last executing test programs: 7m27.297778649s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 7m27.195169083s ago: executing program 0 (id=5): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x4}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x564}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)={0x4, 0x0, [{0x80a0000, 0x83, &(0x7f00000002c0)=""/131}, {0xddddb000, 0xe0, &(0x7f0000000940)=""/224}, {0x1, 0x64, &(0x7f0000000600)=""/100}, {0x10000, 0x67, &(0x7f0000000680)=""/103}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 7m25.113485733s ago: executing program 0 (id=20): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002800018014000400fe880000000000000000000000000001060001000a0000000800060001000000368a33379ea112"], 0x3c}}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 7m25.065486707s ago: executing program 32 (id=20): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002800018014000400fe880000000000000000000000000001060001000a0000000800060001000000368a33379ea112"], 0x3c}}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 7m20.184531424s ago: executing program 3 (id=66): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "d8c1a75b45c5d04c8e25fe4f8453b477a986c6bee7409272232f1ad62869de31", "49b1dce65a8f68a89ec4827f14c576e2", {"3289c5a3a189a20146784d8d20e96d1b", "4b7b80cd71f0be30fafaf191fd843de1"}}}}}}}}}, 0x9e) 7m20.057392605s ago: executing program 3 (id=67): syz_io_uring_setup(0x7ee9, &(0x7f00000001c0)={0x0, 0xeaba, 0x0, 0xfffffffe}, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) 7m19.943929113s ago: executing program 3 (id=68): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 7m19.895523041s ago: executing program 3 (id=69): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000c0000000c", @ANYBLOB], 0x2c}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x200001) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0), 0x10, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r2 = syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x2, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaccabd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe30859891d8760010000800400b40b00a936e240f45f819e01177d3d458d94992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c08, 0xffffffffffffffff) 7m19.746928338s ago: executing program 3 (id=71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x100, 0x8000, 0x5, 0x7, 0x1, 0x9, 0x3, 0xbf, 0xb9, 0x2, 0xf, 0x5, 0x6}, {0x804, 0x5, 0x1, 0x5, 0x10, 0x12, 0xff, 0x5, 0xa0, 0x6, 0xb, 0x2, 0x15}, {0x4, 0x6, 0x38, 0x6, 0x84, 0x7, 0x0, 0x50, 0xf8, 0x3, 0x3, 0xa, 0x400000000006}], 0xa}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x2, 0x0, 0x4d0, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5], 0x1, 0x100a02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m18.280394214s ago: executing program 3 (id=85): socket$inet6(0xa, 0x80002, 0x88) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) 7m18.260148566s ago: executing program 33 (id=85): socket$inet6(0xa, 0x80002, 0x88) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) 7m11.805122736s ago: executing program 4 (id=162): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0xfffffeef) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x8695c3813a9bd78d}}, 0x50) clock_gettime(0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400) syz_fuse_handle_req(r0, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0x0, 0x8000, 0xfff, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000016c0)='./file0\x00', 0x40) 7m10.937762303s ago: executing program 4 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) 7m10.872182458s ago: executing program 4 (id=169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m10.650165429s ago: executing program 4 (id=173): socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 7m10.58810958s ago: executing program 4 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x82) 7m9.729622815s ago: executing program 4 (id=187): openat$nullb(0xffffffffffffff9c, 0x0, 0x564580, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x7d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000045) read$alg(r4, &(0x7f0000000000)=""/20, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m54.711531688s ago: executing program 34 (id=187): openat$nullb(0xffffffffffffff9c, 0x0, 0x564580, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x7d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000045) read$alg(r4, &(0x7f0000000000)=""/20, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m17.062052139s ago: executing program 1 (id=8083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240), &(0x7f0000000500)="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", 0x0, 0xf00}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m16.976911054s ago: executing program 1 (id=8087): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) 2m16.905239265s ago: executing program 1 (id=8091): syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES64], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xa, {"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", 0xffffffffffffff34}}, 0x1006) mkdir(0x0, 0xf2aa33c9ca163302) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000140)='attr/prev\x00') r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) write$dsp(r6, &(0x7f00000030c0)="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", 0x1000) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001"], 0x104}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r7, 0x4148, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x2a41000, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') syz_usb_disconnect(0xffffffffffffffff) getpeername(r4, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000180)=0x80) close_range(r2, 0xffffffffffffffff, 0x0) 2m13.87193069s ago: executing program 1 (id=8143): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) userfaultfd(0x80001) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000043f000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 2m13.871730391s ago: executing program 1 (id=8144): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x11a) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0c2000003d0007010000000000000000017c0000040000000c00018006001700800a0000e81f02"], 0x200c}}, 0xc000) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 2m13.79852263s ago: executing program 1 (id=8148): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r1 = memfd_secret(0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r1, 0x20, &(0x7f00000005c0)={&(0x7f0000000400)=""/230, 0xe6, 0x0, &(0x7f0000000500)=""/156, 0x9c}}, 0x10) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) fcntl$setlease(r3, 0x400, 0x3) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000340)={r7, 0x0, 0x9, 0x5, 0x6f9e, 0x2, 0x7, 0x3, {0x0, @in6={{0xa, 0x4e24, 0xb, @private2, 0x200}}, 0x6a, 0x8, 0x7c1, 0x2, 0x8}}, &(0x7f0000000080)=0xb0) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) r10 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r10, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r10, 0xab00, r9) r11 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20080) ioctl$NBD_SET_SOCK(r11, 0xab00, r9) ioctl$NBD_DO_IT(r8, 0xab03) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000001c0)={0x28, 0x4, 0x0, {0x2, 0xa50}}, 0x28) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x3, 0x0, 0x0, "cdf922c1d6edb8c40b20f2d448d6662fb024cf64cea94ee5d4fa20c641c6e2e1", 0x584e4f53}) syz_emit_ethernet(0x13a, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x104, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}, @routing={0x4, 0x8, 0x0, 0xd5, 0x0, [@remote, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1]}, @routing={0x0, 0x10, 0x1, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @rand_addr=' \x01\x00', @empty, @empty, @dev={0xfe, 0x80, '\x00', 0x2d}, @remote]}, @dstopts={0x73}, @dstopts={0x62, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5}]}], @ndisc_ns={0x87, 0x0, 0x0, @loopback}}}}}}, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r12, 0x400452c8, &(0x7f0000000100)) 2m13.617680016s ago: executing program 35 (id=8148): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r1 = memfd_secret(0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r1, 0x20, &(0x7f00000005c0)={&(0x7f0000000400)=""/230, 0xe6, 0x0, &(0x7f0000000500)=""/156, 0x9c}}, 0x10) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) fcntl$setlease(r3, 0x400, 0x3) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000340)={r7, 0x0, 0x9, 0x5, 0x6f9e, 0x2, 0x7, 0x3, {0x0, @in6={{0xa, 0x4e24, 0xb, @private2, 0x200}}, 0x6a, 0x8, 0x7c1, 0x2, 0x8}}, &(0x7f0000000080)=0xb0) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) r10 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r10, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r10, 0xab00, r9) r11 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20080) ioctl$NBD_SET_SOCK(r11, 0xab00, r9) ioctl$NBD_DO_IT(r8, 0xab03) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000001c0)={0x28, 0x4, 0x0, {0x2, 0xa50}}, 0x28) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x3, 0x0, 0x0, "cdf922c1d6edb8c40b20f2d448d6662fb024cf64cea94ee5d4fa20c641c6e2e1", 0x584e4f53}) syz_emit_ethernet(0x13a, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x104, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}, @routing={0x4, 0x8, 0x0, 0xd5, 0x0, [@remote, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1]}, @routing={0x0, 0x10, 0x1, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @rand_addr=' \x01\x00', @empty, @empty, @dev={0xfe, 0x80, '\x00', 0x2d}, @remote]}, @dstopts={0x73}, @dstopts={0x62, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5}]}], @ndisc_ns={0x87, 0x0, 0x0, @loopback}}}}}}, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r12, 0x400452c8, &(0x7f0000000100)) 3.980972348s ago: executing program 2 (id=11635): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000001080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000004, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 3.147592409s ago: executing program 2 (id=11655): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000080)={0x5, 0x9, 0xd000}) syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x60, 0x0, 0x1}, 0x60}}, 0x20000090) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRES8, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) 3.080159549s ago: executing program 2 (id=11657): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x1, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x20, 0xb0880) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000540)=[r6], 0x80000000002, 0x1, 0xb}) poll(&(0x7f0000004200)=[{}], 0x1, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x0, 0x0, 0xffffffec, 0x0, 0x0, "61cb00000000030000000000000100", 0x101, 0x2}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/79, 0x4f}], 0x1) 1.634709727s ago: executing program 6 (id=11709): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x4c, 0x10, 0xf11, 0x0, 0xf00, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 1.479872989s ago: executing program 6 (id=11713): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 1.479499684s ago: executing program 6 (id=11715): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x775}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x775}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x0, 0x7fff7ffc}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x0, 0x7fff7ffc}]}) mremap(&(0x7f0000fb2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000cc0000/0x3000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000001c0)={0x0, @win={{0x3, 0x4000, 0x3, 0xfffffffa}, 0x5, 0x6624, &(0x7f0000000380)={{0x4, 0xfffffdea, 0x8, 0x3ca7}, &(0x7f0000000340)={{0x8, 0xfc2, 0x6, 0x8}, &(0x7f0000000300)={{0x1e59, 0x7, 0x4f900000, 0xe9}}}}, 0x8001, &(0x7f00000003c0)="091f13bc56858a5a658a70f9dcbd73f93b0c7beddad8d49caafb22c027136bed9008a6dca1630a98d080f04d283963b23843a33b87dc5e4885b09cbaac", 0x8}}) socket$nl_generic(0x10, 0x3, 0x10) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack_expect\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack_expect\x00') r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$getownex(r3, 0x10, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0xfffffefe) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) 1.479436205s ago: executing program 5 (id=11716): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 1.420635122s ago: executing program 5 (id=11717): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000b00), 0x0, 0x0) 1.360840308s ago: executing program 5 (id=11718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x1f}, 0x0) 1.360654659s ago: executing program 5 (id=11719): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x80000) ioctl$PPPIOCGFLAGS1(r0, 0x4004743c, &(0x7f0000000000)) 1.360548018s ago: executing program 5 (id=11720): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)={0x30000, 0x8, 0xa}, 0x18) r0 = socket(0x400000000010, 0x3, 0x0) syz_create_resource$binfmt(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_vhci(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="480100001a001307000000000000000000000000000000000002000000000001e00000efffffffffffffff000000000000000000000000000000000000000000ce95f6e22c1c492dc7339c338f16ac302a52b37647", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x8000, 0x4040) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, 0x0) fchown(r4, 0xee01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='coredump_filter\x00') read$FUSE(r5, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}) 1.290683887s ago: executing program 5 (id=11721): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) 1.289801306s ago: executing program 6 (id=11722): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4040000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x20, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket(0x2, 0x3, 0x6) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="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", 0x2f0}], 0x1}, 0x44080) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.118195303s ago: executing program 36 (id=11721): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) 380.604866ms ago: executing program 6 (id=11741): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0x24, 0x1e, 0x89d7702924ac5e99, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}, 0x24}], 0x1}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 380.302554ms ago: executing program 6 (id=11742): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x240}}, 0x0) close(0xffffffffffffffff) sendto$inet(r1, &(0x7f0000001600)='\t', 0x1, 0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89101) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000080), 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCXONC(r7, 0x540a, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x382, @mcast2, 0xdaf2}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x3000885c) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x2) r10 = fspick(r5, &(0x7f0000000140)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r10, 0x0, &(0x7f00000001c0)='ro\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 280.775341ms ago: executing program 7 (id=11745): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000003b00)='@', 0x1}, {&(0x7f0000003b40)="54b030", 0x3}], 0x2, &(0x7f0000002880)=ANY=[], 0x98, 0x4000001}}], 0x1, 0x4004090) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000980)=ANY=[@ANYBLOB="0180c2000000b2fffff7fffe86dd60ecff8000641100fc000000000000000000000000000000ff02000000000000000000000000000100004e2200640000"], 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_bond\x00', {}, 0x1}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000240)={0x0, 'veth0_vlan\x00', {0x4}, 0xfff7}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="07060000000000000000270000000a0001007770616e31000000050031"], 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) 280.3223ms ago: executing program 7 (id=11746): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc0bc5310, &(0x7f00000000c0)={0x18}) socket$packet(0x11, 0x2, 0x300) syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x3, 0x6) syz_emit_ethernet(0x52, &(0x7f0000000380)={@local, @random="56460a7cef90", @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, {[], {{0x0, 0x8906, r1, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES8=r3, @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000400)={{0x6, 0xc}, 'port1\x00', 0x3, 0x40000, 0x6, 0x800, 0x9, 0x7f, 0x7, 0x0, 0x1, 0x3}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x32}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x2400c054}, 0x8040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 218.90147ms ago: executing program 7 (id=11747): syz_emit_ethernet(0xb6, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@timestamp_addr={0x44, 0x24, 0xd7, 0x1, 0xd, [{@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x9}, {@multicast2}, {@multicast2, 0xfffffff8}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x34, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x6, "02a20948"}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) epoll_create1(0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r1, &(0x7f0000000b00)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x0) rt_tgsigqueueinfo(r0, r0, 0x13, &(0x7f0000000200)={0x9, 0x0, 0x80000000}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x15, 0x38, 0xe, 0x2, 0xa, 0x10000, 0x0, 0xff, 0xffffffffffffffff}}) tkill(r0, 0x12) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xa, 0x148, 0x0, 0x10, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x120, 0x190, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4e0) syslog(0x9, 0x0, 0x0) 139.793054ms ago: executing program 7 (id=11748): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff0500000000000000000000000000010800"], 0x70}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff0500000000000000000000000000010800"], 0x70}}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x80004, 0x10000}) r3 = io_uring_setup(0x6db7, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x0, 0x80031e}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) (async) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)) r6 = socket$packet(0x11, 0x3, 0x300) dup(r4) (async) r7 = dup(r4) fcntl$dupfd(r5, 0x406, r6) (async) r8 = fcntl$dupfd(r5, 0x406, r6) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000080)={0x0, r7}) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x6) 60.160242ms ago: executing program 2 (id=11749): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0x24, 0x1e, 0x89d7702924ac5e99, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}, 0x24}], 0x1}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 59.912461ms ago: executing program 2 (id=11750): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0), 0x0, 0x867, 0x0, 0x0) 59.764475ms ago: executing program 7 (id=11751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x700}, 0x0) 59.715243ms ago: executing program 8 (id=11725): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c00000e10001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) 47.238289ms ago: executing program 2 (id=11752): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c00)={'lo\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x2b, 0x0, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x25ee64cd91c5461d}, 0x4084021) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f00000001c0)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="802cfb00ffffffffffff08"], 0x53) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10000, 0x3}}]}}]}, 0x48}}, 0x44080) 286.061µs ago: executing program 7 (id=11753): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x22}, @multicast1, 0x0, "7ea97ddb2ac127739b72cd2e5cd1252ced804500000000000000000000000200", 0x0, 0x2, 0x4, 0xfffffffe}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x14, 0x2b, 0x0, @private2, @local, {[@routing={0x1, 0x0, 0x2, 0x8}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x1, 0x100, @void}}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 187.044µs ago: executing program 8 (id=11754): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r1, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) 0s ago: executing program 8 (id=11755): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) openat$mice(0xffffffffffffff9c, &(0x7f00000007c0), 0x2) dup(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000800)) getuid() r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setresgid(0xee00, r3, r3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) geteuid() r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setresgid(0xee00, r6, r6) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000040)='environ\x00') kernel console output (not intermixed with test programs): underflow at hook 1 [ 406.947561][T29369] kvm: kvm [29368]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbe [ 406.997064][T29395] vlan6: entered allmulticast mode [ 407.013195][T29369] kvm: kvm [29368]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x236 [ 407.046378][T29369] kvm: kvm [29368]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xaf5 [ 407.072560][T29369] kvm: kvm [29368]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb89 [ 407.077419][T29369] kvm: kvm [29368]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb95 [ 407.094260][T29369] kvm: kvm [29368]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbe9 [ 407.105354][T29399] overlayfs: failed to clone upperpath [ 407.107358][T29369] kvm: kvm [29368]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc2b [ 407.142144][T29401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9152'. [ 407.154164][T29401] vlan6: entered promiscuous mode [ 407.156431][T29401] bond139: (slave vlan6): Opening slave failed [ 407.162194][T29369] kvm: kvm [29368]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x55e [ 407.186274][T29369] kvm: kvm [29368]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x5de [ 407.211278][T29369] kvm: kvm [29368]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xe55 [ 407.434228][T29417] fuse: Unknown parameter 'grou`_ÿæi00000000000000000000' [ 407.449750][ T40] audit: type=1400 audit(1740562720.449:73010): avc: denied { getopt } for pid=29416 comm="syz.2.9156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 407.450016][T29417] tmpfs: Invalid gid '0x00000000ffffffff' [ 407.461258][T29417] fuse: Unknown parameter 'smackfstransmute' [ 407.485263][T29423] overlayfs: failed to clone upperpath [ 407.492410][T29425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9161'. [ 407.503236][T29428] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 407.508164][T29425] vlan6: entered promiscuous mode [ 407.510349][T29425] bond140: (slave vlan6): Opening slave failed [ 407.680804][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 407.754577][T29462] overlayfs: failed to clone upperpath [ 407.796337][T29468] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9174'. [ 407.805154][T29470] netlink: 'syz.2.9175': attribute type 1 has an invalid length. [ 407.809173][T29470] bond120: (slave vcan1): The slave device specified does not support setting the MAC address [ 407.813704][T29470] bond120: (slave vcan1): making interface the new active one [ 407.816215][T29470] bond120: (slave vcan1): Enslaving as an active interface with an up link [ 407.820286][T29470] 8021q: adding VLAN 0 to HW filter on device bond120 [ 407.874265][T29476] vlan6: entered promiscuous mode [ 407.876497][T29476] bond141: (slave vlan6): Opening slave failed [ 408.184517][T29513] trusted_key: encrypted_key: hex blob is missing [ 408.193967][T29518] overlayfs: failed to clone upperpath [ 408.226633][T29517] vlan3: entered promiscuous mode [ 408.228671][T29517] bond3: (slave vlan3): Opening slave failed [ 408.237020][ T40] audit: type=1400 audit(1740562721.239:73011): avc: denied { lock } for pid=29522 comm="syz.6.9195" path="socket:[88976]" dev="sockfs" ino=88976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 408.260391][T29525] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 408.265706][ T1474] »»»»»» speed is unknown, defaulting to 1000 [ 408.373970][T29538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.406149][T29542] overlayfs: failed to clone upperpath [ 408.481033][T29556] vlan6: entered allmulticast mode [ 408.710915][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 409.050573][T29572] tmpfs: Unknown parameter '' [ 409.053260][ T40] audit: type=1400 audit(1740562722.059:73012): avc: denied { map } for pid=29571 comm="syz.5.9217" path="socket:[89955]" dev="sockfs" ino=89955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 409.088072][T29581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.293775][T29595] pim6reg: entered allmulticast mode [ 409.307514][T29593] /dev/sr0: Can't lookup blockdev [ 409.311041][T29593] 9pnet_fd: Insufficient options for proto=fd [ 409.326529][T29600] netlink: 'syz.7.9228': attribute type 1 has an invalid length. [ 409.342138][T29600] 8021q: adding VLAN 0 to HW filter on device bond4 [ 409.346895][T29600] vlan3: entered promiscuous mode [ 409.349009][T29600] bond4: entered promiscuous mode [ 409.354873][T29600] bond4: left promiscuous mode [ 409.378619][T29607] vlan6: entered allmulticast mode [ 409.715762][T29643] vlan6: entered allmulticast mode [ 409.724466][T29647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.750786][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 409.796410][T29659] o2cb: This node has not been configured. [ 409.798137][T29659] o2cb: Cluster check failed. Fix errors before retrying. [ 409.800090][T29659] (syz.7.9252,29659,3):user_dlm_register:674 ERROR: status = -22 [ 409.802685][T29659] (syz.7.9252,29659,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 409.998013][T29686] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 410.033623][T29690] vlan6: entered allmulticast mode [ 410.302458][T29719] overlayfs: failed to clone upperpath [ 410.398791][T29733] vlan3: entered promiscuous mode [ 410.403698][T29733] bond5: (slave vlan3): Opening slave failed [ 410.507195][T29751] overlayfs: failed to clone upperpath [ 410.519560][T29754] tipc: Started in network mode [ 410.524029][T29754] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 410.526269][T29754] tipc: Enabled bearer , priority 10 [ 410.530169][T29754] tipc: Resetting bearer [ 410.533430][T29754] macvlan0: left allmulticast mode [ 410.608563][T29761] fuse: Bad value for 'user_id' [ 410.610167][T29761] fuse: Bad value for 'user_id' [ 410.799692][T29785] overlayfs: failed to clone upperpath [ 410.800803][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 410.857455][T29793] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.912865][T29805] afs: Unknown parameter 'd' [ 411.190595][T29827] »»»»»» speed is unknown, defaulting to 1000 [ 411.239718][T29828] »»»»»» speed is unknown, defaulting to 1000 [ 411.242084][T29835] fuse: Unknown parameter 'smackfsfloor' [ 411.523472][ T35] tipc: Node number set to 10398378 [ 411.583005][T29868] vlan6: entered allmulticast mode [ 411.765498][T29878] ipvlan2: entered promiscuous mode [ 411.840796][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 412.018193][T29920] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 412.020657][T29920] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 412.031983][T29920] ipvlan2: entered promiscuous mode [ 412.091168][T29932] __nla_validate_parse: 13 callbacks suppressed [ 412.091180][T29932] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9355'. [ 412.133823][T29940] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9352'. [ 412.138815][T29942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9357'. [ 412.141568][T29931] »»»»»» speed is unknown, defaulting to 1000 [ 412.208992][T29951] vlan6: entered allmulticast mode [ 412.224943][T29955] fuse: Bad value for 'rootmode' [ 412.262352][T29959] netlink: 'syz.6.9363': attribute type 4 has an invalid length. [ 412.431487][T29977] sock: sock_set_timeout: `syz.5.9360' (pid 29977) tries to set negative timeout [ 412.579808][T29985] vlan6: entered allmulticast mode [ 412.613327][T29989] ip6tnl1: entered promiscuous mode [ 412.614956][T29989] ip6tnl1: entered allmulticast mode [ 412.745720][T29999] vlan6: entered allmulticast mode [ 412.817069][T30006] openvswitch: netlink: Flow key attr not present in new flow. [ 412.835131][T30008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9382'. [ 412.880878][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.105846][T30048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=339 sclass=netlink_route_socket pid=30048 comm=syz.7.9393 [ 413.123347][T30050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9401'. [ 413.193066][T30054] erspan0: default FDB implementation only supports local addresses [ 413.369945][ T40] audit: type=1400 audit(1740562726.369:73013): avc: denied { getopt } for pid=30072 comm="syz.7.9399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 413.377537][T30075] overlayfs: failed to clone upperpath [ 413.455205][ T40] audit: type=1400 audit(1740562726.459:73014): avc: denied { append } for pid=30085 comm="syz.7.9407" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 413.462656][T30089] /dev/nbd6: Can't lookup blockdev [ 413.470265][T30092] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9409'. [ 413.509962][T30102] overlayfs: failed to clone upperpath [ 413.597848][T30114] netlink: 19 bytes leftover after parsing attributes in process `syz.6.9417'. [ 413.605776][T30094] fuse: Bad value for 'user_id' [ 413.607445][T30094] fuse: Bad value for 'user_id' [ 413.647785][T30124] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.9421'. [ 413.656274][T30126] overlayfs: failed to clone upperpath [ 413.747625][T30136] vlan6: entered allmulticast mode [ 413.787075][T30138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9427'. [ 413.901631][T30155] overlayfs: failed to clone upperpath [ 413.910916][ C1] net_ratelimit: 1 callbacks suppressed [ 413.910927][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.968166][T30170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9437'. [ 414.065251][T30186] overlayfs: failed to clone upperpath [ 414.140093][T30195] vlan5: entered allmulticast mode [ 414.249440][ T40] audit: type=1400 audit(1740562727.249:73015): avc: denied { accept } for pid=30208 comm="syz.6.9452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 414.258302][ T40] audit: type=1400 audit(1740562727.259:73016): avc: denied { read } for pid=30208 comm="syz.6.9452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 414.303424][T30216] overlayfs: failed to clone upperpath [ 414.305306][T30218] vlan7: entered allmulticast mode [ 414.421939][T30235] netlink: 'syz.7.9458': attribute type 3 has an invalid length. [ 414.426412][T30234] overlay: Bad value for 'workdir' [ 414.620529][T30266] overlayfs: failed to clone upperpath [ 414.736000][T30285] FAULT_INJECTION: forcing a failure. [ 414.736000][T30285] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 414.740080][T30285] CPU: 2 UID: 0 PID: 30285 Comm: syz.7.9477 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 414.740094][T30285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 414.740101][T30285] Call Trace: [ 414.740105][T30285] [ 414.740110][T30285] dump_stack_lvl+0x16c/0x1f0 [ 414.740136][T30285] should_fail_ex+0x50a/0x650 [ 414.740159][T30285] _copy_to_user+0x32/0xd0 [ 414.740172][T30285] simple_read_from_buffer+0xd0/0x160 [ 414.740189][T30285] proc_fail_nth_read+0x198/0x270 [ 414.740210][T30285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 414.740226][T30285] ? rw_verify_area+0xcf/0x680 [ 414.740241][T30285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 414.740256][T30285] vfs_read+0x1df/0xbf0 [ 414.740272][T30285] ? __fget_files+0x1fc/0x3a0 [ 414.740283][T30285] ? __pfx___mutex_lock+0x10/0x10 [ 414.740296][T30285] ? __pfx_vfs_read+0x10/0x10 [ 414.740316][T30285] ? __fget_files+0x206/0x3a0 [ 414.740329][T30285] ksys_read+0x12b/0x250 [ 414.740345][T30285] ? __pfx_ksys_read+0x10/0x10 [ 414.740365][T30285] do_syscall_64+0xcd/0x250 [ 414.740379][T30285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.740395][T30285] RIP: 0033:0x7f105cd8bb7c [ 414.740403][T30285] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 414.740414][T30285] RSP: 002b:00007f105dc71030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 414.740424][T30285] RAX: ffffffffffffffda RBX: 00007f105cfa5fa0 RCX: 00007f105cd8bb7c [ 414.740431][T30285] RDX: 000000000000000f RSI: 00007f105dc710a0 RDI: 0000000000000006 [ 414.740437][T30285] RBP: 00007f105dc71090 R08: 0000000000000000 R09: 0000000000000000 [ 414.740443][T30285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.740449][T30285] R13: 0000000000000000 R14: 00007f105cfa5fa0 R15: 00007fff2fc73798 [ 414.740461][T30285] [ 414.745767][T30288] overlay: Bad value for 'workdir' [ 414.822363][T30290] overlayfs: missing 'lowerdir' [ 414.852363][T30299] fuse: Bad value for 'group_id' [ 414.854009][T30299] fuse: Bad value for 'group_id' [ 414.872500][T30301] vlan7: entered allmulticast mode [ 414.936142][T30308] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 414.938127][T30308] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 414.940035][T30312] vlan7: entered allmulticast mode [ 414.960796][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 414.974168][T30315] @: renamed from vlan0 [ 415.025728][T30322] FAULT_INJECTION: forcing a failure. [ 415.025728][T30322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.029692][T30322] CPU: 3 UID: 0 PID: 30322 Comm: syz.7.9493 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 415.029706][T30322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 415.029713][T30322] Call Trace: [ 415.029716][T30322] [ 415.029720][T30322] dump_stack_lvl+0x16c/0x1f0 [ 415.029737][T30322] should_fail_ex+0x50a/0x650 [ 415.029756][T30322] _copy_from_user+0x2e/0xd0 [ 415.029768][T30322] copy_msghdr_from_user+0x99/0x160 [ 415.029784][T30322] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 415.029804][T30322] ___sys_sendmsg+0xff/0x1e0 [ 415.029819][T30322] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.029838][T30322] ? __pfx_lock_release+0x10/0x10 [ 415.029854][T30322] ? trace_lock_acquire+0x14e/0x1f0 [ 415.029870][T30322] ? __fget_files+0x206/0x3a0 [ 415.029884][T30322] __sys_sendmsg+0x16e/0x220 [ 415.029899][T30322] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.029921][T30322] do_syscall_64+0xcd/0x250 [ 415.029936][T30322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.029951][T30322] RIP: 0033:0x7f105cd8d169 [ 415.029959][T30322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.029970][T30322] RSP: 002b:00007f105dc71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.029981][T30322] RAX: ffffffffffffffda RBX: 00007f105cfa5fa0 RCX: 00007f105cd8d169 [ 415.029987][T30322] RDX: 0000000000000000 RSI: 0000400000000740 RDI: 0000000000000003 [ 415.029994][T30322] RBP: 00007f105dc71090 R08: 0000000000000000 R09: 0000000000000000 [ 415.029999][T30322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.030006][T30322] R13: 0000000000000000 R14: 00007f105cfa5fa0 R15: 00007fff2fc73798 [ 415.030018][T30322] [ 415.096584][ T40] audit: type=1400 audit(1740562728.099:73017): avc: denied { read } for pid=30323 comm="syz.7.9495" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 415.173937][T30325] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 415.176199][T30325] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 415.187634][T30325] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 415.429009][ T40] audit: type=1400 audit(1740562728.429:73018): avc: denied { read } for pid=30341 comm="syz.7.9502" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 415.445652][ T40] audit: type=1400 audit(1740562728.429:73019): avc: denied { open } for pid=30341 comm="syz.7.9502" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 415.484360][ T40] audit: type=1400 audit(1740562728.489:73020): avc: denied { setattr } for pid=30341 comm="syz.7.9502" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 415.490799][T30342] »»»»»» speed is unknown, defaulting to 1000 [ 415.528991][T30345] vlan1: entered promiscuous mode [ 415.531707][T30345] bond114: (slave vlan1): Opening slave failed [ 415.620378][T30353] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 415.711028][T30364] ./file0: Can't lookup blockdev [ 415.740259][T30371] vlan7: entered allmulticast mode [ 415.808239][T30382] FAULT_INJECTION: forcing a failure. [ 415.808239][T30382] name failslab, interval 1, probability 0, space 0, times 1 [ 415.811764][T30382] CPU: 2 UID: 0 PID: 30382 Comm: syz.7.9518 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 415.811778][T30382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 415.811785][T30382] Call Trace: [ 415.811789][T30382] [ 415.811793][T30382] dump_stack_lvl+0x16c/0x1f0 [ 415.811811][T30382] should_fail_ex+0x50a/0x650 [ 415.811827][T30382] ? fs_reclaim_acquire+0xae/0x150 [ 415.811844][T30382] should_failslab+0xc2/0x120 [ 415.811856][T30382] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 415.811869][T30382] ? __alloc_skb+0x2b1/0x380 [ 415.811885][T30382] __alloc_skb+0x2b1/0x380 [ 415.811898][T30382] ? __pfx___alloc_skb+0x10/0x10 [ 415.811913][T30382] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 415.811929][T30382] netlink_alloc_large_skb+0x69/0x130 [ 415.811943][T30382] netlink_sendmsg+0x689/0xd70 [ 415.811958][T30382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.811976][T30382] ____sys_sendmsg+0xaaf/0xc90 [ 415.811987][T30382] ? copy_msghdr_from_user+0x10b/0x160 [ 415.812002][T30382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.812018][T30382] ___sys_sendmsg+0x135/0x1e0 [ 415.812034][T30382] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.812053][T30382] ? __pfx_lock_release+0x10/0x10 [ 415.812067][T30382] ? trace_lock_acquire+0x14e/0x1f0 [ 415.812083][T30382] ? __fget_files+0x206/0x3a0 [ 415.812097][T30382] __sys_sendmsg+0x16e/0x220 [ 415.812112][T30382] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.812138][T30382] do_syscall_64+0xcd/0x250 [ 415.812152][T30382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.812168][T30382] RIP: 0033:0x7f105cd8d169 [ 415.812176][T30382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.812186][T30382] RSP: 002b:00007f105dc71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.812196][T30382] RAX: ffffffffffffffda RBX: 00007f105cfa5fa0 RCX: 00007f105cd8d169 [ 415.812203][T30382] RDX: 0000000000000000 RSI: 0000400000000740 RDI: 0000000000000003 [ 415.812209][T30382] RBP: 00007f105dc71090 R08: 0000000000000000 R09: 0000000000000000 [ 415.812215][T30382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.812221][T30382] R13: 0000000000000000 R14: 00007f105cfa5fa0 R15: 00007fff2fc73798 [ 415.812233][T30382] [ 415.883416][ C2] vkms_vblank_simulate: vblank timer overrun [ 415.983633][T30393] netlink: 'syz.2.9524': attribute type 29 has an invalid length. [ 415.986196][T30393] netlink: 'syz.2.9524': attribute type 29 has an invalid length. [ 415.991515][T30389] netlink: 'syz.7.9522': attribute type 10 has an invalid length. [ 416.000874][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 416.027927][T30389] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.032626][T30389] bond0: (slave team0): Enslaving as an active interface with an up link [ 416.086744][T30410] vlan0: entered promiscuous mode [ 416.088745][T30410] bond71: (slave vlan0): Opening slave failed [ 416.190590][ T5956] Bluetooth: hci2: unexpected event 0x04 length: 4 < 10 [ 416.192772][ T5956] Bluetooth: hci2: unexpected event 0x04 length: 4 < 10 [ 416.194909][ T5956] Bluetooth: hci2: unexpected event 0x04 length: 4 < 10 [ 416.197613][ T5956] Bluetooth: hci2: unexpected event 0x04 length: 4 < 10 [ 416.200277][ T5956] Bluetooth: hci2: unexpected event 0x04 length: 4 < 10 [ 416.206351][ T5956] Bluetooth: hci2: unexpected event 0x04 length: 4 < 10 [ 416.521585][T30475] tipc: Enabling of bearer rejected, failed to enable media [ 416.644632][T30481] netlink: 'syz.7.9549': attribute type 29 has an invalid length. [ 416.648137][T30481] netlink: 'syz.7.9549': attribute type 29 has an invalid length. [ 417.030867][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.191175][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 417.507551][ T40] audit: type=1400 audit(1740562730.509:73021): avc: denied { read } for pid=30531 comm="syz.7.9578" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 417.515326][ T40] audit: type=1400 audit(1740562730.509:73022): avc: denied { open } for pid=30531 comm="syz.7.9578" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 417.558523][T30530] netlink: 'syz.5.9565': attribute type 29 has an invalid length. [ 417.561490][T30530] netlink: 'syz.5.9565': attribute type 29 has an invalid length. [ 417.767144][T30555] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 417.769358][T30555] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 417.817475][T30551] netlink: 'syz.5.9580': attribute type 10 has an invalid length. [ 417.872506][T30564] netlink: 'syz.7.9584': attribute type 2 has an invalid length. [ 417.890608][T30566] __nla_validate_parse: 8 callbacks suppressed [ 417.890619][T30566] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9585'. [ 417.952139][T30574] overlayfs: failed to clone upperpath [ 418.080869][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.112176][T30579] overlay: Unknown parameter 'fsuuid' [ 418.157767][T30584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9593'. [ 418.173950][T30584] vlan1: entered promiscuous mode [ 418.176059][T30584] bond116: (slave vlan1): Opening slave failed [ 418.265842][T30599] netlink: 376 bytes leftover after parsing attributes in process `syz.5.9599'. [ 418.269299][T30599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9599'. [ 418.290005][T30601] vlan0: entered allmulticast mode [ 418.327230][ T1193] tipc: Subscription rejected, illegal request [ 418.478674][T30617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9605'. [ 418.487508][T30617] gre2: entered promiscuous mode [ 418.531214][T30628] xt_policy: output policy not valid in PREROUTING and INPUT [ 418.541993][T30628] MTD: Couldn't look up '/dev/nbd6': -15 [ 418.543707][T30628] /dev/nbd6: Can't lookup blockdev [ 418.852544][ T1193] tipc: Subscription rejected, illegal request [ 419.010082][T30660] xt_hashlimit: size too large, truncated to 1048576 [ 419.120836][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 419.150028][T30679] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 419.189327][T30685] overlayfs: failed to resolve 'context=user_u': -2 [ 419.195599][T30685] dummy0: entered promiscuous mode [ 419.215637][T30681] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9626'. [ 419.239285][T30692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9632'. [ 419.267802][T30692] vlan7: entered promiscuous mode [ 419.270028][T30692] bond142: (slave vlan7): Opening slave failed [ 419.281739][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 419.365603][T30717] 9pnet_fd: Insufficient options for proto=fd [ 419.498751][T30725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9641'. [ 419.603279][T30752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9652'. [ 419.710377][T30762] overlayfs: failed to clone upperpath [ 419.864331][T30786] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9663'. [ 419.877569][T30786] vlan1: entered promiscuous mode [ 419.880403][T30786] bond117: (slave vlan1): Opening slave failed [ 420.001286][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 420.001296][ T40] audit: type=1400 audit(1740562733.009:73024): avc: denied { ioctl } for pid=30794 comm="syz.7.9667" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 420.002411][T30796] syzkaller1: entered promiscuous mode [ 420.013382][T30796] syzkaller1: entered allmulticast mode [ 420.016650][T30796] kAFS: Can only specify source 'none' with -o dyn [ 420.147118][T30820] ip_vti0: entered promiscuous mode [ 420.150862][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.248723][T30839] vlan7: entered allmulticast mode [ 420.295914][T30842] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 420.298245][T30842] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 420.343907][T30851] vlan4: entered promiscuous mode [ 420.346018][T30851] bond7: (slave vlan4): Opening slave failed [ 420.990306][T30953] overlayfs: missing 'lowerdir' [ 421.030947][T30960] vlan7: entered allmulticast mode [ 421.172384][T30987] netlink: 'syz.6.9717': attribute type 12 has an invalid length. [ 421.190829][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 421.242353][T30985] new mount options do not match the existing superblock, will be ignored [ 421.331804][T31001] vlan0: entered promiscuous mode [ 421.333928][T31001] bond72: (slave vlan0): Opening slave failed [ 421.361074][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 421.600003][T31033] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20004 [ 421.637246][ T40] audit: type=1400 audit(1740562734.639:73025): avc: denied { setopt } for pid=31037 comm="syz.6.9734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 421.690447][T31042] overlayfs: failed to resolve './file1': -2 [ 422.117066][T31073] siw: device registration error -23 [ 422.121660][T31073] »»»»»»: renamed from lo [ 422.220899][ T40] audit: type=1400 audit(1740562735.219:73026): avc: denied { accept } for pid=31094 comm="syz.2.9751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 422.230880][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 422.294192][T31100] vlan7: entered promiscuous mode [ 422.296336][T31100] bond144: (slave vlan7): Opening slave failed [ 422.522215][T31128] vlan0: entered allmulticast mode [ 422.620267][T31138] tmpfs: Unknown parameter 'È*ol' [ 422.789153][T31140] tmpfs: Invalid uid '0x00000000ffffffff' [ 422.874462][T31165] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.877577][T31165] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.880106][T31165] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.883090][T31165] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.886147][T31165] vxlan0: entered promiscuous mode [ 422.888003][T31165] vxlan0: entered allmulticast mode [ 422.893181][T31163] vlan7: entered promiscuous mode [ 422.896219][T31163] bond145: (slave vlan7): Opening slave failed [ 423.180025][T31201] overlayfs: failed to clone upperpath [ 423.235462][T31207] vlan7: entered allmulticast mode [ 423.270871][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 423.382109][ T40] audit: type=1400 audit(1740562736.389:73027): avc: denied { ioctl } for pid=31208 comm="syz.6.9795" path="socket:[96402]" dev="sockfs" ino=96402 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 423.748081][T31249] __nla_validate_parse: 19 callbacks suppressed [ 423.748093][T31249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9806'. [ 423.762205][T31249] vlan1: entered promiscuous mode [ 423.764269][T31249] bond118: (slave vlan1): Opening slave failed [ 423.813313][ T40] audit: type=1400 audit(1740562736.819:73028): avc: denied { append } for pid=31255 comm="syz.7.9809" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 423.884214][T31269] overlayfs: failed to clone upperpath [ 424.288567][T31292] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9822'. [ 424.310866][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 424.532164][T31296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9824'. [ 424.864755][T31307] kvm_pr_unimpl_wrmsr: 71 callbacks suppressed [ 424.864771][T31307] kvm: kvm [31303]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x831 [ 424.872633][T31307] kvm: kvm [31303]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x59 [ 424.877060][T31307] kvm: kvm [31303]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x83d [ 424.885402][T31307] kvm: kvm [31303]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xdd [ 424.909569][T31307] kvm_intel: kvm [31303]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x8f9 [ 424.940268][T31318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9831'. [ 425.185232][T31327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9835'. [ 425.199937][T31327] vlan1: entered promiscuous mode [ 425.203390][T31327] bond119: (slave vlan1): Opening slave failed [ 425.350920][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.359373][T31348] syz_tun: entered allmulticast mode [ 425.362143][T31348] overlayfs: failed to clone upperpath [ 425.368195][T31347] syz_tun: left allmulticast mode [ 425.914174][T31397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9861'. [ 425.926302][T31397] vlan7: entered promiscuous mode [ 425.928441][T31397] bond146: (slave vlan7): Opening slave failed [ 425.938743][ T40] audit: type=1400 audit(1740562738.939:73029): avc: denied { remount } for pid=31400 comm="syz.7.9863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 425.938888][T31401] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9863'. [ 425.985123][ T40] audit: type=1400 audit(1740562738.989:73030): avc: denied { create } for pid=31402 comm="syz.7.9864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 425.991456][ T40] audit: type=1400 audit(1740562738.989:73031): avc: denied { write } for pid=31402 comm="syz.7.9864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 426.013221][T31405] sctp: [Deprecated]: syz.2.9865 (pid 31405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.013221][T31405] Use struct sctp_sack_info instead [ 426.019652][T31405] overlayfs: failed to clone upperpath [ 426.029406][ T40] audit: type=1326 audit(1740562739.029:73032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31406 comm="syz.7.9866" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f105cd8d169 code=0x0 [ 426.206860][T31423] vlan0: entered allmulticast mode [ 426.375986][T31434] netlink: 'syz.5.9874': attribute type 1 has an invalid length. [ 426.400918][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 426.407646][ T40] audit: type=1800 audit(1740562739.409:73033): pid=31431 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.9874" name="nullb0" dev="tmpfs" ino=4755 res=0 errno=0 [ 426.580393][T31440] bridge_slave_0: left promiscuous mode [ 426.582497][T31440] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.585533][T31440] bridge_slave_1: left promiscuous mode [ 426.587277][T31440] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.591541][T31440] bond0: (slave bond_slave_0): Releasing backup interface [ 426.594422][T31440] bond0: (slave bond_slave_1): Releasing backup interface [ 426.597221][T31440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.599971][T31440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.603577][T31440] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 426.605849][T31440] bridge0: port 3(netdevsim0) entered disabled state [ 426.611074][T31440] bond19: (slave gretap1): Releasing active interface [ 426.615377][T31440] bond51: (slave vcan0): Releasing backup interface [ 426.619427][T31440] bond52: (slave veth3): Releasing active interface [ 426.624516][T31440] bond53: (slave geneve2): Releasing active interface [ 426.628535][T31440] bond54: (slave ip6gretap2): Releasing active interface [ 426.632758][T31456] netlink: 'syz.6.9877': attribute type 10 has an invalid length. [ 426.637496][T31440] bond62: (slave veth7): Releasing active interface [ 426.644821][T31440] bond66: (slave veth9): Releasing active interface [ 426.669240][T31440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.719578][T31460] cgroup: release_agent respecified [ 426.883577][T31474] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9889'. [ 426.886398][T31476] afs: Unknown parameter 'dy€$tock' [ 426.902306][T31474] vlan4: entered promiscuous mode [ 426.904970][T31474] bond8: (slave vlan4): Opening slave failed [ 426.939510][T31486] ip6t_srh: unknown srh match flags 4000 [ 426.944329][T31486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9892'. [ 427.430856][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.632422][T31550] bond120: (slave vcan1): Releasing backup interface [ 427.646156][T31550] netlink: 'syz.2.9912': attribute type 10 has an invalid length. [ 427.650481][T31550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.692334][T31568] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9916'. [ 427.752165][T31572] overlayfs: failed to clone upperpath [ 427.755432][T31572] /dev/nbd6: Can't lookup blockdev [ 427.827322][T31576] vlan4: entered promiscuous mode [ 427.829378][T31576] bond9: (slave vlan4): Opening slave failed [ 427.920466][T31587] Debayer A: ================= START STATUS ================= [ 427.923341][T31587] Debayer A: Debayer Mean Window Size: 3 [ 427.926807][T31587] Debayer A: ================== END STATUS ================== [ 427.931359][ T40] audit: type=1400 audit(1740562740.939:73034): avc: denied { listen } for pid=31586 comm="syz.7.9924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 427.942119][ T40] audit: type=1400 audit(1740562740.939:73035): avc: denied { accept } for pid=31586 comm="syz.7.9924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 427.992917][T31592] vlan0: entered allmulticast mode [ 428.346700][T31602] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 428.470803][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.781544][T31625] bond0: (slave team0): Releasing backup interface [ 428.791686][T31625] bridge_slave_0: left allmulticast mode [ 428.793540][T31625] bridge_slave_0: left promiscuous mode [ 428.795226][T31625] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.800309][T31625] bridge_slave_1: left allmulticast mode [ 428.803186][T31625] bridge_slave_1: left promiscuous mode [ 428.804907][T31625] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.809283][T31625] bond0: (slave bond_slave_0): Releasing backup interface [ 428.815112][T31625] bond0: (slave bond_slave_1): Releasing backup interface [ 428.830104][T31625] team0: Port device team_slave_0 removed [ 428.832733][T31628] netlink: 'syz.7.9937': attribute type 10 has an invalid length. [ 428.839712][T31625] team0: Port device team_slave_1 removed [ 428.843037][T31625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.845252][T31625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.848045][T31625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.850170][T31625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.880372][T31628] wlan1: mtu less than device minimum [ 428.882969][T31628] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 428.907249][T31625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.948444][T31639] overlayfs: failed to clone upperpath [ 429.358924][T31661] __nla_validate_parse: 3 callbacks suppressed [ 429.358937][T31661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9953'. [ 429.376335][T31661] vlan1: entered promiscuous mode [ 429.379592][T31661] bond120: (slave vlan1): Opening slave failed [ 429.511160][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.706853][T31691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.932409][T31716] atomic_op ffff888052c0a198 conn xmit_atomic 0000000000000000 [ 429.957394][ T40] audit: type=1400 audit(1740562742.959:73036): avc: denied { watch watch_reads } for pid=31719 comm="syz.6.9973" path="/2087/file0" dev="tmpfs" ino=11607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 429.994746][T31731] overlayfs: failed to clone upperpath [ 430.048661][T31742] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9980'. [ 430.076683][T31745] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 430.081697][T31745] tmpfs: Invalid gid '0x00000000ffffffff' [ 430.085828][T31747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9982'. [ 430.096987][T31747] vlan7: entered promiscuous mode [ 430.098974][T31747] bond147: (slave vlan7): Opening slave failed [ 430.342319][ T40] audit: type=1326 audit(1740562743.349:73037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31777 comm="syz.5.9992" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8eba78d169 code=0x0 [ 430.354549][T31769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29696 sclass=netlink_route_socket pid=31769 comm=syz.2.9989 [ 430.529333][T31789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9996'. [ 430.560957][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 430.585865][T31794] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 430.591835][T31794] Error validating options; rc = [-22] [ 430.609871][T31795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.247651][ T40] audit: type=1400 audit(1740562744.249:73038): avc: denied { relabelfrom } for pid=31810 comm="syz.5.10005" name="" dev="pipefs" ino=95129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 431.247828][T31811] SELinux: Context system_u: is not valid (left unmapped). [ 431.255826][T31819] tipc: Enabling not permitted [ 431.259579][T31819] tipc: Enabling of bearer rejected, failed to enable media [ 431.262386][ T40] audit: type=1400 audit(1740562744.269:73039): avc: denied { relabelto } for pid=31810 comm="syz.5.10005" name="" dev="pipefs" ino=95129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:" [ 431.315838][T31830] netlink: 830 bytes leftover after parsing attributes in process `syz.6.10010'. [ 431.342646][T31831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.414305][ T40] audit: type=1400 audit(1740562744.419:73040): avc: denied { read } for pid=31841 comm="syz.5.10016" name="file0" dev="tmpfs" ino=14026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 431.421138][ T40] audit: type=1400 audit(1740562744.419:73041): avc: denied { open } for pid=31841 comm="syz.5.10016" path="/2548/file0" dev="tmpfs" ino=14026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 431.423166][T31842] overlay: ./file0 is not a directory [ 431.427897][ T40] audit: type=1400 audit(1740562744.429:73042): avc: denied { ioctl } for pid=31841 comm="syz.5.10016" path="/2548/file0" dev="tmpfs" ino=14026 ioctlcmd=0xaed4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 431.457630][T31847] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10018'. [ 431.482072][T31847] vlan0: entered promiscuous mode [ 431.484161][T31847] bond73: (slave vlan0): Opening slave failed [ 431.590883][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 431.597433][T31859] netlink: 830 bytes leftover after parsing attributes in process `syz.5.10022'. [ 431.698078][T31868] fuse: Bad value for 'fd' [ 431.817836][T31876] netlink: 1268 bytes leftover after parsing attributes in process `syz.6.10028'. [ 431.820521][T31876] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 431.824109][T31876] netlink: 'syz.6.10028': attribute type 2 has an invalid length. [ 431.826487][T31876] netlink: 16138 bytes leftover after parsing attributes in process `syz.6.10028'. [ 431.866675][T31881] xt_hashlimit: size too large, truncated to 1048576 [ 431.913843][T31886] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10033'. [ 431.964824][T31891] netlink: 'syz.7.10034': attribute type 10 has an invalid length. [ 431.967723][T31891] wlan1: mtu less than device minimum [ 431.969357][T31891] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 431.978693][T31891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.149269][T31913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.429394][T31923] overlayfs: failed to clone upperpath [ 432.567497][ T40] audit: type=1400 audit(1740562745.569:73043): avc: denied { nlmsg_read } for pid=31934 comm="syz.5.10050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 432.624919][T31939] vlan1: entered promiscuous mode [ 432.626976][T31939] bond121: (slave vlan1): Opening slave failed [ 432.640828][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.734150][T31950] netlink: 'syz.7.10053': attribute type 7 has an invalid length. [ 432.737077][T31950] netlink: 'syz.7.10053': attribute type 8 has an invalid length. [ 432.742721][T31950] bridge0: entered promiscuous mode [ 432.745498][T31950] batadv_slave_1: entered promiscuous mode [ 432.749170][T31950] bridge0: left promiscuous mode [ 432.763844][T31950] batadv_slave_1: left promiscuous mode [ 432.817364][T31957] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 432.828556][T31948] netlink: 'syz.5.10055': attribute type 10 has an invalid length. [ 432.832496][T31948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.908540][T31969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.452302][ T40] audit: type=1400 audit(1740562746.459:73044): avc: denied { ioctl } for pid=31991 comm="syz.7.10072" path="socket:[95972]" dev="sockfs" ino=95972 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 433.627146][T32014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.670980][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.690081][T32022] vlan0: entered allmulticast mode [ 433.697405][T32011] netlink: 'syz.2.10080': attribute type 10 has an invalid length. [ 433.700510][T32011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.797055][T32024] vlan0: entered promiscuous mode [ 433.799182][T32024] bond74: (slave vlan0): Opening slave failed [ 434.232976][T32052] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 434.268907][T32052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=32052 comm=syz.2.10096 [ 434.283958][T32059] overlayfs: failed to resolve './file1': -2 [ 434.303284][T32055] could not allocate digest TFM handle sha384-ce [ 434.335945][T32066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.453137][T32077] netlink: 'syz.7.10105': attribute type 10 has an invalid length. [ 434.455920][T32077] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 434.599992][T32087] __nla_validate_parse: 17 callbacks suppressed [ 434.600004][T32087] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10109'. [ 434.663371][T32094] vlan7: entered allmulticast mode [ 434.720952][ C1] net_ratelimit: 1 callbacks suppressed [ 434.720964][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.741715][T32096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10112'. [ 434.753734][T32096] vlan7: entered promiscuous mode [ 434.756047][T32096] bond148: (slave vlan7): Opening slave failed [ 434.959204][T32103] netlink: 'syz.2.10115': attribute type 10 has an invalid length. [ 435.007260][ T40] audit: type=1400 audit(1740562748.009:73045): avc: denied { cmd } for pid=32114 comm="syz.2.10117" path="socket:[96054]" dev="sockfs" ino=96054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 435.085364][T32119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10118'. [ 435.200703][T32130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.315903][T32132] netlink: 'syz.5.10125': attribute type 10 has an invalid length. [ 435.366447][T32138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10126'. [ 435.750849][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.785334][T32150] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10130'. [ 435.789502][T32150] overlayfs: failed to clone upperpath [ 435.867587][T32155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10132'. [ 435.900642][T32157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10133'. [ 436.138665][T32170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.173078][T32160] netlink: 'syz.6.10134': attribute type 10 has an invalid length. [ 436.176826][T32160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.186634][T32174] geneve3: entered promiscuous mode [ 436.188196][T32174] geneve3: entered allmulticast mode [ 436.319873][T32181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10140'. [ 436.332953][T32181] vlan1: entered promiscuous mode [ 436.335002][T32181] bond122: (slave vlan1): Opening slave failed [ 436.669637][ T40] audit: type=1400 audit(1740562749.669:73046): avc: denied { accept } for pid=32194 comm="syz.5.10145" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 436.693163][T32202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10147'. [ 436.706230][T32204] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10148'. [ 436.747978][ T40] audit: type=1400 audit(1740562749.749:73047): avc: denied { listen } for pid=32213 comm="syz.2.10153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 436.765804][T32220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.790916][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.908073][T32228] overlayfs: failed to clone upperpath [ 437.028346][T32230] netlink: 'syz.2.10158': attribute type 10 has an invalid length. [ 437.032478][T32230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.300707][ T40] audit: type=1326 audit(1740562750.299:73048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32238 comm="syz.5.10159" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8eba78d169 code=0x0 [ 437.307414][ T40] audit: type=1326 audit(1740562750.299:73049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32238 comm="syz.5.10159" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8eba78d169 code=0x0 [ 437.516411][T32241] hsr_slave_1 (unregistering): left promiscuous mode [ 437.588872][T32257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.606638][ T40] audit: type=1400 audit(1740562750.609:73050): avc: denied { append } for pid=32256 comm="syz.7.10166" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 437.616571][ T40] audit: type=1400 audit(1740562750.609:73051): avc: denied { map } for pid=32256 comm="syz.7.10166" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 437.626588][ T40] audit: type=1400 audit(1740562750.609:73052): avc: denied { execute } for pid=32256 comm="syz.7.10166" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 437.643068][T32270] vlan7: entered promiscuous mode [ 437.645828][T32270] bond149: (slave vlan7): Opening slave failed [ 437.767703][T32280] netlink: 'syz.6.10173': attribute type 10 has an invalid length. [ 437.772406][T32280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.781073][T32293] erspan2: entered promiscuous mode [ 437.786273][ T40] audit: type=1400 audit(1740562750.789:73053): avc: denied { getopt } for pid=32291 comm="syz.2.10176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 437.830832][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 437.890823][ T40] audit: type=1400 audit(1740562750.889:73054): avc: denied { mounton } for pid=32302 comm="syz.7.10181" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 437.893039][T32303] omfs: Invalid superblock (0) [ 438.832135][T32334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.870799][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 439.329522][T32340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.431874][T32353] vlan7: entered allmulticast mode [ 439.718659][T32362] __nla_validate_parse: 7 callbacks suppressed [ 439.718671][T32362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10203'. [ 439.734832][T32362] vlan1: entered promiscuous mode [ 439.736864][T32362] bond123: (slave vlan1): Opening slave failed [ 439.832596][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.834497][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.842678][ T832] usb 12-1: ath9k_htc: Firmware htc_9271.fw requested [ 439.845082][ T6133] EXT4-fs error (device sda1): ext4_lookup:1813: inode #379: comm kworker/0:5: iget: checksum invalid [ 439.848515][ T6133] usb 12-1: loading /lib/firmware/htc_9271.fw failed with error -74 [ 439.851712][ T6133] usb 12-1: Direct firmware load for htc_9271.fw failed with error -74 [ 439.854400][ T6133] usb 12-1: Falling back to sysfs fallback for: htc_9271.fw [ 439.870334][T32369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10206'. [ 439.873716][T32369] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10206'. [ 439.876574][T32371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.910886][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 439.972932][T32377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10208'. [ 440.032463][T32383] erspan0: default FDB implementation only supports local addresses [ 440.099112][T32394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10216'. [ 440.145706][T32391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.770322][T32422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.950829][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.998231][T32431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.305091][T32435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10232'. [ 441.323234][T32435] vlan0: entered promiscuous mode [ 441.326026][T32435] bond75: (slave vlan0): Opening slave failed [ 441.412979][T32437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10233'. [ 441.480072][T32453] 9pnet_fd: Insufficient options for proto=fd [ 441.493195][T32459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10240'. [ 441.523378][T32463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.603178][T32472] netlink: 1 bytes leftover after parsing attributes in process `syz.5.10243'. [ 441.604435][T32467] »»»»»» speed is unknown, defaulting to 1000 [ 441.701438][ T40] audit: type=1400 audit(1740562754.699:73055): avc: denied { module_load } for pid=32451 comm="syz.2.10238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 441.845834][T32490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.990909][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 442.144054][T32502] vlan0: entered allmulticast mode [ 442.352432][T32510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10261'. [ 442.372091][T32510] vlan7: entered promiscuous mode [ 442.374497][T32510] bond150: (slave vlan7): Opening slave failed [ 442.388884][T32513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.040837][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.056334][T32533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.348628][T32545] xt_hashlimit: invalid interval [ 443.353202][T32545] xt_hashlimit: invalid interval [ 443.449198][T32554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.946989][T32589] vlan1: entered promiscuous mode [ 443.949136][T32589] bond124: (slave vlan1): Opening slave failed [ 443.980442][T32581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.036462][T32600] netlink: 'syz.5.10293': attribute type 8 has an invalid length. [ 444.070919][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.561067][T32612] xt_l2tp: invalid flags combination: c [ 444.651428][T32614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.955980][T32619] __nla_validate_parse: 3 callbacks suppressed [ 444.955995][T32619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10300'. [ 445.110836][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 445.225299][T32632] netlink: 'syz.7.10306': attribute type 10 has an invalid length. [ 445.228374][T32632] wlan1: mtu less than device minimum [ 445.230057][T32632] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 445.233985][T32632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.465732][T32647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.856047][T32655] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10317'. [ 445.870594][T32655] vlan4: entered promiscuous mode [ 445.873037][T32655] bond10: (slave vlan4): Opening slave failed [ 445.957812][T32658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10318'. [ 445.962479][ T40] audit: type=1400 audit(1740562758.969:73056): avc: denied { read write } for pid=32657 comm="syz.7.10318" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 445.970028][ T40] audit: type=1400 audit(1740562758.969:73057): avc: denied { open } for pid=32657 comm="syz.7.10318" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 445.980094][ T5937] hid-generic 0624:00E1:0002.0002: unknown main item tag 0x6 [ 445.983150][ T5937] hid-generic 0624:00E1:0002.0002: unknown main item tag 0x4 [ 445.985577][ T5937] hid-generic 0624:00E1:0002.0002: ignoring exceeding usage max [ 445.989422][ T5937] hid-generic 0624:00E1:0002.0002: unknown main item tag 0x2 [ 445.993060][ T5937] hid-generic 0624:00E1:0002.0002: item fetching failed at offset 49/160 [ 446.001026][ T5937] hid-generic 0624:00E1:0002.0002: probe with driver hid-generic failed with error -22 [ 446.036372][T32664] futex_wake_op: syz.6.10321 tries to shift op by 32; fix this program [ 446.069730][T32666] netlink: 'syz.7.10322': attribute type 10 has an invalid length. [ 446.072656][T32666] wlan1: mtu less than device minimum [ 446.074361][T32666] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 446.077779][T32666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.160831][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 446.606256][T32683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10327'. [ 446.635063][T32683] vlan7: entered promiscuous mode [ 446.638081][T32683] bond151: (slave vlan7): Opening slave failed [ 446.696953][T32688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.723324][T32690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10330'. [ 446.843206][T32696] vlan7: entered allmulticast mode [ 446.988528][T32700] overlayfs: failed to clone upperpath [ 447.010997][T32700] fuseblk: Unknown parameter 'workdir' [ 447.074645][T32710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10339'. [ 447.078949][T32713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10340'. [ 447.179618][T32710] smc: removing net device team_slave_1 with user defined pnetid SYZ1 [ 447.190793][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.208581][T32718] vlan7: entered promiscuous mode [ 447.211992][T32718] bond152: (slave vlan7): Opening slave failed [ 447.340453][T32731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10346'. [ 447.410185][T32741] netlink: 'syz.5.10349': attribute type 10 has an invalid length. [ 447.412754][T32741] netlink: 2 bytes leftover after parsing attributes in process `syz.5.10349'. [ 447.415598][T32741] netlink: 'syz.5.10349': attribute type 62 has an invalid length. [ 447.415962][T32742] netlink: 'syz.5.10349': attribute type 62 has an invalid length. [ 447.467315][T32747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.572036][T32751] netlink: 'syz.2.10352': attribute type 13 has an invalid length. [ 447.635366][T32758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10354'. [ 447.998650][ T308] netlink: 'syz.5.10360': attribute type 12 has an invalid length. [ 448.076950][ T312] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 448.076950][ T312] The task syz.5.10361 (312) triggered the difference, watch for misbehavior. [ 448.193269][ T317] netlink: 'syz.7.10364': attribute type 10 has an invalid length. [ 448.196068][ T317] wlan1: mtu less than device minimum [ 448.197803][ T317] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 448.202475][ T317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.240816][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 448.270621][ T332] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 448.271727][ T331] vlan0: entered allmulticast mode [ 448.275233][ T332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.361182][ T336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.758798][ T339] vlan4: entered promiscuous mode [ 448.761118][ T339] bond11: (slave vlan4): Opening slave failed [ 448.847686][ T40] audit: type=1400 audit(1740562761.849:73058): avc: denied { listen } for pid=341 comm="syz.7.10373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 448.904804][ T349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.918950][ T40] audit: type=1400 audit(1740562761.919:73059): avc: denied { write } for pid=350 comm="syz.7.10377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 448.951213][ T358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.957570][ T358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.968916][ T360] syzkaller1: entered promiscuous mode [ 448.970588][ T360] syzkaller1: entered allmulticast mode [ 449.127762][ T40] audit: type=1400 audit(1740562762.129:73060): avc: denied { append } for pid=361 comm="syz.7.10380" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 449.135011][ T40] audit: type=1400 audit(1740562762.129:73061): avc: denied { getopt } for pid=361 comm="syz.7.10380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 449.139505][ T362] nbd: must specify a size in bytes for the device [ 449.197220][ T372] netlink: 'syz.7.10382': attribute type 10 has an invalid length. [ 449.199954][ T372] wlan1: mtu less than device minimum [ 449.201718][ T372] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 449.205267][ T372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.376895][ T384] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 449.380117][ T384] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 449.385145][ T384] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 449.439751][ T391] vlan0: entered allmulticast mode [ 449.510315][ T399] vlan1: entered promiscuous mode [ 449.512834][ T399] bond125: (slave vlan1): Opening slave failed [ 449.671114][ T40] audit: type=1400 audit(1740562762.679:73062): avc: denied { read } for pid=419 comm="syz.5.10404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 449.685377][ T422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.696824][ T40] audit: type=1400 audit(1740562762.699:73063): avc: denied { shutdown } for pid=423 comm="syz.5.10406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 449.762643][ T428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.816042][ T404] netlink: 'syz.2.10396': attribute type 1 has an invalid length. [ 449.866082][ T40] audit: type=1400 audit(1740562762.869:73064): avc: denied { create } for pid=435 comm="syz.2.10411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 449.928036][ T445] vlan4: entered promiscuous mode [ 449.930580][ T445] bond12: (slave vlan4): Opening slave failed [ 450.021421][ T450] netlink: 'syz.2.10416': attribute type 10 has an invalid length. [ 450.025241][ T450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.042817][ T456] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 450.043685][ T11] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 450.054628][ T11] Bluetooth: hci0: Frame reassembly failed (-84) [ 450.317954][ T472] netlink: 'syz.6.10421': attribute type 3 has an invalid length. [ 450.320861][ C1] net_ratelimit: 1 callbacks suppressed [ 450.320872][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 450.321197][ T472] __nla_validate_parse: 6 callbacks suppressed [ 450.321211][ T472] netlink: 132 bytes leftover after parsing attributes in process `syz.6.10421'. [ 450.332942][ T472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10421'. [ 450.569786][ T489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10426'. [ 450.586299][ T489] vlan0: entered promiscuous mode [ 450.589260][ T489] bond76: (slave vlan0): Opening slave failed [ 450.702857][ T494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10428'. [ 450.766383][ T40] audit: type=1400 audit(1740562763.769:73065): avc: denied { accept } for pid=495 comm="syz.6.10429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 451.015615][ T516] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10437'. [ 451.027945][ T516] vlan0: entered promiscuous mode [ 451.030024][ T516] bond77: (slave vlan0): Opening slave failed [ 451.192484][ T538] fuse: Bad value for 'user_id' [ 451.193989][ T538] fuse: Bad value for 'user_id' [ 451.281414][ T547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.350805][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 451.426284][ T561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10457'. [ 451.438390][ T561] vlan7: entered promiscuous mode [ 451.440364][ T561] bond153: (slave vlan7): Opening slave failed [ 451.491241][ T569] netlink: 'syz.5.10458': attribute type 7 has an invalid length. [ 451.529254][ T575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10460'. [ 451.591204][ T582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10461'. [ 452.070882][ T5956] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 452.071390][ T5962] Bluetooth: hci0: command 0x1003 tx timeout [ 452.153478][ T607] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10472'. [ 452.167443][ T607] vlan4: entered promiscuous mode [ 452.170394][ T607] bond13: (slave vlan4): Opening slave failed [ 452.278710][ T610] netlink: 'syz.7.10473': attribute type 10 has an invalid length. [ 452.282652][ T610] wlan1: mtu less than device minimum [ 452.284745][ T610] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 452.290523][ T610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.400841][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 452.411882][ T614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10475'. [ 452.538054][ T635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.542022][ T40] audit: type=1400 audit(1740562765.549:73066): avc: denied { override_creds } for pid=617 comm="syz.2.10477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 452.645899][ T642] vlan1: entered promiscuous mode [ 452.647941][ T642] bond126: (slave vlan1): Opening slave failed [ 452.903147][ T653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.078462][ T655] netlink: zone id is out of range [ 453.080020][ T655] netlink: del zone limit has 4 unknown bytes [ 453.232534][ T659] netlink: 'syz.6.10493': attribute type 10 has an invalid length. [ 453.236455][ T659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.418115][ T675] netlink: 'syz.2.10497': attribute type 8 has an invalid length. [ 453.440838][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.500052][ T677] bond0: entered promiscuous mode [ 453.502135][ T677] bond0: left promiscuous mode [ 453.507657][ T678] bond0: entered promiscuous mode [ 453.509708][ T678] bond0: left promiscuous mode [ 453.697866][ T688] overlayfs: missing 'workdir' [ 453.950490][ T710] netlink: 'syz.6.10511': attribute type 10 has an invalid length. [ 453.955338][ T710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.276150][ T727] overlayfs: failed to clone upperpath [ 454.379139][ T40] audit: type=1400 audit(1740562767.379:73067): avc: denied { append } for pid=732 comm="syz.7.10519" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 454.389204][ T40] audit: type=1400 audit(1740562767.389:73068): avc: denied { ioctl } for pid=732 comm="syz.7.10519" path="socket:[99170]" dev="sockfs" ino=99170 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 454.470826][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 454.491990][ T751] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=52 sclass=netlink_tcpdiag_socket pid=751 comm=syz.7.10526 [ 454.501908][ T751] netlink: ct family unspecified [ 454.503414][ T751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.506815][ T754] vlan0: entered allmulticast mode [ 454.508735][ T40] audit: type=1400 audit(1740562767.509:73069): avc: denied { ioctl } for pid=749 comm="syz.7.10526" path="/dev/usbmon1" dev="devtmpfs" ino=738 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 454.562345][ T40] audit: type=1400 audit(1740562767.569:73070): avc: denied { bind } for pid=758 comm="syz.2.10529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 454.562633][ T758] delete_channel: no stack [ 454.729233][ T784] vlan7: entered promiscuous mode [ 454.732773][ T784] bond154: (slave vlan7): Opening slave failed [ 454.742923][ T40] audit: type=1800 audit(1740562767.749:73071): pid=787 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.10540" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 454.886936][ T796] RDS: rds_bind could not find a transport for fe80::41, load rds_tcp or rds_rdma? [ 455.510795][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.545398][ T829] __nla_validate_parse: 11 callbacks suppressed [ 455.545409][ T829] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10557'. [ 455.568922][ T831] xt_hashlimit: size too large, truncated to 1048576 [ 455.594221][ T834] netlink: 'syz.7.10559': attribute type 10 has an invalid length. [ 455.597018][ T834] wlan1: mtu less than device minimum [ 455.598666][ T834] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 455.603827][ T834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.675135][ T846] fuse: Unknown parameter 'roÉtmode' [ 455.800014][ T862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.896118][ T873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10573'. [ 455.929322][ T878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10576'. [ 455.941855][ T880] overlayfs: failed to clone upperpath [ 455.981080][ T884] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10579'. [ 456.043612][ T889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=889 comm=syz.6.10581 [ 456.156109][ T893] could not allocate digest TFM handle blake2s-160 [ 456.204820][ T906] : entered promiscuous mode [ 456.418215][ T921] netlink: 'syz.6.10593': attribute type 10 has an invalid length. [ 456.421508][ T921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.509302][ T940] overlayfs: failed to clone upperpath [ 456.550786][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 456.789145][ T946] x_tables: duplicate underflow at hook 2 [ 456.843675][ T952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10603'. [ 456.957929][ T40] audit: type=1400 audit(1740562769.959:73072): avc: denied { lock } for pid=963 comm="syz.2.10607" path="socket:[101201]" dev="sockfs" ino=101201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 456.989140][ T970] overlayfs: failed to clone upperpath [ 457.069277][ T40] audit: type=1400 audit(1740562770.069:73073): avc: denied { accept } for pid=982 comm="syz.2.10613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 457.165532][ T1000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.226607][ T1008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.232366][ T1008] set match dimension is over the limit! [ 457.255638][ T996] netlink: 'syz.6.10618': attribute type 10 has an invalid length. [ 457.259889][ T996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.364637][ T40] audit: type=1400 audit(1740562770.369:73074): avc: denied { map } for pid=1018 comm="syz.5.10626" path="socket:[100276]" dev="sockfs" ino=100276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 457.385999][ T1023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10628'. [ 457.437137][ T1027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10630'. [ 457.469594][ T1031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.590884][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.819417][ T1064] overlayfs: failed to clone upperpath [ 457.870845][ T40] audit: type=1400 audit(1740562770.869:73075): avc: denied { read append } for pid=1076 comm="syz.7.10650" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 457.878399][ T40] audit: type=1400 audit(1740562770.869:73076): avc: denied { open } for pid=1076 comm="syz.7.10650" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 457.888414][ T1086] netlink: 76 bytes leftover after parsing attributes in process `syz.6.10651'. [ 457.917942][ T1091] overlayfs: failed to clone upperpath [ 457.954131][ T1099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.043076][ T1093] netlink: 'syz.2.10654': attribute type 10 has an invalid length. [ 458.048718][ T1093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.282324][ T1134] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10664'. [ 458.414614][ T1147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10668'. [ 458.550580][ T1167] vlan0: entered promiscuous mode [ 458.553909][ T1167] bond78: (slave vlan0): Opening slave failed [ 458.584368][ T1175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.630839][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 458.665955][ T1187] dns_resolver: Unsupported content type (3) [ 458.823185][ T1212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.840655][ T1201] netlink: 'syz.6.10685': attribute type 10 has an invalid length. [ 458.847326][ T1201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.287586][ T1228] vlan8: entered promiscuous mode [ 459.293258][ T1228] bond155: (slave vlan8): Opening slave failed [ 459.355262][ T1231] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 459.386924][ T1235] vlan0: entered allmulticast mode [ 459.544356][ T1249] overlayfs: failed to clone upperpath [ 459.633286][ T1258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.648092][ T1262] overlayfs: conflicting options: userxattr,redirect_dir=on [ 459.680796][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.706083][ T1267] xt_hashlimit: size too large, truncated to 1048576 [ 459.753872][ T1263] netlink: 'syz.2.10704': attribute type 10 has an invalid length. [ 459.756935][ T1263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.868024][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 459.868035][ T40] audit: type=1400 audit(1740562772.869:73078): avc: denied { getattr } for pid=1278 comm="syz.5.10711" path="socket:[101722]" dev="sockfs" ino=101722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 459.893345][ T1281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.311251][ T1293] vlan8: entered promiscuous mode [ 460.314285][ T1293] bond156: (slave vlan8): Opening slave failed [ 460.516530][ T1311] netlink: 'syz.2.10723': attribute type 10 has an invalid length. [ 460.521063][ T1311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.530491][ T1326] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44819 sclass=netlink_xfrm_socket pid=1326 comm=syz.6.10726 [ 460.710910][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.094835][ T1336] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 461.098328][ T1336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 461.098948][ T1335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.104001][ T1336] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 461.251452][ T40] audit: type=1326 audit(1740562774.259:73079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1348 comm="syz.7.10735" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f105cd8d169 code=0x0 [ 461.304853][ T1319] delete_channel: no stack [ 461.315280][ T1353] netlink: 'syz.5.10736': attribute type 10 has an invalid length. [ 461.318360][ T1353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.333191][ T1361] __nla_validate_parse: 9 callbacks suppressed [ 461.333201][ T1361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10738'. [ 461.472419][ T1373] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 461.622029][ T1376] ucma_write: process 961 (syz.7.10745) changed security contexts after opening file descriptor, this is not allowed. [ 461.656866][ T1380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.750877][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.887997][ T1387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10749'. [ 462.015863][ T1399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.185993][ T1416] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.10760'. [ 462.188813][ T1416] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 462.213856][ T1421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10761'. [ 462.214747][ T1422] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 462.413237][ T1437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10767'. [ 462.467199][ T1443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.790834][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 462.799931][ T1476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.834087][ T1476] macvlan0: entered allmulticast mode [ 462.845144][ T1476] macvlan0 (unregistering): left allmulticast mode [ 462.847385][ T1476] tipc: Disabling bearer [ 463.004000][ T1482] syz.7.10784 (1482): /proc/1481/oom_adj is deprecated, please use /proc/1481/oom_score_adj instead. [ 463.210988][ T1488] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10787'. [ 463.371621][ T1504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.379126][ T1506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10794'. [ 463.535642][ T1520] netlink: 'syz.6.10799': attribute type 10 has an invalid length. [ 463.538861][ T1520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.565236][ T1532] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10803'. [ 463.599428][ T1534] hsr_slave_1: Device is already in use. [ 463.603631][ T1534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10804'. [ 463.692655][ T1540] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10807'. [ 463.705116][ T1540] vlan4: entered promiscuous mode [ 463.707264][ T1540] bond14: (slave vlan4): Opening slave failed [ 463.830975][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 464.091860][ T1563] vlan1: entered promiscuous mode [ 464.094106][ T1563] bond127: (slave vlan1): Opening slave failed [ 464.300522][ T1605] overlayfs: failed to clone upperpath [ 464.336218][ T1607] vlan5: entered promiscuous mode [ 464.339243][ T1607] bond79: (slave vlan5): Opening slave failed [ 464.459923][ T1629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.724555][ T1653] vlan8: entered promiscuous mode [ 464.727295][ T1653] bond157: (slave vlan8): Opening slave failed [ 464.880857][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.197606][ T1705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.425813][ T1719] netlink: 'syz.6.10873': attribute type 10 has an invalid length. [ 465.429213][ T1719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.844307][ T1757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.920790][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.983981][ T1761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.296745][ T1763] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 466.322471][ T1765] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 466.361212][ T1768] __nla_validate_parse: 14 callbacks suppressed [ 466.361229][ T1768] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10892'. [ 466.465978][ T1778] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 466.469490][ T1778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.477596][ T1778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10897'. [ 466.510649][ T1782] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10899'. [ 466.535614][ T1788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10901'. [ 466.574416][ T1791] overlayfs: failed to clone upperpath [ 466.579797][ T1794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.620594][ T1796] macvtap1: entered allmulticast mode [ 466.622349][ T1796] batadv0: entered allmulticast mode [ 466.625548][ T1796] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 466.629260][ T1796] batadv0: left allmulticast mode [ 466.720226][ T1798] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10906'. [ 466.857337][ T1811] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10911'. [ 466.860051][ T1811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10911'. [ 466.863516][ T1811] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10911'. [ 466.866325][ T1811] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10911'. [ 466.887473][ T1812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.900101][ T1814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10912'. [ 466.936177][ T1816] overlayfs: failed to clone upperpath [ 466.950853][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 467.054077][ T1824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=1824 comm=syz.5.10917 [ 467.120937][ T1830] netlink: 'syz.5.10920': attribute type 4 has an invalid length. [ 467.124534][ T1830] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 467.177248][ T1834] overlayfs: failed to clone upperpath [ 467.230552][ T1839] vlan1: entered promiscuous mode [ 467.233004][ T1839] bond128: (slave vlan1): Opening slave failed [ 467.387117][ T1863] overlayfs: failed to clone upperpath [ 467.419500][ T40] audit: type=1400 audit(1740562780.419:73080): avc: denied { getopt } for pid=1867 comm="syz.2.10937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 467.552544][ T1888] overlayfs: failed to clone upperpath [ 467.678731][ T1904] tmpfs: Bad value for 'mpol' [ 467.680571][ T1904] overlayfs: failed to clone upperpath [ 467.770456][ T1912] overlayfs: failed to clone upperpath [ 467.991053][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 468.216529][ T1934] vlan4: entered promiscuous mode [ 468.218817][ T1934] bond15: (slave vlan4): Opening slave failed [ 468.220169][ T1937] xt_hashlimit: size too large, truncated to 1048576 [ 468.276055][ T1942] 9pnet_fd: Insufficient options for proto=fd [ 468.288793][ T40] audit: type=1400 audit(1740562781.289:73081): avc: denied { ioctl } for pid=1944 comm="syz.7.10967" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 468.294837][ T1947] dns_resolver: Unsupported content type (254) [ 468.398165][ T1956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.618915][ T1979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.030862][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 469.271935][ T2015] FAULT_INJECTION: forcing a failure. [ 469.271935][ T2015] name failslab, interval 1, probability 0, space 0, times 0 [ 469.274530][ T2017] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 469.276710][ T2015] CPU: 3 UID: 0 PID: 2015 Comm: syz.7.10994 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 469.276733][ T2015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 469.276743][ T2015] Call Trace: [ 469.276749][ T2015] [ 469.276756][ T2015] dump_stack_lvl+0x16c/0x1f0 [ 469.276782][ T2015] should_fail_ex+0x50a/0x650 [ 469.276806][ T2015] ? fs_reclaim_acquire+0xae/0x150 [ 469.276830][ T2015] should_failslab+0xc2/0x120 [ 469.276849][ T2015] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 469.276867][ T2015] ? getname_flags.part.0+0x4c/0x550 [ 469.276891][ T2015] getname_flags.part.0+0x4c/0x550 [ 469.276913][ T2015] getname_flags+0x93/0xf0 [ 469.276937][ T2015] __x64_sys_link+0x58/0xa0 [ 469.276955][ T2015] do_syscall_64+0xcd/0x250 [ 469.276976][ T2015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.276997][ T2015] RIP: 0033:0x7f105cd8d169 [ 469.277011][ T2015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.277026][ T2015] RSP: 002b:00007f105dc71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 469.277043][ T2015] RAX: ffffffffffffffda RBX: 00007f105cfa5fa0 RCX: 00007f105cd8d169 [ 469.277054][ T2015] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000400000000000 [ 469.277064][ T2015] RBP: 00007f105dc71090 R08: 0000000000000000 R09: 0000000000000000 [ 469.277073][ T2015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.277083][ T2015] R13: 0000000000000000 R14: 00007f105cfa5fa0 R15: 00007fff2fc73798 [ 469.277103][ T2015] [ 469.327821][ T2017] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 469.358880][ T2020] vlan4: entered promiscuous mode [ 469.361396][ T2020] bond16: (slave vlan4): Opening slave failed [ 469.446103][ T2034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.494482][ T2038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.577467][ T2045] netlink: 'syz.7.11005': attribute type 4 has an invalid length. [ 469.579762][ T2045] netlink: 'syz.7.11005': attribute type 11 has an invalid length. [ 469.752043][ T2048] overlayfs: failed to clone upperpath [ 469.763469][ T2050] overlayfs: failed to clone upperpath [ 469.856929][ T2057] vlan8: entered promiscuous mode [ 469.859589][ T2057] bond158: (slave vlan8): Opening slave failed [ 469.967711][ T2061] overlayfs: failed to clone upperpath [ 470.080819][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 470.098729][ T2079] xt_hashlimit: max too large, truncated to 1048576 [ 470.261500][ T2091] overlayfs: failed to clone upperpath [ 470.657770][ T2122] vlan5: entered promiscuous mode [ 470.659784][ T2122] bond80: (slave vlan5): Opening slave failed [ 470.754502][ T2141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.812598][ T2143] »»»»»» speed is unknown, defaulting to 1000 [ 470.938610][ T2154] »»»»»» speed is unknown, defaulting to 1000 [ 470.967750][ T2158] ip6t_srh: unknown srh invflags 7863 [ 471.099855][ T2168] vlan1: entered promiscuous mode [ 471.103961][ T2168] bond129: (slave vlan1): Opening slave failed [ 471.120826][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.188535][ T2176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.368377][ T5956] Bluetooth: unknown link type 8 [ 471.370447][ T5956] Bluetooth: hci2: connection err: -111 [ 471.375532][ T2200] overlayfs: cannot append lower layer [ 471.536806][ T2216] __nla_validate_parse: 31 callbacks suppressed [ 471.536822][ T2216] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11075'. [ 471.545663][ T2216] overlayfs: failed to clone upperpath [ 471.555868][ T40] audit: type=1400 audit(1740562784.559:73082): avc: denied { read append } for pid=2217 comm="syz.7.11076" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 471.563614][ T40] audit: type=1400 audit(1740562784.559:73083): avc: denied { open } for pid=2217 comm="syz.7.11076" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 471.575229][ T2223] netlink: 1268 bytes leftover after parsing attributes in process `syz.5.11074'. [ 471.579000][ T2223] openvswitch: netlink: Flow key attribute not present in set flow. [ 471.730263][ T2227] netlink: 'syz.6.11078': attribute type 10 has an invalid length. [ 471.738569][ T2227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.805353][ T2248] netlink: 596 bytes leftover after parsing attributes in process `syz.2.11084'. [ 471.953361][ T5956] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 471.956034][ T40] audit: type=1400 audit(1740562784.959:73084): avc: denied { getopt } for pid=2258 comm="syz.7.11088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 472.150889][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 472.298632][ T2271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11093'. [ 472.412467][ T2273] openvswitch: netlink: nsh attr 10772 is out of range max 3 [ 472.415809][ T2273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.518209][ T2281] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11097'. [ 472.535213][ T2281] vlan5: entered promiscuous mode [ 472.537964][ T2281] bond81: (slave vlan5): Opening slave failed [ 472.893552][ T2306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11103'. [ 473.191071][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.197018][ T2316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11107'. [ 473.214001][ T2316] vlan1: entered promiscuous mode [ 473.216284][ T2316] bond130: (slave vlan1): Opening slave failed [ 473.460305][ T2328] /dev/sr0: Can't lookup blockdev [ 473.615130][ T2340] overlayfs: failed to clone upperpath [ 473.659547][ T40] audit: type=1400 audit(1740562786.659:73085): avc: denied { bind } for pid=2337 comm="syz.6.11114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 473.858940][ T2377] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11132'. [ 473.895251][ T2388] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11135'. [ 473.935315][ T2395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11138'. [ 473.940010][ T2395] vlan5: entered promiscuous mode [ 473.941819][ T2395] vlan5: entered allmulticast mode [ 474.230906][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 474.882768][ T2425] batadv_slave_1: entered promiscuous mode [ 474.885929][ T2423] batadv_slave_1: left promiscuous mode [ 475.270849][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 475.613707][ T2433] 9pnet: Unknown protocol version 9p20\++} [ 475.707853][ T2443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.833717][ T2453] random: crng reseeded on system resumption [ 476.310947][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 476.451745][ T2480] overlayfs: failed to clone upperpath [ 476.501261][ T2482] vlan5: entered promiscuous mode [ 476.503434][ T2482] bond82: (slave vlan5): Opening slave failed [ 476.678991][ T2490] netlink: 'syz.5.11172': attribute type 10 has an invalid length. [ 476.686223][ T2490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.839780][ T2507] overlayfs: missing 'lowerdir' [ 476.915611][ T2511] __nla_validate_parse: 2 callbacks suppressed [ 476.915629][ T2511] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11180'. [ 476.934721][ T2511] vlan5: entered promiscuous mode [ 476.936765][ T2511] bond83: (slave vlan5): Opening slave failed [ 477.360887][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 477.744027][ T2547] overlayfs: failed to clone upperpath [ 477.827183][ T2555] fuse: Bad value for 'fd' [ 477.877451][ T2558] overlayfs: failed to clone upperpath [ 478.056025][ T40] audit: type=1326 audit(1740562791.059:73086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2521 comm="syz.5.11185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eba78d169 code=0x7fc00000 [ 478.117449][ T2581] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11206'. [ 478.261338][ T2595] overlayfs: failed to clone upperpath [ 478.350670][ T2606] overlay: Unknown parameter 'audit' [ 478.359916][ T2606] netlink: 'syz.5.11213': attribute type 4 has an invalid length. [ 478.390791][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 478.448318][ T2616] netlink: 76 bytes leftover after parsing attributes in process `syz.5.11217'. [ 478.650546][ T2632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11222'. [ 478.714242][ T2638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11224'. [ 478.755144][ T2644] tipc: Enabling of bearer rejected, failed to enable media [ 478.826084][ T2649] overlayfs: failed to clone upperpath [ 478.834681][ T2649] : entered promiscuous mode [ 479.422329][ T2683] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11236'. [ 479.427130][ T2683] netlink: 'syz.6.11236': attribute type 6 has an invalid length. [ 479.427806][ T2682] netlink: 'syz.7.11235': attribute type 10 has an invalid length. [ 479.429947][ T2683] netlink: 'syz.6.11236': attribute type 5 has an invalid length. [ 479.432950][ T2682] wlan1: mtu less than device minimum [ 479.432960][ T2682] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 479.434560][ T2682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.435727][ T2683] netlink: 'syz.6.11236': attribute type 4 has an invalid length. [ 479.440805][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 479.570316][ T2697] netlink: 76 bytes leftover after parsing attributes in process `syz.6.11239'. [ 479.813107][ T2701] overlayfs: failed to clone upperpath [ 479.988446][ T2726] netlink: 76 bytes leftover after parsing attributes in process `syz.7.11248'. [ 480.002598][ T2722] overlayfs: failed to clone upperpath [ 480.035783][ T2733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.076298][ T2739] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11254'. [ 480.079823][ T2717] »»»»»» speed is unknown, defaulting to 1000 [ 480.243577][ T2750] netlink: 'syz.5.11257': attribute type 10 has an invalid length. [ 480.247325][ T2750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.290855][ T2770] xt_hashlimit: size too large, truncated to 1048576 [ 480.309267][ T2772] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11262'. [ 480.346469][ T2777] overlayfs: failed to clone upperpath [ 480.403018][ T2790] tmpfs: Bad value for 'mpol' [ 480.470862][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.598771][ T2810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 480.645540][ T2823] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 480.680928][ T2827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.759077][ T2841] /dev/nbd6: Can't lookup blockdev [ 480.839837][ T2860] fuse: Bad value for 'fd' [ 480.974921][ T2876] batadv_slave_1: entered promiscuous mode [ 480.976609][ T2876] batadv_slave_1: left allmulticast mode [ 481.115952][ T2887] netlink: 'syz.6.11294': attribute type 10 has an invalid length. [ 481.125865][ T2887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.237748][ T2920] Bluetooth: MGMT ver 1.23 [ 481.510827][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 481.535341][ T5956] Bluetooth: hci2: unexpected event 0x3e length: 405 > 260 [ 481.535362][ T5956] Bluetooth: hci2: unexpected subevent 0x0d length: 404 > 260 [ 481.537403][ T2967] vlan4: entered allmulticast mode [ 481.537722][ T5956] Bluetooth: hci2: adv larger than maximum supported [ 481.538089][ T2961] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 481.549531][ T5956] Bluetooth: hci2: adv larger than maximum supported [ 481.587279][ T5956] Bluetooth: hci2: unexpected event 0x3e length: 405 > 260 [ 481.589215][ T5956] Bluetooth: hci2: unexpected subevent 0x0d length: 404 > 260 [ 481.595497][ T5956] Bluetooth: hci2: adv larger than maximum supported [ 481.595511][ T5956] Bluetooth: hci2: adv larger than maximum supported [ 481.679962][ T2989] netlink: 'syz.6.11320': attribute type 10 has an invalid length. [ 482.030951][ T3021] FAULT_INJECTION: forcing a failure. [ 482.030951][ T3021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.034897][ T3021] CPU: 3 UID: 0 PID: 3021 Comm: syz.7.11326 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 482.034911][ T3021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 482.034917][ T3021] Call Trace: [ 482.034921][ T3021] [ 482.034926][ T3021] dump_stack_lvl+0x16c/0x1f0 [ 482.034943][ T3021] should_fail_ex+0x50a/0x650 [ 482.034962][ T3021] _copy_to_user+0x32/0xd0 [ 482.034974][ T3021] simple_read_from_buffer+0xd0/0x160 [ 482.034991][ T3021] proc_fail_nth_read+0x198/0x270 [ 482.035007][ T3021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.035023][ T3021] ? rw_verify_area+0xcf/0x680 [ 482.035038][ T3021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.035053][ T3021] vfs_read+0x1df/0xbf0 [ 482.035069][ T3021] ? __fget_files+0x1fc/0x3a0 [ 482.035080][ T3021] ? __pfx___mutex_lock+0x10/0x10 [ 482.035093][ T3021] ? __pfx_vfs_read+0x10/0x10 [ 482.035113][ T3021] ? __fget_files+0x206/0x3a0 [ 482.035126][ T3021] ksys_read+0x12b/0x250 [ 482.035142][ T3021] ? __pfx_ksys_read+0x10/0x10 [ 482.035162][ T3021] do_syscall_64+0xcd/0x250 [ 482.035176][ T3021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.035191][ T3021] RIP: 0033:0x7f105cd8bb7c [ 482.035200][ T3021] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 482.035211][ T3021] RSP: 002b:00007f105dc71030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 482.035221][ T3021] RAX: ffffffffffffffda RBX: 00007f105cfa5fa0 RCX: 00007f105cd8bb7c [ 482.035227][ T3021] RDX: 000000000000000f RSI: 00007f105dc710a0 RDI: 0000000000000004 [ 482.035233][ T3021] RBP: 00007f105dc71090 R08: 0000000000000000 R09: 0000000000000000 [ 482.035239][ T3021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.035245][ T3021] R13: 0000000000000000 R14: 00007f105cfa5fa0 R15: 00007fff2fc73798 [ 482.035258][ T3021] [ 482.068266][ T3027] netlink: 'syz.6.11329': attribute type 10 has an invalid length. [ 482.109916][ T3027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.222564][ T3035] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 482.226083][ T3035] overlayfs: missing 'lowerdir' [ 482.229460][ T3035] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 482.234004][ T3035] overlayfs: missing 'lowerdir' [ 482.295294][ T3044] netlink: zone id is out of range [ 482.299072][ T3044] netlink: zone id is out of range [ 482.427862][ T3056] RDS: rds_bind could not find a transport for fe80::41, load rds_tcp or rds_rdma? [ 482.550801][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 482.657609][ T3059] __nla_validate_parse: 6 callbacks suppressed [ 482.657627][ T3059] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11339'. [ 482.669355][ T3059] dvmrp0: entered allmulticast mode [ 482.670534][ T3050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.813635][ T40] audit: type=1400 audit(1740562795.819:73087): avc: denied { mounton } for pid=3065 comm="syz.6.11341" path="/bus" dev="sysfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 482.813696][ T3066] overlay: filesystem on ./bus is read-only [ 483.346185][ T40] audit: type=1400 audit(1740562796.349:73088): avc: denied { mount } for pid=3121 comm="syz.6.11362" name="/" dev="9p" ino=36050121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 483.530966][ T3146] overlayfs: missing 'lowerdir' [ 483.574031][ T3149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11372'. [ 483.591112][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 484.418269][ T3211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.631473][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 484.728850][ T3227] openvswitch: netlink: IPv4 tunnel dst address is zero [ 484.729233][ T3226] tipc: Enabled bearer , priority 10 [ 484.736934][ T3226] tipc: Resetting bearer [ 484.885995][ T3236] netlink: 'syz.2.11402': attribute type 12 has an invalid length. [ 484.948698][ T40] audit: type=1400 audit(1740562797.949:73089): avc: denied { create } for pid=3262 comm="syz.5.11409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 484.951422][ T3263] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11409'. [ 484.955198][ T40] audit: type=1400 audit(1740562797.959:73090): avc: denied { write } for pid=3262 comm="syz.5.11409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 484.964891][ T40] audit: type=1400 audit(1740562797.959:73091): avc: denied { nlmsg_write } for pid=3262 comm="syz.5.11409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 485.040867][ T3273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11412'. [ 485.114285][ T3280] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 485.120443][ T3280] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11414'. [ 485.172867][ T3288] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11416'. [ 485.196695][ T3288] vlan4: entered promiscuous mode [ 485.198766][ T3288] bond17: (slave vlan4): Opening slave failed [ 485.295105][ T3296] netlink: 'syz.7.11418': attribute type 12 has an invalid length. [ 485.466640][ T3316] netlink: 'syz.2.11426': attribute type 10 has an invalid length. [ 485.469778][ T3316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.680789][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 485.905083][ T3328] netlink: 277 bytes leftover after parsing attributes in process `syz.5.11428'. [ 485.954710][ T3330] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11429'. [ 485.968043][ T3330] vlan5: entered promiscuous mode [ 485.970113][ T3330] bond85: (slave vlan5): Opening slave failed [ 486.059695][ T3333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11430'. [ 486.273860][ T3368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11443'. [ 486.346398][ T3375] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 486.369804][ T3377] fuse: Invalid rootmode [ 486.399181][ T3379] tipc: Enabled bearer , priority 0 [ 486.710860][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 486.771013][ T3387] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.777828][ T3392] netlink: 'syz.2.11452': attribute type 7 has an invalid length. [ 487.101147][ T3418] vlan1: entered promiscuous mode [ 487.104142][ T3418] bond131: (slave vlan1): Opening slave failed [ 487.264003][ T3432] ptrace attach of "/syz-executor exec"[7702] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 487.267228][ T3432] Option 'n4:v®êšmäÛÌð¨áçžRÝfÍêËR­Oq±rúsJ)º¿rq' to dns_resolver key: bad/missing value [ 487.368477][ T3437] openvswitch: netlink: Message has 178 unknown bytes. [ 487.664016][ T3451] 9pnet_virtio: no channels available for device syz [ 487.760880][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 488.022428][ T3465] __nla_validate_parse: 2 callbacks suppressed [ 488.022439][ T3465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11481'. [ 488.051387][ T3468] 9pnet_virtio: no channels available for device syz [ 488.087913][ T3472] netlink: 'syz.5.11484': attribute type 5 has an invalid length. [ 488.091343][ T3473] netlink: 'syz.5.11484': attribute type 5 has an invalid length. [ 488.098998][ T3475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3475 comm=syz.2.11485 [ 488.199877][ T3480] netlink: 'syz.5.11488': attribute type 10 has an invalid length. [ 488.204878][ T3480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.238369][ T3481] netlink: 'syz.2.11489': attribute type 10 has an invalid length. [ 488.242004][ T3481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.276033][ T3489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11487'. [ 488.290384][ T3489] vlan5: entered promiscuous mode [ 488.295600][ T3489] bond86: (slave vlan5): Opening slave failed [ 488.757380][ T3510] delete_channel: no stack [ 488.790901][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 488.811185][ T3523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=3523 comm=syz.2.11502 [ 488.829023][ T3525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.880319][ T3527] »»»»»» speed is unknown, defaulting to 1000 [ 488.900167][ T40] audit: type=1400 audit(1740562801.899:73092): avc: denied { ioctl } for pid=3528 comm="syz.7.11505" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 488.903034][ T3529] rtc_cmos 00:05: Alarms can be up to one day in the future [ 488.962452][ T3534] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11506'. [ 488.981556][ T3534] vlan4: entered promiscuous mode [ 488.983773][ T3534] bond18: (slave vlan4): Opening slave failed [ 489.135358][ T3541] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11508'. [ 489.156768][ T3541] netlink: 'syz.7.11508': attribute type 12 has an invalid length. [ 489.205279][ T3551] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11509'. [ 489.235550][ T3551] vlan4: entered promiscuous mode [ 489.238329][ T3551] bond19: (slave vlan4): Opening slave failed [ 489.378528][ T3575] geneve2: entered promiscuous mode [ 489.384436][ T3575] geneve2: entered allmulticast mode [ 489.423008][ T3581] netlink: 64 bytes leftover after parsing attributes in process `syz.6.11520'. [ 489.427894][ T3581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3581 comm=syz.6.11520 [ 489.495261][ T3590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11524'. [ 489.515047][ T3590] vlan8: entered promiscuous mode [ 489.517160][ T3590] bond159: (slave vlan8): Opening slave failed [ 489.831042][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 489.930173][ T3640] pimreg: entered allmulticast mode [ 489.933328][ T3640] dvmrp0: left allmulticast mode [ 489.935028][ T3640] pimreg: left allmulticast mode [ 489.998964][ T3645] overlayfs: failed to clone upperpath [ 490.126301][ T3659] 9pnet_fd: Insufficient options for proto=fd [ 490.446495][ T3697] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11568'. [ 490.471720][ T3695] »»»»»» speed is unknown, defaulting to 1000 [ 490.485915][ T3701] syz.7.11567: attempt to access beyond end of device [ 490.485915][ T3701] nbd7: rw=0, sector=2, nr_sectors = 2 limit=0 [ 490.491477][ T3701] syz.7.11567: attempt to access beyond end of device [ 490.491477][ T3701] nbd7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 490.524702][ T3706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3706 comm=syz.5.11570 [ 490.528280][ T3706] netlink: 'syz.5.11570': attribute type 1 has an invalid length. [ 490.548171][ T3706] 8021q: adding VLAN 0 to HW filter on device bond132 [ 490.560285][ T3706] bond132: (slave ip6gretap5): making interface the new active one [ 490.568915][ T3706] bond132: (slave ip6gretap5): Enslaving as an active interface with an up link [ 490.696586][ T3726] overlayfs: failed to clone upperpath [ 490.766794][ T3740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11585'. [ 490.826924][ T3749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11589'. [ 490.880882][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.885890][ T3768] overlayfs: conflicting options: userxattr,metacopy=on [ 490.891864][ T3768] erspan0: default FDB implementation only supports local addresses [ 490.937258][ T3782] netlink: 'syz.5.11602': attribute type 19 has an invalid length. [ 491.142100][ T3823] netlink: 'syz.7.11618': attribute type 10 has an invalid length. [ 491.142871][ T3828] /dev/sr0: Can't lookup blockdev [ 491.144852][ T3823] wlan1: mtu less than device minimum [ 491.147589][ T3823] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 491.153386][ T3823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.245693][ T3851] ptrace attach of "/syz-executor exec"[6332] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 491.272641][ T3848] »»»»»» speed is unknown, defaulting to 1000 [ 491.333920][ T3849] »»»»»» speed is unknown, defaulting to 1000 [ 491.761935][ T3880] team0: Mode changed to "broadcast" [ 491.767483][ T3880] vlan0: entered promiscuous mode [ 491.778420][ T3880] team0: Port device vlan0 added [ 491.785083][ T3880] tipc: Started in network mode [ 491.786593][ T3880] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 491.788673][ T3880] tipc: Enabled bearer , priority 4 [ 491.920831][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 492.028526][ T3906] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 492.091548][ T3909] rtc_cmos 00:05: Alarms can be up to one day in the future [ 492.101357][ T3909] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 492.172809][ T3914] overlay: Unknown parameter 'permit_directio' [ 492.383350][ T3933] »»»»»» speed is unknown, defaulting to 1000 [ 492.484674][ T3941] vlan1: entered promiscuous mode [ 492.486946][ T3941] bond133: (slave vlan1): Opening slave failed [ 492.632710][ T3955] bond132: (slave ip6gretap5): Releasing active interface [ 492.709536][ T3955] vlan0: entered promiscuous mode [ 492.713716][ T3955] tipc: Enabling of bearer rejected, failed to enable media [ 492.747997][ T3972] netdevsim netdevsim7: Direct firmware load for . [ 492.747997][ T3972] failed with error -2 [ 492.760799][ T3972] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 492.760799][ T3972] [ 492.803579][ T3976] vlan5: entered promiscuous mode [ 492.805766][ T3976] bond87: (slave vlan5): Opening slave failed [ 492.811003][ T1474] tipc: Node number set to 11578026 [ 492.879470][ T40] audit: type=1400 audit(1740563317.878:73093): avc: denied { read } for pid=3986 comm="syz.6.11674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 492.960877][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 493.097071][ T4020] __nla_validate_parse: 12 callbacks suppressed [ 493.097084][ T4020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11683'. [ 493.113591][ T4020] vlan1: entered promiscuous mode [ 493.115915][ T4020] bond134: (slave vlan1): Opening slave failed [ 493.361027][ T4044] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11687'. [ 493.368602][ T4044] bridge31: the hash_elasticity option has been deprecated and is always 16 [ 493.576723][ T4055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11695'. [ 493.599476][ T4055] vlan1: entered promiscuous mode [ 493.602196][ T4055] bond135: (slave vlan1): Opening slave failed [ 493.637252][ T4061] team0: Port device vlan0 removed [ 493.648974][ T4061] netlink: 'syz.7.11694': attribute type 10 has an invalid length. [ 493.652864][ T4061] wlan1: mtu less than device minimum [ 493.655709][ T4061] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 493.662789][ T4061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.783397][ T4082] netlink: 80 bytes leftover after parsing attributes in process `syz.5.11706'. [ 493.818820][ T4087] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11708'. [ 493.830011][ T4089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11709'. [ 493.852941][ T4089] vlan5: entered promiscuous mode [ 493.855081][ T4089] bond88: (slave vlan5): Opening slave failed [ 493.885110][ T4094] fuse: blksize only supported for fuseblk [ 493.888601][ T4094] netlink: 360 bytes leftover after parsing attributes in process `syz.5.11711'. [ 493.990924][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 494.106659][ T4114] netlink: 88 bytes leftover after parsing attributes in process `syz.5.11720'. [ 494.199009][ T4121] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11723'. [ 494.223295][ T4121] vlan4: entered promiscuous mode [ 494.225452][ T4121] bond20: (slave vlan4): Opening slave failed [ 494.436380][ T5962] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 494.439914][ T5962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 494.443671][ T5962] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 494.450188][ T5962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 494.467039][ T5962] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 494.469437][ T5962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 494.533120][ T4130] »»»»»» speed is unknown, defaulting to 1000 [ 494.588252][ T4130] chnl_net:caif_netlink_parms(): no params data found [ 494.633518][ T4130] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.636396][ T4130] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.638645][ T4130] bridge_slave_0: entered allmulticast mode [ 494.641209][ T4130] bridge_slave_0: entered promiscuous mode [ 494.644388][ T4130] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.646473][ T4130] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.648654][ T4130] bridge_slave_1: entered allmulticast mode [ 494.651660][ T4130] bridge_slave_1: entered promiscuous mode [ 494.672860][ T4130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.676958][ T4130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.706069][ T4158] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11732'. [ 494.710193][ T4130] team0: Port device team_slave_0 added [ 494.716794][ T4130] team0: Port device team_slave_1 added [ 494.745194][ T4130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.747809][ T4130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.757122][ T4130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.762153][ T4130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.764462][ T4130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.772607][ T4130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.796915][ T4130] hsr_slave_0: entered promiscuous mode [ 494.799086][ T4130] hsr_slave_1: entered promiscuous mode [ 494.801678][ T4130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.803913][ T4130] Cannot create hsr debugfs directory [ 494.823763][ T40] audit: type=1400 audit(1740563319.828:73094): avc: denied { write } for pid=4163 comm="syz.7.11735" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 494.830596][ T40] audit: type=1400 audit(1740563319.828:73095): avc: denied { ioctl } for pid=4163 comm="syz.7.11735" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 494.838378][ T4164] : renamed from bridge_slave_0 (while UP) [ 494.898253][ T4130] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 494.905748][ T4130] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 494.909770][ T4130] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 494.913651][ T4130] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 494.925146][ T4130] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.927578][ T4130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.929799][ T4130] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.931988][ T4130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.955251][ T4130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.967948][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.973381][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.989806][ T4176] rtc_cmos 00:05: Alarms can be up to one day in the future [ 494.997057][ T4176] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 494.997230][ T4130] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.011342][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.013649][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.019015][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.021141][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.042245][ T4130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.106286][ T4130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.196870][ T4204] xt_hashlimit: size too large, truncated to 1048576 [ 495.208728][ T4130] veth0_vlan: entered promiscuous mode [ 495.213491][ T4130] veth1_vlan: entered promiscuous mode [ 495.230562][ T4206] rtc_cmos 00:05: Alarms can be up to one day in the future [ 495.231830][ T4130] veth0_macvtap: entered promiscuous mode [ 495.236467][ T4206] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 495.236579][ T4130] veth1_macvtap: entered promiscuous mode [ 495.249754][ T4130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.262780][ T4130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.266958][ T4130] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.269546][ T4130] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.274081][ T4130] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.277216][ T4130] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.316644][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.318909][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.336925][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.339975][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.353740][ T40] audit: type=1400 audit(1740563320.358:73096): avc: denied { mounton } for pid=4130 comm="syz-executor" path="/syzkaller.wGGbeJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=112915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 495.441914][ T4230] netlink: 'syz.7.11753': attribute type 10 has an invalid length. [ 495.444826][ T4230] wlan1: mtu less than device minimum [ 495.446420][ T4230] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 495.495855][ T4239] vlan4: entered promiscuous mode [ 495.497952][ T4239] bond21: (slave vlan4): Opening slave failed [ 495.499710][ T4228] netlink: 'syz.2.11752': attribute type 10 has an invalid length. [ 495.501221][T17824] ------------[ cut here ]------------ [ 495.504540][T17824] Invalid VIF (ffff888043e629d0) magic 0x0, 08:02:11:00:00:01, 1/0 [ 495.507071][T17824] WARNING: CPU: 3 PID: 17824 at drivers/net/wireless/virtual/mac80211_hwsim.c:235 mac80211_hwsim_tx+0x1cfa/0x25b0 [ 495.510677][T17824] Modules linked in: [ 495.511925][T17824] CPU: 3 UID: 0 PID: 17824 Comm: kworker/3:5 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 495.516359][T17824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 495.519450][T17824] Workqueue: mld mld_ifc_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 495.520915][T17824] RIP: 0010:mac80211_hwsim_tx+0x1cfa/0x25b0 [ 495.522815][T17824] Code: c0 74 08 3c 03 0f 8e 87 06 00 00 45 8b 04 24 44 89 ea 4c 89 e6 48 c7 c7 00 c9 27 8c 49 8d 8c 24 5a 04 00 00 e8 47 ea 91 fa 90 <0f> 0b 90 90 e9 84 e5 ff ff e8 98 b9 d1 fa e8 63 6f b6 fa 31 ff 89 [ 495.528394][T17824] RSP: 0018:ffffc90004156f60 EFLAGS: 00010286 [ 495.530389][T17824] RAX: 0000000000000000 RBX: ffff88804989f300 RCX: ffffffff817a1229 [ 495.532722][T17824] RDX: ffff888053144880 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 495.535117][T17824] RBP: ffffc90004157078 R08: 0000000000000001 R09: 0000000000000000 [ 495.537409][T17824] R10: 0000000000000000 R11: 0000000000000009 R12: ffff888043e629d0 [ 495.539738][T17824] R13: 0000000000000000 R14: ffff888040e0b0a0 R15: ffff88804989f2c0 [ 495.542205][T17824] FS: 0000000000000000(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 495.544809][T17824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.546822][T17824] CR2: 0000000000000000 CR3: 000000005fbba000 CR4: 0000000000352ef0 [ 495.549188][T17824] DR0: 0000000000000000 DR1: 00000000ffff000b DR2: 0000000000000000 [ 495.551523][T17824] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 495.551904][ T4244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.553843][T17824] Call Trace: [ 495.553852][T17824] [ 495.558634][T17824] ? __warn+0xea/0x3c0 [ 495.559816][T17824] ? mac80211_hwsim_tx+0x1cfa/0x25b0 [ 495.561467][T17824] ? report_bug+0x3c0/0x580 [ 495.562820][T17824] ? handle_bug+0x54/0xa0 [ 495.564175][T17824] ? exc_invalid_op+0x17/0x50 [ 495.565602][T17824] ? asm_exc_invalid_op+0x1a/0x20 [ 495.567055][T17824] ? __warn_printk+0x199/0x350 [ 495.568467][T17824] ? __warn_printk+0x1a6/0x350 [ 495.569887][T17824] ? mac80211_hwsim_tx+0x1cfa/0x25b0 [ 495.571486][T17824] ieee80211_handle_wake_tx_queue+0x18a/0x260 [ 495.573267][T17824] ? __ieee80211_schedule_txq+0x167/0xc30 [ 495.574919][T17824] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 495.576927][T17824] ? __pfx___ieee80211_schedule_txq+0x10/0x10 [ 495.578692][T17824] ? __local_bh_enable_ip+0xa4/0x120 [ 495.580516][T17824] ieee80211_queue_skb+0x12b5/0x2010 [ 495.582123][T17824] ieee80211_tx+0x2e6/0x420 [ 495.583440][T17824] ? __pfx_ieee80211_tx+0x10/0x10 [ 495.584941][T17824] ? ieee80211_skb_resize+0x22a/0x630 [ 495.586505][T17824] ? ieee80211_set_qos_hdr+0x357/0x3e0 [ 495.588098][T17824] ieee80211_xmit+0x30e/0x3e0 [ 495.589532][T17824] __ieee80211_subif_start_xmit+0xa61/0x1410 [ 495.591350][T17824] ? dst_release+0x1f8/0x270 [ 495.592832][T17824] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 495.594698][T17824] ? hlock_class+0x4e/0x130 [ 495.596038][T17824] ? __lock_acquire+0x15a9/0x3c40 [ 495.597535][T17824] ieee80211_subif_start_xmit+0x118/0x16c0 [ 495.599243][T17824] ? __pfx_mark_lock+0x10/0x10 [ 495.600667][T17824] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 495.602440][T17824] ? __pfx___lock_acquire+0x10/0x10 [ 495.603983][T17824] ? skb_network_protocol+0x127/0x6d0 [ 495.605596][T17824] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 495.607417][T17824] ? lock_acquire.part.0+0x11b/0x380 [ 495.609144][T17824] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 495.610906][T17824] ? rcu_is_watching+0x12/0xc0 [ 495.612380][T17824] ? dev_hard_start_xmit+0x9a/0x7b0 [ 495.613930][T17824] dev_hard_start_xmit+0x9a/0x7b0 [ 495.615420][T17824] __dev_queue_xmit+0x7f0/0x43e0 [ 495.616884][T17824] ? __lock_acquire+0x15a9/0x3c40 [ 495.618375][T17824] ? __pfx___dev_queue_xmit+0x10/0x10 [ 495.620030][T17824] ? hlock_class+0x4e/0x130 [ 495.621502][T17824] ? mark_lock+0xb5/0xc60 [ 495.622800][T17824] ? __pfx___lock_acquire+0x10/0x10 [ 495.624334][T17824] ? __pfx_mark_lock+0x10/0x10 [ 495.625759][T17824] ? find_held_lock+0x2d/0x110 [ 495.627304][T17824] ? __asan_memcpy+0x3c/0x60 [ 495.628733][T17824] ? eth_header+0x11c/0x1f0 [ 495.630070][T17824] neigh_resolve_output+0x53a/0x940 [ 495.631639][T17824] ip6_finish_output2+0xb20/0x20a0 [ 495.633147][T17824] ip6_finish_output+0x3f9/0x1360 [ 495.634620][T17824] ip6_output+0x1f8/0x540 [ 495.635887][T17824] mld_sendpack+0x9f0/0x11d0 [ 495.637303][T17824] ? __pfx_mld_sendpack+0x10/0x10 [ 495.638922][T17824] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 495.640589][T17824] mld_ifc_work+0x740/0xca0 [ 495.641985][T17824] ? lock_acquire+0x2f/0xb0 [ 495.643327][T17824] process_one_work+0x9c5/0x1ba0 [ 495.644816][T17824] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 495.646598][T17824] ? __pfx_process_one_work+0x10/0x10 [ 495.648174][T17824] ? assign_work+0x1a0/0x250 [ 495.649605][T17824] worker_thread+0x6c8/0xf00 [ 495.651015][T17824] ? __kthread_parkme+0x148/0x220 [ 495.652514][T17824] ? __pfx_worker_thread+0x10/0x10 [ 495.653988][T17824] kthread+0x3af/0x750 [ 495.655185][T17824] ? __pfx_kthread+0x10/0x10 [ 495.656551][T17824] ? lock_acquire+0x2f/0xb0 [ 495.657888][T17824] ? __pfx_kthread+0x10/0x10 [ 495.659252][T17824] ret_from_fork+0x45/0x80 [ 495.660591][T17824] ? __pfx_kthread+0x10/0x10 [ 495.661989][T17824] ret_from_fork_asm+0x1a/0x30 [ 495.663412][T17824] [ 495.664358][T17824] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 495.666705][T17824] CPU: 3 UID: 0 PID: 17824 Comm: kworker/3:5 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 495.669855][T17824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 495.673389][T17824] Workqueue: mld mld_ifc_work [ 495.674957][T17824] Call Trace: [ 495.676120][T17824] [ 495.677311][T17824] dump_stack_lvl+0x3d/0x1f0 [ 495.678786][T17824] panic+0x71d/0x800 [ 495.680034][T17824] ? __pfx_panic+0x10/0x10 [ 495.681530][T17824] ? show_trace_log_lvl+0x29d/0x3d0 [ 495.683124][T17824] ? check_panic_on_warn+0x1f/0xb0 [ 495.684676][T17824] ? mac80211_hwsim_tx+0x1cfa/0x25b0 [ 495.686231][T17824] check_panic_on_warn+0xab/0xb0 [ 495.687820][T17824] __warn+0xf6/0x3c0 [ 495.689038][T17824] ? mac80211_hwsim_tx+0x1cfa/0x25b0 [ 495.690575][T17824] report_bug+0x3c0/0x580 [ 495.691889][T17824] handle_bug+0x54/0xa0 [ 495.693131][T17824] exc_invalid_op+0x17/0x50 [ 495.694483][T17824] asm_exc_invalid_op+0x1a/0x20 [ 495.695914][T17824] RIP: 0010:mac80211_hwsim_tx+0x1cfa/0x25b0 [ 495.697663][T17824] Code: c0 74 08 3c 03 0f 8e 87 06 00 00 45 8b 04 24 44 89 ea 4c 89 e6 48 c7 c7 00 c9 27 8c 49 8d 8c 24 5a 04 00 00 e8 47 ea 91 fa 90 <0f> 0b 90 90 e9 84 e5 ff ff e8 98 b9 d1 fa e8 63 6f b6 fa 31 ff 89 [ 495.703174][T17824] RSP: 0018:ffffc90004156f60 EFLAGS: 00010286 [ 495.704945][T17824] RAX: 0000000000000000 RBX: ffff88804989f300 RCX: ffffffff817a1229 [ 495.707219][T17824] RDX: ffff888053144880 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 495.709713][T17824] RBP: ffffc90004157078 R08: 0000000000000001 R09: 0000000000000000 [ 495.712006][T17824] R10: 0000000000000000 R11: 0000000000000009 R12: ffff888043e629d0 [ 495.714312][T17824] R13: 0000000000000000 R14: ffff888040e0b0a0 R15: ffff88804989f2c0 [ 495.716616][T17824] ? __warn_printk+0x199/0x350 [ 495.718008][T17824] ? __warn_printk+0x1a6/0x350 [ 495.719401][T17824] ieee80211_handle_wake_tx_queue+0x18a/0x260 [ 495.721190][T17824] ? __ieee80211_schedule_txq+0x167/0xc30 [ 495.722866][T17824] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 495.724824][T17824] ? __pfx___ieee80211_schedule_txq+0x10/0x10 [ 495.726602][T17824] ? __local_bh_enable_ip+0xa4/0x120 [ 495.728157][T17824] ieee80211_queue_skb+0x12b5/0x2010 [ 495.729767][T17824] ieee80211_tx+0x2e6/0x420 [ 495.731108][T17824] ? __pfx_ieee80211_tx+0x10/0x10 [ 495.732963][T17824] ? ieee80211_skb_resize+0x22a/0x630 [ 495.734514][T17824] ? ieee80211_set_qos_hdr+0x357/0x3e0 [ 495.736090][T17824] ieee80211_xmit+0x30e/0x3e0 [ 495.737467][T17824] __ieee80211_subif_start_xmit+0xa61/0x1410 [ 495.739247][T17824] ? dst_release+0x1f8/0x270 [ 495.740700][T17824] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 495.742626][T17824] ? hlock_class+0x4e/0x130 [ 495.743964][T17824] ? __lock_acquire+0x15a9/0x3c40 [ 495.745463][T17824] ieee80211_subif_start_xmit+0x118/0x16c0 [ 495.747189][T17824] ? __pfx_mark_lock+0x10/0x10 [ 495.748681][T17824] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 495.750395][T17824] ? __pfx___lock_acquire+0x10/0x10 [ 495.751911][T17824] ? skb_network_protocol+0x127/0x6d0 [ 495.753471][T17824] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 495.755281][T17824] ? lock_acquire.part.0+0x11b/0x380 [ 495.756999][T17824] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 495.758672][T17824] ? rcu_is_watching+0x12/0xc0 [ 495.760071][T17824] ? dev_hard_start_xmit+0x9a/0x7b0 [ 495.761605][T17824] dev_hard_start_xmit+0x9a/0x7b0 [ 495.763074][T17824] __dev_queue_xmit+0x7f0/0x43e0 [ 495.764551][T17824] ? __lock_acquire+0x15a9/0x3c40 [ 495.766029][T17824] ? __pfx___dev_queue_xmit+0x10/0x10 [ 495.767592][T17824] ? hlock_class+0x4e/0x130 [ 495.768929][T17824] ? mark_lock+0xb5/0xc60 [ 495.770197][T17824] ? __pfx___lock_acquire+0x10/0x10 [ 495.771717][T17824] ? __pfx_mark_lock+0x10/0x10 [ 495.773140][T17824] ? find_held_lock+0x2d/0x110 [ 495.774564][T17824] ? __asan_memcpy+0x3c/0x60 [ 495.776060][T17824] ? eth_header+0x11c/0x1f0 [ 495.777404][T17824] neigh_resolve_output+0x53a/0x940 [ 495.778961][T17824] ip6_finish_output2+0xb20/0x20a0 [ 495.780464][T17824] ip6_finish_output+0x3f9/0x1360 [ 495.782101][T17824] ip6_output+0x1f8/0x540 [ 495.783370][T17824] mld_sendpack+0x9f0/0x11d0 [ 495.784765][T17824] ? __pfx_mld_sendpack+0x10/0x10 [ 495.786229][T17824] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 495.787860][T17824] mld_ifc_work+0x740/0xca0 [ 495.789217][T17824] ? lock_acquire+0x2f/0xb0 [ 495.790570][T17824] process_one_work+0x9c5/0x1ba0 [ 495.792031][T17824] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 495.793660][T17824] ? __pfx_process_one_work+0x10/0x10 [ 495.795218][T17824] ? assign_work+0x1a0/0x250 [ 495.796583][T17824] worker_thread+0x6c8/0xf00 [ 495.797943][T17824] ? __kthread_parkme+0x148/0x220 [ 495.799492][T17824] ? __pfx_worker_thread+0x10/0x10 [ 495.801104][T17824] kthread+0x3af/0x750 [ 495.802301][T17824] ? __pfx_kthread+0x10/0x10 [ 495.803652][T17824] ? lock_acquire+0x2f/0xb0 [ 495.805000][T17824] ? __pfx_kthread+0x10/0x10 [ 495.806349][T17824] ret_from_fork+0x45/0x80 [ 495.807805][T17824] ? __pfx_kthread+0x10/0x10 [ 495.809163][T17824] ret_from_fork_asm+0x1a/0x30 [ 495.810649][T17824] [ 495.812166][T17824] Kernel Offset: disabled [ 495.813608][T17824] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:48:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=1ffff92001849eb9 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8e1bcbc0 RBP=0000000000000200 RSP=ffffc9000c24f5a8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff90625617 R11=0000000000000007 R12=0000000000000000 R13=ffffffff8e1bcbc0 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8196b0b4 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb89ef626c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb89ef83038 CR3=0000000034580000 CR4=00352ef0 DR0=000000000000026b DR1=0000000000000004 DR2=000000000000000b DR3=0000000000000007 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89e20f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89e20f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89e20f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89e20f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89e20f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89e20f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89e37c488 00007fb89e37c480 00007fb89e37c478 00007fb89e37c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89eedd100 00007fb89e37c440 00007fb89e37c458 00007fb89e37c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89e37c498 00007fb89e37c490 00007fb89e37c488 00007fb89e37c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000dc ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000057f0e5 RBX=0000000000000001 RCX=ffffffff8b574469 RDX=0000000000000000 RSI=ffffffff8b6ced20 RDI=ffffffff8bd35780 RBP=ffffed10039df910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e6f85 R10=ffff88806a737c2b R11=0000000000000000 R12=0000000000000001 R13=ffff88801cefc880 R14=ffffffff90625610 R15=0000000000000000 RIP=ffffffff8b57584f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb89ef62d58 CR3=0000000031096000 CR4=00352ef0 DR0=0000000000000009 DR1=000000000000000b DR2=0000000000000002 DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080040 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe55c21cd0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3465316434336339 6361672d32353030 302d72656c6c616b 7a79732d3463722d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e65316434336339 63612f22000a3030 302d72302f616163 31000a2d2320612d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7379732f636f72 702f746f6f727765 6e2f706d742d7a79 732f4a6562474777 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f3d6f6e2f202263 6f2f70223d726564 2022636d692d5f74 6d2f4a65622f4766 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a946880 RCX=ffffffff81add19a RDX=ffff888021614880 RSI=ffffffff81add174 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003bd75f0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000002 R12=ffffed100d528d11 R13=0000000000000001 R14=ffff88806a83fe80 R15=ffff88806a946888 RIP=ffffffff81add176 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3ee4cd7d60 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000ffff000b DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ee417c6a3 00007f3ee417c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf72c1780 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555574874b90 0000555574874310 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555747f4244 00005555747f3fd0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0af4080008800300 10000f8004010000 040806060164f000 08000fe003001000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e80040fa0030008 000f90031fffffff ffffff040f800300 0800208610002010 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fd0030010000fc0 030210000fb00348 10000e90031fffff ffffffff040e8003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0af4080008800300 10000f8004010000 040806060164f000 08000fe003001000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010000a800401 0000000806060164 ee0008000ae00300 10000ad003001000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85407635 RDI=ffffffff9ab80780 RBP=ffffffff9ab80740 RSP=ffffc900041568e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000000000000d R12=0000000000000000 R13=0000000000000061 R14=ffffffff9ab80740 R15=0000000000000000 RIP=ffffffff8540765f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005fbba000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000ffff000b DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4b261860 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89e20f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89e20f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89e20f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89e20f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89e20f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb89e20f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000dc ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000dc ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000