T14691] bond4: (slave bond5): Enslaving as an active interface with an up link [ 211.269958][T14700] Bluetooth: MGMT ver 1.23 [ 211.272100][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3263'. [ 211.273245][ T39] audit: type=1400 audit(1735000001.364:8156): avc: denied { getopt } for pid=14695 comm="syz.3.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 211.280659][T14704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.282802][T14696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32272 sclass=netlink_route_socket pid=14696 comm=syz.3.3260 [ 211.287163][ T39] audit: type=1400 audit(1735000001.374:8157): avc: denied { ioctl } for pid=14695 comm="syz.3.3260" path="socket:[50990]" dev="sockfs" ino=50990 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 211.326472][T14708] team0: Device vlan0 is up. Set it down before adding it as a team port [ 211.353209][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3267'. [ 211.355981][T14714] netlink: 'syz.2.3267': attribute type 30 has an invalid length. [ 211.381657][T14713] netlink: 'syz.6.3268': attribute type 10 has an invalid length. [ 211.385462][T14711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.458576][T14726] netlink: 'syz.2.3273': attribute type 1 has an invalid length. [ 211.476232][T14726] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.480439][T14726] bond3: (slave bond4): making interface the new active one [ 211.483467][T14726] bond3: (slave bond4): Enslaving as an active interface with an up link [ 211.486105][T14730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.563959][T14739] team0: Device vlan0 is up. Set it down before adding it as a team port [ 211.586252][T14736] kvm: emulating exchange as write [ 211.597973][T14742] netlink: 'syz.2.3279': attribute type 30 has an invalid length. [ 211.667632][T14756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.670141][T14756] IPv6: NLM_F_CREATE should be set when creating new route [ 211.672182][T14756] IPv6: NLM_F_CREATE should be set when creating new route [ 211.674332][T14756] IPv6: NLM_F_CREATE should be set when creating new route [ 211.704555][T14765] netlink: 'syz.5.3285': attribute type 1 has an invalid length. [ 211.741524][T14765] 8021q: adding VLAN 0 to HW filter on device bond5 [ 211.744209][T14765] bond4: (slave bond5): making interface the new active one [ 211.746608][T14765] bond4: (slave bond5): Enslaving as an active interface with an up link [ 211.865217][T14776] team0: Device vlan0 is up. Set it down before adding it as a team port [ 211.897928][T14780] overlayfs: conflicting options: userxattr,verity=on [ 211.961914][T14790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.002218][T14794] 8021q: adding VLAN 0 to HW filter on device bond7 [ 212.006623][T14794] bond6: (slave bond7): making interface the new active one [ 212.008936][T14794] bond6: (slave bond7): Enslaving as an active interface with an up link [ 212.127207][T14805] team0: Device vlan0 is up. Set it down before adding it as a team port [ 212.155787][T14806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.269477][ T39] audit: type=1400 audit(1735000002.354:8158): avc: denied { associate } for pid=14808 comm="syz.2.3302" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 212.278352][ T39] audit: type=1400 audit(1735000002.364:8159): avc: denied { write open } for pid=14808 comm="syz.2.3302" path="/64/file0/bus" dev="9p" ino=37618236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.285975][ T39] audit: type=1400 audit(1735000002.364:8160): avc: denied { execute_no_trans } for pid=14808 comm="syz.2.3302" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F5202864656C6574656429 dev="hugetlbfs" ino=53414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 212.738621][T14820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.857667][T14840] team0: Device vlan0 is up. Set it down before adding it as a team port [ 213.109188][ T64] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 213.705078][T14850] --map-set only usable from mangle table [ 213.743836][T14855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.798030][T14864] __nla_validate_parse: 8 callbacks suppressed [ 213.798042][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3324'. [ 213.798118][T14865] team0: Device vlan0 is up. Set it down before adding it as a team port [ 213.801333][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3324'. [ 213.942414][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3331'. [ 213.996101][T14882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.062811][T14886] 8021q: adding VLAN 0 to HW filter on device bond7 [ 214.079287][T14886] bond6: (slave bond7): making interface the new active one [ 214.082540][T14886] bond6: (slave bond7): Enslaving as an active interface with an up link [ 214.093052][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3335'. [ 214.120420][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3336'. [ 214.122942][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3336'. [ 214.177947][ T39] audit: type=1400 audit(1735000004.264:8161): avc: denied { write } for pid=14892 comm="syz.3.3337" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.366214][T14910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.439553][T14915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14915 comm=syz.5.3345 [ 214.483625][T14918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3346'. [ 214.716805][T14930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.812949][T14940] team0: Device vlan0 is up. Set it down before adding it as a team port [ 215.109172][T14951] block nbd3: Device being setup by another task [ 215.820419][ T5953] block nbd3: Receive control failed (result -32) [ 215.824962][T14950] block nbd3: shutting down sockets [ 216.606572][T14963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.638904][T14969] syzkaller1: entered promiscuous mode [ 216.640660][T14969] syzkaller1: entered allmulticast mode [ 216.644095][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3364'. [ 216.697364][T14971] validate_nla: 35 callbacks suppressed [ 216.697375][T14971] netlink: 'syz.5.3365': attribute type 2 has an invalid length. [ 216.730357][T14979] netlink: 'syz.5.3368': attribute type 1 has an invalid length. [ 216.766574][T14979] 8021q: adding VLAN 0 to HW filter on device bond9 [ 216.769835][T14979] bond8: (slave bond9): making interface the new active one [ 216.772767][T14979] bond8: (slave bond9): Enslaving as an active interface with an up link [ 216.820537][T14980] block nbd3: server does not support multiple connections per device. [ 216.827299][T14992] team0: Device vlan0 is up. Set it down before adding it as a team port [ 216.828879][T14978] block nbd3: shutting down sockets [ 216.855379][T14996] @: renamed from vlan0 (while UP) [ 216.875232][T15004] netlink: 'syz.2.3377': attribute type 10 has an invalid length. [ 216.877884][T15002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.900017][T15010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.923172][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3382'. [ 216.971228][ T39] audit: type=1400 audit(1735000007.064:8162): avc: denied { bind } for pid=15021 comm="syz.5.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.982043][T15022] netlink: 'syz.5.3385': attribute type 39 has an invalid length. [ 217.069855][T15024] block nbd6: server does not support multiple connections per device. [ 217.073653][T15023] block nbd6: shutting down sockets [ 217.113607][T15033] team0: Device vlan0 is up. Set it down before adding it as a team port [ 217.214303][T15041] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 217.219902][T15041] team0: Device br is loopback device. Loopback devices can't be added as a team port [ 217.223031][T15041] A link change request failed with some changes committed already. Interface br may have been left with an inconsistent configuration, please check. [ 217.227695][T15044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.233732][T15045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.236435][T15045] IPv6: NLM_F_CREATE should be set when creating new route [ 217.268383][T15049] IPVS: length: 93 != 24 [ 217.271873][T15049] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3394'. [ 217.333473][ T39] audit: type=1400 audit(1735000007.424:8163): avc: denied { connect } for pid=15060 comm="syz.3.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 217.373438][T15065] dccp_v4_rcv: dropped packet with invalid checksum [ 217.385376][ T39] audit: type=1400 audit(1735000007.474:8164): avc: denied { write } for pid=15060 comm="syz.3.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 217.469957][T15073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.513051][T15059] block nbd6: shutting down sockets [ 217.601876][ T39] audit: type=1400 audit(1735000007.694:8165): avc: denied { ioctl } for pid=15082 comm="syz.3.3408" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 217.601914][T15085] team0: Device vlan0 is up. Set it down before adding it as a team port [ 217.684662][T15090] veth0: entered promiscuous mode [ 217.704291][T15093] netlink: 'syz.2.3412': attribute type 10 has an invalid length. [ 217.707106][T15092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.727313][T15089] veth0: left promiscuous mode [ 217.817967][T15096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.190136][T15126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.310483][T15141] team0: Device vlan0 is up. Set it down before adding it as a team port [ 218.397658][T15149] xt_TPROXY: Can be used only with -p tcp or -p udp [ 218.439865][T15145] block nbd3: shutting down sockets [ 218.489511][ T39] audit: type=1400 audit(1735000008.584:8166): avc: denied { watch watch_reads } for pid=15153 comm="syz.2.3435" path="/proc/186" dev="proc" ino=54604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 218.505957][T15156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.520861][T15158] netlink: 'syz.2.3437': attribute type 10 has an invalid length. [ 218.523219][T15157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.600166][T15165] team0: Device vlan0 is up. Set it down before adding it as a team port [ 218.692296][T15160] tmpfs: Bad value for 'huge' [ 218.700182][T15172] erspan0: entered promiscuous mode [ 218.703424][T15172] erspan0: left promiscuous mode [ 218.780548][T15174] --map-set only usable from mangle table [ 218.870696][T15178] __nla_validate_parse: 5 callbacks suppressed [ 218.870709][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3445'. [ 218.909874][T15180] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3446'. [ 218.918840][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3447'. [ 218.922777][T15184] netlink: 'syz.6.3447': attribute type 30 has an invalid length. [ 218.925218][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3447'. [ 219.004155][T15190] overlayfs: overlapping lowerdir path [ 219.081489][T15202] Cannot find add_set index 0 as target [ 219.163565][T15211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3457'. [ 219.169821][T15211] macvlan0: entered allmulticast mode [ 219.310186][ T5998] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 219.479480][ T5998] usb 11-1: Using ep0 maxpacket: 8 [ 219.483144][ T5998] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 219.486636][ T5998] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.490603][ T5998] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.494469][ T5998] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.498421][ T5998] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.503756][ T5998] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.507416][ T5998] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.751833][ T5998] usb 11-1: usb_control_msg returned -32 [ 219.753945][ T5998] usbtmc 11-1:16.0: can't read capabilities [ 219.881035][T15225] netlink: 'syz.3.3461': attribute type 10 has an invalid length. [ 219.883987][T15224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.964605][T15227] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 219.967293][T15227] UDF-fs: Scanning with blocksize 2048 failed [ 219.970575][T15227] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 219.973002][T15227] UDF-fs: Scanning with blocksize 4096 failed [ 220.248323][ T39] audit: type=1326 audit(1735000010.334:8167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15243 comm="syz.2.3469" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d14385d29 code=0x0 [ 220.384017][T15250] tmpfs: Unknown parameter 'mpve:N' [ 220.483242][ T39] audit: type=1400 audit(1735000010.574:8168): avc: granted { setsecparam } for pid=15256 comm="syz.3.3473" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 221.219199][T15269] block nbd2: shutting down sockets [ 221.317589][T15278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.364621][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3484'. [ 221.464620][T15288] netlink: 'syz.3.3487': attribute type 10 has an invalid length. [ 221.471847][T15288] wlan1: mtu less than device minimum [ 221.474114][T15288] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 221.478702][T15286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.498274][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3488'. [ 221.502474][T15292] netlink: 'syz.5.3488': attribute type 30 has an invalid length. [ 221.506024][T15292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3488'. [ 221.796465][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3495'. [ 221.887068][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3497'. [ 221.890885][T15311] netlink: 'syz.5.3497': attribute type 30 has an invalid length. [ 222.026835][T15320] team0: Device vlan0 is up. Set it down before adding it as a team port [ 222.072790][T15324] --map-set only usable from mangle table [ 222.107825][ T30] usb 11-1: USB disconnect, device number 3 [ 222.154568][ T39] audit: type=1400 audit(1735000012.244:8169): avc: denied { create } for pid=15330 comm="syz.6.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 222.205124][T15335] netlink: 'syz.5.3509': attribute type 1 has an invalid length. [ 222.227211][T15335] 8021q: adding VLAN 0 to HW filter on device bond11 [ 222.232977][T15335] bond10: (slave bond11): making interface the new active one [ 222.235895][T15335] bond10: (slave bond11): Enslaving as an active interface with an up link [ 222.264970][T15337] block nbd6: shutting down sockets [ 222.303851][T15349] --map-set only usable from mangle table [ 222.309959][ T39] audit: type=1326 audit(1735000012.404:8170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.2.3483" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d14385d29 code=0x7fc00000 [ 222.376483][T15359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36369 sclass=netlink_route_socket pid=15359 comm=syz.6.3514 [ 222.506690][T15378] netlink: 'syz.2.3520': attribute type 1 has an invalid length. [ 222.538009][T15378] 8021q: adding VLAN 0 to HW filter on device bond6 [ 222.539969][T15376] block nbd3: shutting down sockets [ 222.544654][T15378] bond5: (slave bond6): making interface the new active one [ 222.548135][T15378] bond5: (slave bond6): Enslaving as an active interface with an up link [ 222.625525][T15389] netlink: 'syz.3.3525': attribute type 30 has an invalid length. [ 222.820576][T15405] overlayfs: overlapping lowerdir path [ 222.859338][T15408] block nbd3: shutting down sockets [ 222.889398][T15410] netlink: 'syz.3.3533': attribute type 1 has an invalid length. [ 222.914576][T15410] 8021q: adding VLAN 0 to HW filter on device bond24 [ 222.917836][T15410] bond23: (slave bond24): making interface the new active one [ 222.921824][T15410] bond23: (slave bond24): Enslaving as an active interface with an up link [ 223.226681][ T39] audit: type=1400 audit(1735000013.314:8171): avc: denied { map } for pid=15431 comm="syz.5.3540" path="pipe:[56341]" dev="pipefs" ino=56341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 223.351924][T15438] overlayfs: failed to clone lowerpath [ 223.405489][T15440] netlink: 'syz.5.3544': attribute type 10 has an invalid length. [ 223.450843][ T39] audit: type=1400 audit(1735000013.544:8172): avc: denied { append } for pid=15441 comm="syz.6.3545" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 223.603210][T15445] netlink: 'syz.6.3546': attribute type 1 has an invalid length. [ 224.055358][T15458] __nla_validate_parse: 6 callbacks suppressed [ 224.055378][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3551'. [ 224.061358][T15458] netlink: 'syz.3.3551': attribute type 30 has an invalid length. [ 224.063953][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3551'. [ 224.235183][T15439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.042961][T15440] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 225.046710][T15445] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 225.047244][T15446] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 225.094954][T15465] overlayfs: overlapping lowerdir path [ 225.114468][T15470] team0: Device vlan0 is up. Set it down before adding it as a team port [ 225.130187][T15472] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3557'. [ 225.156544][ T39] audit: type=1400 audit(1735000015.244:8173): avc: denied { read } for pid=15463 comm="syz.6.3554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 225.208671][T15489] netlink: 'syz.2.3562': attribute type 10 has an invalid length. [ 225.212347][T15489] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 225.216836][T15487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.220653][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'. [ 225.220673][T15492] netlink: 'syz.3.3563': attribute type 30 has an invalid length. [ 225.220682][T15492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3563'. [ 225.290557][T15496] 8021q: adding VLAN 0 to HW filter on device bond26 [ 225.294824][T15496] bond25: (slave bond26): making interface the new active one [ 225.297327][T15496] bond25: (slave bond26): Enslaving as an active interface with an up link [ 225.330340][T15500] overlayfs: overlapping lowerdir path [ 225.657214][T15517] IPv6: addrconf: prefix option has invalid lifetime [ 225.663271][T15517] IPv6: addrconf: prefix option has invalid lifetime [ 225.690635][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3574'. [ 225.693308][T15522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3574'. [ 225.741527][T15524] 8021q: adding VLAN 0 to HW filter on device bond28 [ 225.744315][T15524] bond27: (slave bond28): making interface the new active one [ 225.746765][T15524] bond27: (slave bond28): Enslaving as an active interface with an up link [ 225.775231][T15528] --map-set only usable from mangle table [ 225.855916][T15540] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3581'. [ 225.973728][T15550] fuse: Unknown parameter 'fuse' [ 225.976866][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3585'. [ 225.979750][T15551] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3585'. [ 226.000982][T15552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.054977][T15559] --map-set only usable from mangle table [ 226.377813][T15570] fuse: Bad value for 'fd' [ 227.515717][T15581] validate_nla: 6 callbacks suppressed [ 227.515736][T15581] netlink: 'syz.5.3597': attribute type 30 has an invalid length. [ 227.554565][T15583] Cannot find add_set index 0 as target [ 228.029126][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 228.029445][T15545] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 228.763318][T15598] netlink: 'syz.5.3605': attribute type 1 has an invalid length. [ 228.793775][T15598] 8021q: adding VLAN 0 to HW filter on device bond13 [ 228.797308][T15598] bond12: (slave bond13): making interface the new active one [ 228.801565][T15598] bond12: (slave bond13): Enslaving as an active interface with an up link [ 228.909148][T15606] Cannot find add_set index 0 as target [ 228.909924][T15545] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 228.918095][T15545] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 228.985996][T15615] netlink: 'syz.2.3610': attribute type 10 has an invalid length. [ 228.998660][T15611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.150340][ T39] audit: type=1400 audit(1735000019.244:8174): avc: denied { connect } for pid=15622 comm="syz.5.3614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 229.160650][T15628] team0: Device vlan0 is up. Set it down before adding it as a team port [ 229.329600][T15636] FAULT_INJECTION: forcing a failure. [ 229.329600][T15636] name failslab, interval 1, probability 0, space 0, times 0 [ 229.333283][T15636] CPU: 2 UID: 0 PID: 15636 Comm: syz.3.3617 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 229.336464][T15636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.339588][T15636] Call Trace: [ 229.340560][T15636] [ 229.341437][T15636] dump_stack_lvl+0x16c/0x1f0 [ 229.342818][T15636] should_fail_ex+0x497/0x5b0 [ 229.344267][T15636] ? fs_reclaim_acquire+0xae/0x150 [ 229.345755][T15636] should_failslab+0xc2/0x120 [ 229.347115][T15636] __kmalloc_noprof+0xcb/0x510 [ 229.348512][T15636] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 229.350135][T15636] tomoyo_realpath_from_path+0xb9/0x720 [ 229.351740][T15636] ? tomoyo_path_number_perm+0x235/0x590 [ 229.353359][T15636] ? tomoyo_path_number_perm+0x235/0x590 [ 229.355347][T15636] tomoyo_path_number_perm+0x248/0x590 [ 229.357107][T15636] ? tomoyo_path_number_perm+0x235/0x590 [ 229.358746][T15636] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 229.361096][T15636] ? __pfx_lock_release+0x10/0x10 [ 229.363113][T15636] ? trace_lock_acquire+0x14e/0x1f0 [ 229.365368][T15636] ? lock_acquire+0x2f/0xb0 [ 229.367255][T15636] ? __fget_files+0x40/0x3a0 [ 229.369284][T15636] ? __fget_files+0x206/0x3a0 [ 229.371309][T15636] security_file_ioctl+0x9b/0x240 [ 229.373012][T15636] __x64_sys_ioctl+0xb7/0x200 [ 229.374412][T15636] do_syscall_64+0xcd/0x250 [ 229.375778][T15636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.377504][T15636] RIP: 0033:0x7fe590385d29 [ 229.378799][T15636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.380850][T15645] block nbd3: shutting down sockets [ 229.385836][T15636] RSP: 002b:00007fe591108038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.385885][T15636] RAX: ffffffffffffffda RBX: 00007fe590575fa0 RCX: 00007fe590385d29 [ 229.385897][T15636] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 229.396848][T15636] RBP: 00007fe591108090 R08: 0000000000000000 R09: 0000000000000000 [ 229.399255][T15636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.402243][T15636] R13: 0000000000000000 R14: 00007fe590575fa0 R15: 00007ffda93c7388 [ 229.404698][T15636] [ 229.406262][T15636] ERROR: Out of memory at tomoyo_realpath_from_path. [ 229.535669][T15652] netlink: 'syz.2.3622': attribute type 1 has an invalid length. [ 229.558294][T15652] 8021q: adding VLAN 0 to HW filter on device bond8 [ 229.559807][T15657] __nla_validate_parse: 7 callbacks suppressed [ 229.559819][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3623'. [ 229.562081][T15652] bond7: (slave bond8): making interface the new active one [ 229.568798][T15652] bond7: (slave bond8): Enslaving as an active interface with an up link [ 229.643189][T15666] team0: Device vlan0 is up. Set it down before adding it as a team port [ 229.866526][T15681] netlink: 'syz.6.3632': attribute type 10 has an invalid length. [ 229.875515][T15681] mac80211_hwsim hwsim65 wlan1: entered promiscuous mode [ 229.878049][T15681] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 229.882287][T15680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.087049][T15684] block nbd3: shutting down sockets [ 230.113865][ T5953] Bluetooth: hci4: command 0x0c1a tx timeout [ 230.154483][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3635'. [ 230.182952][ T39] audit: type=1400 audit(1735000020.274:8175): avc: denied { execute } for pid=15689 comm="syz.3.3636" path="/dev/dri/card7" dev="devtmpfs" ino=2905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 230.322585][T15698] --map-set only usable from mangle table [ 230.425960][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3646'. [ 230.500689][T15719] --map-set only usable from mangle table [ 230.565675][ T66] block nbd2: Receive control failed (result -32) [ 230.565873][T15672] block nbd2: shutting down sockets [ 230.569712][T15730] netlink: 'syz.3.3655': attribute type 10 has an invalid length. [ 230.572959][T15730] wlan1: mtu less than device minimum [ 230.574544][T15730] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 230.577425][T15728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.608726][T15732] Cannot find add_set index 0 as target [ 230.655569][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3658'. [ 230.667285][ T39] audit: type=1400 audit(1735000020.754:8176): avc: denied { watch_mount } for pid=15731 comm="syz.5.3656" path="/207" dev="tmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 230.678685][T15709] block nbd6: shutting down sockets [ 230.808571][T15747] --map-set only usable from mangle table [ 231.345992][T15759] sg_write: process 286 (syz.2.3667) changed security contexts after opening file descriptor, this is not allowed. [ 231.350642][T15759] program syz.2.3667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.044439][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3669'. [ 232.205704][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 232.304832][T15778] --map-set only usable from mangle table [ 232.403910][T15787] netlink: 'syz.3.3677': attribute type 1 has an invalid length. [ 232.750041][T15761] team0: Device vlan0 is up. Set it down before adding it as a team port [ 232.765594][T15788] 8021q: adding VLAN 0 to HW filter on device bond30 [ 232.768555][T15788] bond29: (slave bond30): making interface the new active one [ 232.771262][T15788] bond29: (slave bond30): Enslaving as an active interface with an up link [ 232.789685][T15797] netlink: 'syz.2.3679': attribute type 10 has an invalid length. [ 232.792338][T15796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.911791][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3688'. [ 232.914864][T15822] netlink: 'syz.6.3688': attribute type 30 has an invalid length. [ 232.918429][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3688'. [ 232.920628][T15820] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3687'. [ 232.925065][T15819] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3687'. [ 232.952372][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3689'. [ 232.985460][T15827] netlink: 'syz.6.3691': attribute type 1 has an invalid length. [ 233.001490][T15827] 8021q: adding VLAN 0 to HW filter on device bond9 [ 233.004136][T15827] bond8: (slave bond9): making interface the new active one [ 233.006538][T15827] bond8: (slave bond9): Enslaving as an active interface with an up link [ 233.028272][T15833] FAULT_INJECTION: forcing a failure. [ 233.028272][T15833] name failslab, interval 1, probability 0, space 0, times 0 [ 233.033461][T15833] CPU: 3 UID: 0 PID: 15833 Comm: syz.3.3686 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 233.036845][T15833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.040073][T15833] Call Trace: [ 233.041113][T15833] [ 233.042017][T15833] dump_stack_lvl+0x16c/0x1f0 [ 233.043430][T15833] should_fail_ex+0x497/0x5b0 [ 233.044793][T15833] ? fs_reclaim_acquire+0xae/0x150 [ 233.046316][T15833] should_failslab+0xc2/0x120 [ 233.047695][T15833] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 233.049275][T15833] ? lockdep_init_map_type+0x16d/0x7d0 [ 233.050914][T15833] ? security_inode_alloc+0x3b/0x2b0 [ 233.052456][T15833] security_inode_alloc+0x3b/0x2b0 [ 233.053979][T15833] inode_init_always_gfp+0xce4/0x1030 [ 233.055558][T15833] alloc_inode+0x82/0x230 [ 233.056812][T15833] new_inode+0x22/0x210 [ 233.058056][T15833] ? start_creating.part.0+0x25d/0x3a0 [ 233.059661][T15833] debugfs_create_dir+0xdd/0x5f0 [ 233.061126][T15833] ? device_create_file+0xfa/0x1e0 [ 233.062633][T15833] nbd_start_device+0x33e/0xd70 [ 233.064072][T15833] ? bpf_lsm_capable+0x9/0x10 [ 233.065474][T15833] nbd_ioctl+0x21a/0xfd0 [ 233.066712][T15833] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 233.068588][T15833] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 233.070510][T15833] ? __pfx_nbd_ioctl+0x10/0x10 [ 233.071931][T15833] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 233.073928][T15833] ? __pfx_lock_release+0x10/0x10 [ 233.075398][T15833] ? __pfx_nbd_ioctl+0x10/0x10 [ 233.076797][T15833] blkdev_ioctl+0x276/0x6d0 [ 233.078153][T15833] ? __pfx_blkdev_ioctl+0x10/0x10 [ 233.079650][T15833] ? selinux_file_ioctl+0x180/0x270 [ 233.081183][T15833] ? selinux_file_ioctl+0xb4/0x270 [ 233.082687][T15833] ? __pfx_blkdev_ioctl+0x10/0x10 [ 233.084145][T15833] __x64_sys_ioctl+0x190/0x200 [ 233.085635][T15833] do_syscall_64+0xcd/0x250 [ 233.086961][T15833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.088675][T15833] RIP: 0033:0x7fe590385d29 [ 233.090029][T15833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.095547][T15833] RSP: 002b:00007fe5910e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.097954][T15833] RAX: ffffffffffffffda RBX: 00007fe590576080 RCX: 00007fe590385d29 [ 233.100243][T15833] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 233.102534][T15833] RBP: 00007fe5910e7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.105001][T15833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.107306][T15833] R13: 0000000000000001 R14: 00007fe590576080 R15: 00007ffda93c7388 [ 233.109671][T15833] [ 233.114583][T15833] debugfs: out of free dentries, can not create directory 'nbd3' [ 233.120333][T15833] block nbd3: Failed to create debugfs dir for 'nbd3' [ 233.189197][T15817] block nbd3: shutting down sockets [ 233.485687][T15842] block nbd2: shutting down sockets [ 233.556499][T15845] CIFS mount error: No usable UNC path provided in device string! [ 233.556499][T15845] [ 233.559670][T15845] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 234.847490][T15855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.873694][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3702'. [ 234.876143][T15859] QAT: failed to copy from user. [ 234.877032][T15858] netlink: 'syz.3.3702': attribute type 30 has an invalid length. [ 234.881412][T15858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3702'. [ 234.911788][T15861] netlink: 'syz.3.3703': attribute type 10 has an invalid length. [ 234.914333][T15861] wlan1: mtu less than device minimum [ 234.915913][T15861] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 234.928422][T15860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.951457][T15865] --map-set only usable from mangle table [ 234.954862][ T39] audit: type=1326 audit(1735000025.044:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.5.3706" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec0585d29 code=0x0 [ 234.993477][T15869] netlink: 'syz.2.3707': attribute type 10 has an invalid length. [ 234.996489][T15869] bond0: (slave wlan1): Releasing backup interface [ 235.001041][T15868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.042013][T15870] block nbd6: Device being setup by another task [ 235.151182][T15864] block nbd6: shutting down sockets [ 235.310522][T15873] block nbd6: shutting down sockets [ 235.441606][T15879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.458921][T15881] team0: Device vlan0 is up. Set it down before adding it as a team port [ 235.487091][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3714'. [ 235.533574][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3716'. [ 235.535950][T15889] netlink: 'syz.2.3716': attribute type 30 has an invalid length. [ 235.537970][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3716'. [ 235.555165][T15891] --map-set only usable from mangle table [ 236.110081][T15954] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 237.020769][T16074] mac80211_hwsim hwsim42 syzkaller0: entered allmulticast mode [ 237.136128][T16095] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 237.142643][T16094] netlink: 'syz.5.3815': attribute type 10 has an invalid length. [ 237.145492][T16093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.201744][T16100] binder: 16092:16100 ioctl c0306201 200003c0 returned -22 [ 237.277483][T16102] block nbd6: Device being setup by another task [ 237.339377][T16102] FAULT_INJECTION: forcing a failure. [ 237.339377][T16102] name failslab, interval 1, probability 0, space 0, times 0 [ 237.343464][T16102] CPU: 1 UID: 0 PID: 16102 Comm: syz.6.3817 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 237.346850][T16102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.350213][T16102] Call Trace: [ 237.351306][T16102] [ 237.352263][T16102] dump_stack_lvl+0x16c/0x1f0 [ 237.353736][T16102] should_fail_ex+0x497/0x5b0 [ 237.355205][T16102] ? fs_reclaim_acquire+0xae/0x150 [ 237.356681][T16102] should_failslab+0xc2/0x120 [ 237.358044][T16102] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 237.360005][T16102] ? __d_alloc+0x31/0xaa0 [ 237.361314][T16102] __d_alloc+0x31/0xaa0 [ 237.362534][T16102] d_alloc+0x4a/0x1e0 [ 237.363704][T16102] d_alloc_parallel+0xe9/0x12b0 [ 237.365120][T16102] ? __pfx_d_alloc_parallel+0x10/0x10 [ 237.366679][T16102] ? lockdep_init_map_type+0x16d/0x7d0 [ 237.368292][T16102] ? mark_lock+0xb5/0xc60 [ 237.369601][T16102] ? lockdep_init_map_type+0x16d/0x7d0 [ 237.371183][T16102] __lookup_slow+0x194/0x460 [ 237.372543][T16102] ? __pfx___lookup_slow+0x10/0x10 [ 237.374018][T16102] ? __pfx_lock_release+0x10/0x10 [ 237.375530][T16102] ? d_lookup+0xe9/0x180 [ 237.376772][T16102] lookup_one_len+0x181/0x1b0 [ 237.378292][T16102] ? __pfx_lookup_one_len+0x10/0x10 [ 237.379896][T16102] ? mntput+0x10/0x90 [ 237.381095][T16102] start_creating.part.0+0x12f/0x3a0 [ 237.382688][T16102] __debugfs_create_file+0xa5/0x660 [ 237.384250][T16102] debugfs_create_file_full+0x6d/0xa0 [ 237.385844][T16102] nbd_start_device+0x3a9/0xd70 [ 237.387251][T16102] ? bpf_lsm_capable+0x9/0x10 [ 237.388607][T16102] nbd_ioctl+0x21a/0xfd0 [ 237.389894][T16102] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 237.391807][T16102] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 237.393895][T16102] ? __pfx_nbd_ioctl+0x10/0x10 [ 237.395423][T16102] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 237.397483][T16102] ? __pfx_lock_release+0x10/0x10 [ 237.399007][T16102] ? __pfx_nbd_ioctl+0x10/0x10 [ 237.400605][T16102] blkdev_ioctl+0x276/0x6d0 [ 237.402385][T16102] ? __pfx_blkdev_ioctl+0x10/0x10 [ 237.403901][T16102] ? selinux_file_ioctl+0x180/0x270 [ 237.405916][T16102] ? selinux_file_ioctl+0xb4/0x270 [ 237.407885][T16102] ? __pfx_blkdev_ioctl+0x10/0x10 [ 237.409815][T16102] __x64_sys_ioctl+0x190/0x200 [ 237.411360][T16102] do_syscall_64+0xcd/0x250 [ 237.412942][T16102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.414691][T16102] RIP: 0033:0x7f1938785d29 [ 237.416018][T16102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.421577][T16102] RSP: 002b:00007f1939667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.423964][T16102] RAX: ffffffffffffffda RBX: 00007f1938976080 RCX: 00007f1938785d29 [ 237.426247][T16102] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 237.429200][T16102] RBP: 00007f1939667090 R08: 0000000000000000 R09: 0000000000000000 [ 237.432075][T16102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.435247][T16102] R13: 0000000000000000 R14: 00007f1938976080 R15: 00007ffd1e145558 [ 237.438288][T16102] [ 237.493874][T16097] block nbd6: shutting down sockets [ 237.512440][T16113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.560549][T16115] bond0: entered allmulticast mode [ 237.562149][T16115] bond_slave_0: entered allmulticast mode [ 237.563819][T16115] bond_slave_1: entered allmulticast mode [ 237.575264][T16121] team0: Device vlan0 is up. Set it down before adding it as a team port [ 237.612708][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3824'. [ 237.646545][ T39] audit: type=1400 audit(1735000027.734:8178): avc: denied { read } for pid=16124 comm="syz.6.3825" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 237.660668][ T39] audit: type=1800 audit(1735000027.754:8179): pid=16125 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3825" name="/" dev="9p" ino=2 res=0 errno=0 [ 237.810397][T16134] netlink: 'syz.6.3827': attribute type 10 has an invalid length. [ 237.816825][T16134] bond0: (slave wlan1): Releasing backup interface [ 237.819305][T16134] mac80211_hwsim hwsim65 wlan1: left promiscuous mode [ 237.823220][T16132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.096922][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3831'. [ 238.100719][T16142] netlink: 'syz.2.3831': attribute type 30 has an invalid length. [ 238.104369][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3831'. [ 238.361220][T16149] --map-set only usable from mangle table [ 238.616773][T16163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.658721][T16170] team0: Device vlan0 is up. Set it down before adding it as a team port [ 238.671105][T16167] macsec1: entered promiscuous mode [ 238.700906][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3843'. [ 238.750939][T16172] block nbd3: Device being setup by another task [ 238.764896][T16205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.767104][T16205] IPv6: NLM_F_CREATE should be set when creating new route [ 238.805540][T16208] netlink: 'syz.5.3848': attribute type 10 has an invalid length. [ 238.805742][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3847'. [ 238.811538][T16208] bond0: (slave wlan1): Releasing backup interface [ 238.814049][T16209] netlink: 'syz.6.3847': attribute type 30 has an invalid length. [ 238.820299][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.888936][T16172] FAULT_INJECTION: forcing a failure. [ 238.888936][T16172] name failslab, interval 1, probability 0, space 0, times 0 [ 238.894311][T16172] CPU: 0 UID: 0 PID: 16172 Comm: syz.3.3840 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 238.898735][T16172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.902716][T16172] Call Trace: [ 238.903876][T16172] [ 238.904933][T16172] dump_stack_lvl+0x16c/0x1f0 [ 238.906652][T16172] should_fail_ex+0x497/0x5b0 [ 238.908259][T16172] ? fs_reclaim_acquire+0xae/0x150 [ 238.909863][T16172] should_failslab+0xc2/0x120 [ 238.911303][T16172] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 238.912930][T16172] ? __asan_memcpy+0x3c/0x60 [ 238.914313][T16172] ? __kernfs_new_node+0xd3/0x890 [ 238.915811][T16172] __kernfs_new_node+0xd3/0x890 [ 238.917375][T16172] ? kfree_const+0x55/0x60 [ 238.918752][T16172] ? blk_mq_register_hctx+0x120/0x470 [ 238.920454][T16172] ? blk_mq_sysfs_register_hctxs+0x13b/0x190 [ 238.922576][T16172] ? __pfx___kernfs_new_node+0x10/0x10 [ 238.924751][T16172] ? hlock_class+0x4e/0x130 [ 238.926822][T16172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.928762][T16172] ? __pfx_mark_lock+0x10/0x10 [ 238.930495][T16172] kernfs_new_node+0x186/0x240 [ 238.932075][T16172] kernfs_create_dir_ns+0x4c/0x150 [ 238.933646][T16172] sysfs_create_dir_ns+0x13b/0x2b0 [ 238.935160][T16172] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 238.936824][T16172] ? kfree+0x14f/0x4b0 [ 238.938032][T16172] kobject_add_internal+0x2c8/0x990 [ 238.939720][T16172] kobject_add+0x16f/0x240 [ 238.941190][T16172] ? __pfx_kobject_add+0x10/0x10 [ 238.942747][T16172] ? __pfx_xa_find+0x10/0x10 [ 238.944201][T16172] blk_mq_register_hctx+0x120/0x470 [ 238.945904][T16172] blk_mq_sysfs_register_hctxs+0x13b/0x190 [ 238.947919][T16172] ? __pfx_blk_mq_sysfs_register_hctxs+0x10/0x10 [ 238.950110][T16172] __blk_mq_update_nr_hw_queues+0x5b1/0x14e0 [ 238.952198][T16172] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 238.954396][T16172] ? nbd_ioctl+0x151/0xfd0 [ 238.955879][T16172] ? __pfx___mutex_lock+0x10/0x10 [ 238.957391][T16172] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 238.959016][T16172] nbd_start_device+0x15b/0xd70 [ 238.960497][T16172] ? bpf_lsm_capable+0x9/0x10 [ 238.961924][T16172] nbd_ioctl+0x21a/0xfd0 [ 238.963241][T16172] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 238.965139][T16172] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 238.967012][T16172] ? __pfx_nbd_ioctl+0x10/0x10 [ 238.968414][T16172] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 238.970425][T16172] ? __pfx_lock_release+0x10/0x10 [ 238.971982][T16172] ? __pfx_nbd_ioctl+0x10/0x10 [ 238.973424][T16172] blkdev_ioctl+0x276/0x6d0 [ 238.974781][T16172] ? __pfx_blkdev_ioctl+0x10/0x10 [ 238.976295][T16172] ? selinux_file_ioctl+0x180/0x270 [ 238.977869][T16172] ? selinux_file_ioctl+0xb4/0x270 [ 238.979410][T16172] ? __pfx_blkdev_ioctl+0x10/0x10 [ 238.980935][T16172] __x64_sys_ioctl+0x190/0x200 [ 238.982275][T16172] do_syscall_64+0xcd/0x250 [ 238.983575][T16172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.985302][T16172] RIP: 0033:0x7fe590385d29 [ 238.986619][T16172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.992411][T16172] RSP: 002b:00007fe5910e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.994785][T16172] RAX: ffffffffffffffda RBX: 00007fe590576080 RCX: 00007fe590385d29 [ 238.997146][T16172] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 238.999583][T16172] RBP: 00007fe5910e7090 R08: 0000000000000000 R09: 0000000000000000 [ 239.001926][T16172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.004284][T16172] R13: 0000000000000000 R14: 00007fe590576080 R15: 00007ffda93c7388 [ 239.006871][T16172] [ 239.009105][T16172] kobject: kobject_add_internal failed for 0 (error: -12 parent: mq) [ 239.060728][T16165] block nbd3: shutting down sockets [ 239.107946][ T39] audit: type=1400 audit(1735000029.194:8180): avc: denied { setattr } for pid=16213 comm="syz.3.3850" name="cuse" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 239.198413][T16219] --map-set only usable from mangle table [ 239.278802][ T39] audit: type=1400 audit(1735000029.364:8181): avc: denied { map } for pid=16222 comm="syz.3.3853" path="/462/file0/file0" dev="9p" ino=37618196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 239.347966][ T39] audit: type=1400 audit(1735000029.434:8182): avc: denied { create } for pid=16222 comm="syz.3.3853" name="file6" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 239.357036][ T39] audit: type=1400 audit(1735000029.444:8183): avc: denied { connect } for pid=16222 comm="syz.3.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 239.494673][T16234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.627327][T16245] netlink: 'syz.3.3863': attribute type 30 has an invalid length. [ 239.628082][T16246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.632666][T16246] IPv6: NLM_F_CREATE should be set when creating new route [ 239.718022][T16257] 9pnet_fd: p9_fd_create_tcp (16257): problem connecting socket to 127.0.0.1 [ 239.757418][T16262] Cannot find add_set index 0 as target [ 239.788274][T16264] netlink: 'syz.5.3870': attribute type 10 has an invalid length. [ 239.794568][T16263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.943296][T16268] ------------[ cut here ]------------ [ 239.944921][T16268] kernfs: can not remove 'nr_tags', no directory [ 239.946854][T16268] WARNING: CPU: 0 PID: 16268 at fs/kernfs/dir.c:1683 kernfs_remove_by_name_ns+0x110/0x130 [ 239.949802][T16268] Modules linked in: [ 239.951128][T16268] CPU: 0 UID: 0 PID: 16268 Comm: syz.3.3866 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 239.955898][T16268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 239.959385][T16268] RIP: 0010:kernfs_remove_by_name_ns+0x110/0x130 [ 239.961218][T16268] Code: 5f ff bb fe ff ff ff 89 d8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 61 fc 5f ff 90 48 c7 c7 60 12 82 8b 4c 89 e6 e8 e1 35 20 ff 90 <0f> 0b 90 90 eb cd e8 15 a8 c2 ff e9 54 ff ff ff e8 0b a8 c2 ff e9 [ 239.966553][T16268] RSP: 0018:ffffc90006737840 EFLAGS: 00010282 [ 239.968273][T16268] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff815a50d9 [ 239.970716][T16268] RDX: ffff88805f892440 RSI: ffffffff815a50e6 RDI: 0000000000000001 [ 239.972956][T16268] RBP: ffffffff8ecbed00 R08: 0000000000000001 R09: 0000000000000000 [ 239.975048][T16268] R10: 0000000000000000 R11: 0000000000000005 R12: ffffffff8bcf9760 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 239.977157][T16268] R13: 0000000000000000 R14: ffffffff8bcf9680 R15: 0000000000000004 [ 239.980069][T16268] FS: 00007fe5910e76c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 239.982890][T16268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.984914][T16268] CR2: 000055555ec16808 CR3: 000000004674a000 CR4: 0000000000352ef0 [ 239.987372][T16268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.989810][T16268] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.992073][T16268] Call Trace: [ 239.993051][T16268] [ 239.993914][T16268] ? __warn+0xea/0x3c0 [ 239.995100][T16268] ? kernfs_remove_by_name_ns+0x110/0x130 [ 239.996780][T16268] ? report_bug+0x3c0/0x580 [ 239.998111][T16268] ? handle_bug+0x54/0xa0 [ 239.999812][T16268] ? exc_invalid_op+0x17/0x50 [ 240.001176][T16268] ? asm_exc_invalid_op+0x1a/0x20 [ 240.002636][T16268] ? __warn_printk+0x199/0x350 [ 240.004020][T16268] ? __warn_printk+0x1a6/0x350 [ 240.005412][T16268] ? kernfs_remove_by_name_ns+0x110/0x130 [ 240.007051][T16268] remove_files+0x96/0x1c0 [ 240.008355][T16268] sysfs_remove_group+0x8b/0x180 [ 240.010056][T16268] sysfs_remove_groups+0x60/0xa0 [ 240.011638][T16268] __kobject_del+0x89/0x1f0 [ 240.012981][T16268] kobject_del+0x3f/0x60 [ 240.014227][T16268] blk_mq_sysfs_unregister_hctxs+0x258/0x2d0 [ 240.016079][T16268] ? __pfx_blk_mq_sysfs_unregister_hctxs+0x10/0x10 [ 240.018094][T16268] ? __pfx_blk_mq_debugfs_unregister_hctxs+0x10/0x10 [ 240.020031][T16268] ? __blk_mq_unfreeze_queue+0x161/0x210 [ 240.021533][T16268] __blk_mq_update_nr_hw_queues+0x93f/0x14e0 [ 240.023240][T16268] ? __mutex_trylock_common+0xea/0x250 [ 240.024856][T16268] ? __pfx___mutex_trylock_common+0x10/0x10 [ 240.026547][T16268] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 240.028172][T16268] ? rcu_is_watching+0x12/0xc0 [ 240.029721][T16268] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 240.031562][T16268] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 240.033208][T16268] ? __pfx___mutex_lock+0x10/0x10 [ 240.034662][T16268] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.036171][T16268] ? __mutex_lock+0x1cc/0xa60 [ 240.037548][T16268] ? nbd_ioctl+0x151/0xfd0 [ 240.039063][T16268] ? __pfx___mutex_lock+0x10/0x10 [ 240.040673][T16268] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 240.042357][T16268] nbd_start_device+0x15b/0xd70 [ 240.043785][T16268] ? bpf_lsm_capable+0x9/0x10 [ 240.045215][T16268] nbd_ioctl+0x21a/0xfd0 [ 240.046456][T16268] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 240.048364][T16268] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 240.050541][T16268] ? __pfx_nbd_ioctl+0x10/0x10 [ 240.051975][T16268] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 240.053970][T16268] ? __pfx_lock_release+0x10/0x10 [ 240.055459][T16268] ? __pfx_nbd_ioctl+0x10/0x10 [ 240.056911][T16268] blkdev_ioctl+0x276/0x6d0 [ 240.058258][T16268] ? __pfx_blkdev_ioctl+0x10/0x10 [ 240.059837][T16268] ? selinux_file_ioctl+0x180/0x270 [ 240.061395][T16268] ? selinux_file_ioctl+0xb4/0x270 [ 240.062916][T16268] ? __pfx_blkdev_ioctl+0x10/0x10 [ 240.064404][T16268] __x64_sys_ioctl+0x190/0x200 [ 240.065987][T16268] do_syscall_64+0xcd/0x250 [ 240.067734][T16268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.070096][T16268] RIP: 0033:0x7fe590385d29 [ 240.071903][T16268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.077639][T16268] RSP: 002b:00007fe5910e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.080184][T16268] RAX: ffffffffffffffda RBX: 00007fe590576080 RCX: 00007fe590385d29 [ 240.082570][T16268] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 240.085088][T16268] RBP: 00007fe5910e7090 R08: 0000000000000000 R09: 0000000000000000 [ 240.087446][T16268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.089868][T16268] R13: 0000000000000001 R14: 00007fe590576080 R15: 00007ffda93c7388 [ 240.092255][T16268] [ 240.093177][T16268] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 240.095282][T16268] CPU: 0 UID: 0 PID: 16268 Comm: syz.3.3866 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 240.098361][T16268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.101514][T16268] Call Trace: [ 240.102498][T16268] [ 240.103372][T16268] dump_stack_lvl+0x3d/0x1f0 [ 240.104726][T16268] panic+0x71d/0x800 [ 240.105902][T16268] ? __pfx_panic+0x10/0x10 [ 240.107223][T16268] ? show_trace_log_lvl+0x29d/0x3d0 [ 240.108855][T16268] ? check_panic_on_warn+0x1f/0xb0 [ 240.110386][T16268] ? kernfs_remove_by_name_ns+0x110/0x130 [ 240.112079][T16268] check_panic_on_warn+0xab/0xb0 [ 240.113537][T16268] __warn+0xf6/0x3c0 [ 240.114702][T16268] ? kernfs_remove_by_name_ns+0x110/0x130 [ 240.116344][T16268] report_bug+0x3c0/0x580 [ 240.117612][T16268] handle_bug+0x54/0xa0 [ 240.118831][T16268] exc_invalid_op+0x17/0x50 [ 240.120172][T16268] asm_exc_invalid_op+0x1a/0x20 [ 240.121595][T16268] RIP: 0010:kernfs_remove_by_name_ns+0x110/0x130 [ 240.123445][T16268] Code: 5f ff bb fe ff ff ff 89 d8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 61 fc 5f ff 90 48 c7 c7 60 12 82 8b 4c 89 e6 e8 e1 35 20 ff 90 <0f> 0b 90 90 eb cd e8 15 a8 c2 ff e9 54 ff ff ff e8 0b a8 c2 ff e9 [ 240.129983][T16268] RSP: 0018:ffffc90006737840 EFLAGS: 00010282 [ 240.132045][T16268] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff815a50d9 [ 240.134399][T16268] RDX: ffff88805f892440 RSI: ffffffff815a50e6 RDI: 0000000000000001 [ 240.136731][T16268] RBP: ffffffff8ecbed00 R08: 0000000000000001 R09: 0000000000000000 [ 240.139013][T16268] R10: 0000000000000000 R11: 0000000000000005 R12: ffffffff8bcf9760 [ 240.141541][T16268] R13: 0000000000000000 R14: ffffffff8bcf9680 R15: 0000000000000004 [ 240.144074][T16268] ? __warn_printk+0x199/0x350 [ 240.145628][T16268] ? __warn_printk+0x1a6/0x350 [ 240.147183][T16268] remove_files+0x96/0x1c0 [ 240.148638][T16268] sysfs_remove_group+0x8b/0x180 [ 240.150802][T16268] sysfs_remove_groups+0x60/0xa0 [ 240.152817][T16268] __kobject_del+0x89/0x1f0 [ 240.154302][T16268] kobject_del+0x3f/0x60 [ 240.155658][T16268] blk_mq_sysfs_unregister_hctxs+0x258/0x2d0 [ 240.157537][T16268] ? __pfx_blk_mq_sysfs_unregister_hctxs+0x10/0x10 [ 240.159568][T16268] ? __pfx_blk_mq_debugfs_unregister_hctxs+0x10/0x10 [ 240.161538][T16268] ? __blk_mq_unfreeze_queue+0x161/0x210 [ 240.163160][T16268] __blk_mq_update_nr_hw_queues+0x93f/0x14e0 [ 240.164972][T16268] ? __mutex_trylock_common+0xea/0x250 [ 240.166626][T16268] ? __pfx___mutex_trylock_common+0x10/0x10 [ 240.168406][T16268] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 240.170675][T16268] ? rcu_is_watching+0x12/0xc0 [ 240.172909][T16268] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 240.175898][T16268] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 240.178532][T16268] ? __pfx___mutex_lock+0x10/0x10 [ 240.180574][T16268] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.182559][T16268] ? __mutex_lock+0x1cc/0xa60 [ 240.183938][T16268] ? nbd_ioctl+0x151/0xfd0 [ 240.185288][T16268] ? __pfx___mutex_lock+0x10/0x10 [ 240.186765][T16268] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 240.188368][T16268] nbd_start_device+0x15b/0xd70 [ 240.189906][T16268] ? bpf_lsm_capable+0x9/0x10 [ 240.191389][T16268] nbd_ioctl+0x21a/0xfd0 [ 240.192745][T16268] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 240.194856][T16268] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 240.197281][T16268] ? __pfx_nbd_ioctl+0x10/0x10 [ 240.198897][T16268] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 240.200933][T16268] ? __pfx_lock_release+0x10/0x10 [ 240.202395][T16268] ? __pfx_nbd_ioctl+0x10/0x10 [ 240.203732][T16268] blkdev_ioctl+0x276/0x6d0 [ 240.205081][T16268] ? __pfx_blkdev_ioctl+0x10/0x10 [ 240.206543][T16268] ? selinux_file_ioctl+0x180/0x270 [ 240.208038][T16268] ? selinux_file_ioctl+0xb4/0x270 [ 240.209554][T16268] ? __pfx_blkdev_ioctl+0x10/0x10 [ 240.211003][T16268] __x64_sys_ioctl+0x190/0x200 [ 240.212916][T16268] do_syscall_64+0xcd/0x250 [ 240.214295][T16268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.216021][T16268] RIP: 0033:0x7fe590385d29 [ 240.217323][T16268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.222840][T16268] RSP: 002b:00007fe5910e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.225156][T16268] RAX: ffffffffffffffda RBX: 00007fe590576080 RCX: 00007fe590385d29 [ 240.228073][T16268] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 240.230438][T16268] RBP: 00007fe5910e7090 R08: 0000000000000000 R09: 0000000000000000 [ 240.232693][T16268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.235008][T16268] R13: 0000000000000001 R14: 00007fe590576080 R15: 00007ffda93c7388 [ 240.237344][T16268] [ 240.238997][T16268] Kernel Offset: disabled [ 240.240453][T16268] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:44:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851bc765 RDI=ffffffff9ab0fb60 RBP=ffffffff9ab0fb20 RSP=ffffc900067371a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000009 R12=0000000000000000 R13=0000000000000020 R14=ffffffff851bc700 R15=0000000000000000 RIP=ffffffff851bc78f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe5910e76c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555ec16808 CR3=000000004674a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557cbd48df 000055557cbd3fe0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557cb5f534 000055557cb5f530 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557cbd6cbf 000055557cbd61e0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100002100006025a f605ac8808000100 0000080604011bde 0010000020808080 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 776f6c01ffffffff ffffffffef080f80 030079616c726576 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30656c69662f2e01 ffffffffffffffff f1080f92037a0200 0f90037269647265 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010f800407dbfe10 000e800405800400 10000a0132ac5e02 000fa2037402000f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a00330656c69662f 2e01ffffffffffff fffff1080f92037a 02000f9003726964 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265776f6c01ffff ffffffffffffef08 0f80030079616c72 65766f01ffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffef080e80 030030656c69662f 2e01ffffffffffff ffffef0805800300 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001010a18 0000005c00000000 4001000800040000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000023853f RBX=0000000000000001 RCX=ffffffff8b29c759 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1ed60 RBP=ffffed10039df910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801cefc880 R14=ffffffff905f3550 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c34c08b CR3=0000000023426000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=a99fd531a99fd531 a99fd531a99fd531 a99fd531a99fd531 a99fd531a99fd531 a99fd531a99fd531 a99fd531a99fd531 a99fd531a99fd531 a99fd531a99fd531 ZMM22=65e95bd865e95bd8 65e95bd865e95bd8 65e95bd865e95bd8 65e95bd865e95bd8 65e95bd865e95bd8 65e95bd865e95bd8 65e95bd865e95bd8 65e95bd865e95bd8 ZMM23=39dfd46439dfd464 39dfd46439dfd464 39dfd46439dfd464 39dfd46439dfd464 39dfd46439dfd464 39dfd46439dfd464 39dfd46439dfd464 39dfd46439dfd464 ZMM24=074a0f7f074a0f7f 074a0f7f074a0f7f 074a0f7f074a0f7f 074a0f7f074a0f7f 074a0f7f074a0f7f 074a0f7f074a0f7f 074a0f7f074a0f7f 074a0f7f074a0f7f ZMM25=dadb4e98dadb4e98 dadb4e98dadb4e98 dadb4e98dadb4e98 dadb4e98dadb4e98 dadb4e98dadb4e98 dadb4e98dadb4e98 dadb4e98dadb4e98 dadb4e98dadb4e98 ZMM26=1084c7341084c734 1084c7341084c734 1084c7341084c734 1084c7341084c734 1084c7341084c734 1084c7341084c734 1084c7341084c734 1084c7341084c734 ZMM27=157bc24a157bc24a 157bc24a157bc24a 157bc24a157bc24a 157bc24a157bc24a 157bc24a157bc24a 157bc24a157bc24a 157bc24a157bc24a 157bc24a157bc24a ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3511000035110000 3511000035110000 3511000035110000 3511000035110000 3511000035110000 3511000035110000 3511000035110000 3511000035110000 info registers vcpu 2 CPU#2 RAX=00000000001de391 RBX=0000000000000002 RCX=ffffffff8b29c759 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1ed60 RBP=ffffed1003ad1000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d688000 R14=ffffffff905f3550 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2b95da CR3=00000000416f4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda93c7720 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe590402a3a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe590402a47 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe590402a41 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe590402a55 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe590402adb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe590402bb9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001e7473 RBX=0000000000000003 RCX=ffffffff8b29c759 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1ed60 RBP=ffffed1003ad1488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d68a440 R14=ffffffff905f3550 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1938769ae0 CR3=0000000056e0a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1938802a3a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1938802a47 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1938802a41 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1938802a55 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1938802adb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1938802bb9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000036 64626e2f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 47414d0c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000