last executing test programs: 12m41.12431318s ago: executing program 32 (id=4523): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000340)=0x8, 0x4) 11m33.697354024s ago: executing program 33 (id=8454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a210400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300200000000b000100736f636b657400000800024000000001"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 11m11.562634942s ago: executing program 34 (id=9400): openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 10m53.895880693s ago: executing program 35 (id=10152): openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000300)) 9m54.76624951s ago: executing program 4 (id=12019): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0x1c4e) read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) 9m54.758080225s ago: executing program 4 (id=12021): r0 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0xc4cc, 0x10100, 0x4}, &(0x7f0000000480)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff2b, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x4000040}, 0x40001) io_uring_enter(r0, 0x5b43, 0x94d, 0x0, 0x0, 0x0) 9m54.687247422s ago: executing program 4 (id=12022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000106, 0x0, 0x6}]}) 9m54.602916627s ago: executing program 4 (id=12024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x4008000) 9m54.466618969s ago: executing program 4 (id=12029): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 9m54.463576065s ago: executing program 4 (id=12030): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x40000003, 0x200, 0x8001}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4005820) 9m38.42194688s ago: executing program 36 (id=12030): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x40000003, 0x200, 0x8001}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4005820) 8m55.072196671s ago: executing program 3 (id=12936): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 8m55.037701763s ago: executing program 3 (id=12938): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x2, 0xd, 0xd360, 0x3, 0x6, 0x8, 0x1b, 0x38, 0x2e9, 0x40a, 0x4, 0x20, 0x2, 0x7, 0x8000, 0x200}, [{0x6474e551, 0x3, 0x100, 0x4, 0x6, 0x20, 0x3, 0x200}, {0x4, 0x4, 0x7, 0xc9, 0x0, 0x3, 0x3}]}, 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 8m55.018602392s ago: executing program 3 (id=12939): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xbc, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0xaa, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"]}]}, 0xbc}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 8m54.934136109s ago: executing program 3 (id=12940): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 8m54.784795593s ago: executing program 3 (id=12943): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 8m54.731492189s ago: executing program 3 (id=12945): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r1, @ANYBLOB="0198000003130000240012800900010069706970"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 8m38.502073018s ago: executing program 37 (id=12945): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r1, @ANYBLOB="0198000003130000240012800900010069706970"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 8m19.495506244s ago: executing program 7 (id=13317): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) 8m18.427893124s ago: executing program 7 (id=13327): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0)="2ea0fd56", 0x4, 0x0, &(0x7f00000002c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) 8m18.362093858s ago: executing program 7 (id=13328): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) 8m18.361828137s ago: executing program 7 (id=13329): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 8m18.297682788s ago: executing program 7 (id=13330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x30, r2, 0xe7816804f9787cab, 0x70b527, 0x25dfdc05, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x40002084) 8m17.777724802s ago: executing program 7 (id=13341): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) sendfile(r0, r2, 0x0, 0xc486) 8m17.714404919s ago: executing program 38 (id=13341): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) sendfile(r0, r2, 0x0, 0xc486) 7m7.691758461s ago: executing program 9 (id=14769): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="7106c3604b3896c24ad23870642fef06", 0x10}, {&(0x7f0000000300)="572bfc4b76210ca51d87f30c6ce0d9528fb04d8cc590a7ce369743d46561fb020f17e8a20959819055c6926d081e3f7a8ce0d16e43c608721b59646aedaf02f0b5f7c164f97d17090b2473c0ca0aa669349484265e2493bb23de01", 0x5b}, {&(0x7f0000000440)="338a56a9c7c9c7f7dd16ed0047a34d999f2800de9bba7824ef8731a33c778b53f22bf3d48f58e93aa9c13d53bead246fc6950c10ae74dc28b2a0330643e24ea672211531095fb0efe9a3eca9473b3e795606c966", 0x54}], 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/190, 0xbe}], 0x1}, 0xb}], 0x1, 0x50, 0x0) 7m7.642384405s ago: executing program 9 (id=14771): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 7m7.602564695s ago: executing program 9 (id=14773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x4000009, 0xffffffff, {{0x5, 0x4, 0x3, 0x2b, 0x14, 0x67, 0x0, 0xf7, 0x4, 0x0, @broadcast, @multicast2}}}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) 7m7.450594039s ago: executing program 9 (id=14779): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 7m7.365830791s ago: executing program 9 (id=14780): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 7m7.142091838s ago: executing program 9 (id=14786): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 7m7.014444394s ago: executing program 39 (id=14786): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4m28.734307306s ago: executing program 0 (id=17730): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 4m27.704319262s ago: executing program 0 (id=17736): creat(&(0x7f0000000040)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) 4m27.600278178s ago: executing program 0 (id=17738): r0 = syz_open_dev$media(&(0x7f0000000000), 0x10000004, 0x34000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000001c00)='wlan0\x00', &(0x7f0000001c40)=@default_ap_ssid, 0x6, 0x2) close_range(r1, r0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e26, 0x80, @local, 0xa}, 0x1c) clock_gettime(0x0, &(0x7f0000001a00)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000019c0)=[{{&(0x7f0000000180)=@phonet, 0x80, &(0x7f0000001800)=[{&(0x7f0000000200)=""/240, 0xf0}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000440)=""/243, 0xf3}, {0x0}, {0x0}, {&(0x7f0000001600)=""/59, 0x3b}, {&(0x7f0000001640)=""/207, 0xcf}, {&(0x7f0000001740)=""/130, 0x82}], 0x9, &(0x7f00000018c0)=""/196, 0xc4}, 0xa56}], 0x1, 0x100, &(0x7f0000001a40)={r3, r4+10000000}) 4m26.638216628s ago: executing program 0 (id=17751): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 4m26.562810647s ago: executing program 0 (id=17753): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) 4m25.623095293s ago: executing program 0 (id=17762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x400, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0xff, 0xff, 0xfe, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfa, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x7f, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 4m9.571958834s ago: executing program 40 (id=17762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x400, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0xff, 0xff, 0xfe, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfa, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x7f, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 3m49.881635506s ago: executing program 5 (id=18198): r0 = syz_open_dev$video4linux(0x0, 0xf7, 0x20040) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000110001002dbd7000fbdbdf2500000000", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m49.515102364s ago: executing program 5 (id=18201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000f8b000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 3m48.710591248s ago: executing program 5 (id=18204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x4, 0x0, 0xc, 0x3, 0x0, [{0x7, 0x4, 0x8}, {0x7, 0x6, 0x8, '\x00', 0x7f}, {0x7, 0x1f, 0x3, '\x00', 0x3}, {0xe9, 0xd6, 0x0, '\x00', 0x4}, {0x7, 0xff, 0x3, '\x00', 0xb9}, {0x7, 0x1, 0x3, '\x00', 0xb3}, {0x8, 0xab, 0x8}, {0x7, 0x90, 0x4, '\x00', 0x8}, {0x1, 0xaf, 0x9, '\x00', 0x4}, {0x6, 0x27, 0x0, '\x00', 0x10}, {0x77, 0xfd, 0x9e, '\x00', 0xc6}, {0xd, 0xcf, 0x9, '\x00', 0x7}, {0x40, 0x9, 0x5, '\x00', 0x7}, {0x0, 0x31, 0x6, '\x00', 0xa}, {0x8, 0x84, 0x2}, {0xf9, 0x8, 0xb, '\x00', 0x14}, {0x5, 0x0, 0x3, '\x00', 0xa}, {0x3, 0x6, 0x24, '\x00', 0x1}, {0x58, 0x4, 0x69}, {0x3, 0x4, 0x2, '\x00', 0x5e}, {0x0, 0xfa, 0x48, '\x00', 0x9}, {0xf, 0x2, 0x3, '\x00', 0x1}, {0x5, 0xf, 0x3, '\x00', 0x2}, {0xfe, 0x1, 0xa, '\x00', 0x7f}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x80, 0x0, [{}, {}, {}, {}, {}, {0xc0000000}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffff17, 0x4e57}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0xa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x40000000, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x40000006}, {0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {0xc0000001}, {0x0, 0x0, 0x2}, {}, {}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {0xc0000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0xa}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x6, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 3m48.465729211s ago: executing program 5 (id=18205): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x4) listen(r0, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 3m48.376441134s ago: executing program 5 (id=18207): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newrule={0x24, 0x20, 0x301, 0xfffffffc, 0x25dfdbfc, {0x2, 0x0, 0x10, 0x0, 0x9, 0x0, 0x0, 0x7, 0xf}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x8}}]}, 0x24}}, 0x44004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 3m47.895111168s ago: executing program 5 (id=18215): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m47.796163506s ago: executing program 41 (id=18215): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.582056675s ago: executing program 6 (id=23437): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000090000000480080002400000000008000140000000000900010000008000000000004c000000060a0104000000000000000001000000240004802000018007000100727400001400028008000240ce31b6cf080001400000000308000b40000000000900010073797a30"], 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.50391374s ago: executing program 6 (id=23438): r0 = socket(0x10, 0x803, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x440040, 0x0) read$FUSE(r1, &(0x7f0000002340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f0000000080)={0x18, 0x0, r2, {0xfffffffd}}, 0x18) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x2, 0xffffffff, 0x7}}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 3.443474696s ago: executing program 6 (id=23440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.368493744s ago: executing program 6 (id=23443): read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x0, 0xffffff80, 0x1, 0x7}}) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x7c) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r0, 0x36) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f00000001c0)="067592cc0f409e1611ca5741872eec6f", 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000001c0)={0x80000000, 0x0, &(0x7f0000000140)=[{{0x80000000}}]}) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000400)={r9, 0x0, 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}]}, @NFT_MSG_NEWSETELEM={0x28, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xac}}, 0x0) r11 = creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x8}]}}}]}, 0x3c}}, 0x0) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r14, 0x4b72, &(0x7f00000000c0)={0x5, 0xffffffff, 0x7, 0x3, 0x8801be, 0x0}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r11, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000081) socket$nl_rdma(0x10, 0x3, 0x14) 3.258894263s ago: executing program 6 (id=23448): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) close(0x3) socket$netlink(0x10, 0x3, 0x12) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r3, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r3, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r1, 0xa, 0x12) r4 = getpgid(r0) fcntl$setown(r1, 0x8, r4) tkill(r0, 0x13) 548.343993ms ago: executing program 2 (id=23527): syz_emit_ethernet(0x6e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x38, 0x3a, 0x1, @private2, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x2, 0x6, "29e50e", 0x0, 0x2b, 0x1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, [], "0a06efb2988b900b"}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) read$FUSE(r0, &(0x7f0000002b00)={0x2020}, 0x2020) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 437.261653ms ago: executing program 1 (id=23533): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x9003000000000000}}, 0x1c) 329.70625ms ago: executing program 1 (id=23536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) 329.367696ms ago: executing program 2 (id=23537): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4a5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x8, 0xfff, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x66, 0x0, 0x80, 0x0, 0x0, @private=0xa010102, @multicast1}}}}) r2 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) syz_io_uring_setup(0x832, &(0x7f0000000280)={0x0, 0xcd1d, 0x10100, 0x1}, &(0x7f0000000000), &(0x7f0000000080)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x102, 0x1cc) sendfile(r3, r3, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x9, 0x80000001, 0x40, 0x40220, r0, 0x3, '\x00', r1, r2, 0x1, 0x1, 0x3, 0xf}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r2, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000040)='B@', 0x0}, 0x20) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f003}) syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100000, 0x186}, 0x0, &(0x7f00000003c0)) r9 = getpid() syz_pidfd_open(r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) ftruncate(r10, 0xc17a) sendmsg$nl_route_sched(r10, 0x0, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto(r11, 0x0, 0x0, 0x20048840, 0x0, 0x0) pipe(0x0) splice(r11, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000500)={'syztnl0\x00', r1, 0x10, 0x40, 0x9, 0x2fa, {{0x22, 0x4, 0x0, 0x3b, 0x88, 0x68, 0x0, 0x81, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xa}, {[@ra={0x94, 0x4}, @end, @rr={0x7, 0x17, 0xb4, [@broadcast, @multicast1, @empty, @loopback, @empty]}, @timestamp_prespec={0x44, 0x14, 0xa8, 0x3, 0x2, [{@multicast2, 0x101}, {@remote, 0x8}]}, @noop, @cipso={0x86, 0x3a, 0x2, [{0x5, 0x3, "8d"}, {0x7, 0xd, "f1057b842a1f970e838f6c"}, {0x6, 0x9, "c9146e4eacbc87"}, {0x6, 0xa, "738065b8471fec25"}, {0x7, 0x6, "ab5bf2e7"}, {0x1, 0x6, "78a6c11d"}, {0x2, 0x5, "b7ee09"}]}, @lsrr={0x83, 0x7, 0x8d, [@dev={0xac, 0x14, 0x14, 0xb}]}]}}}}}) 234.732825ms ago: executing program 8 (id=23539): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 234.389884ms ago: executing program 2 (id=23540): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0xff9e, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 233.877901ms ago: executing program 1 (id=23541): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 232.94182ms ago: executing program 8 (id=23542): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x81f0, 0x0, {}, {}, {0xe, 0x10}}, [@TCA_RATE={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 232.268666ms ago: executing program 2 (id=23543): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0xffffffff, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) write$ppp(r3, &(0x7f00000005c0)="c021", 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010426bd7000fedbdf2503000000300001"], 0x44}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x21c, r5, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x16e, @private0}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @loopback, 0xacf}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa570}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @empty, 0xfffff13c}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x42}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x8000}, 0x404c) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 159.522569ms ago: executing program 1 (id=23544): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000280)={0x14, r1, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8}, 0x14}, 0x1, 0xfffffff0, 0x0, 0x40001}, 0x20000000) 145.926767ms ago: executing program 8 (id=23545): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfe, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000700), 0x8000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000200)={0x3, 0xffffffff, 0xfffffffc, 0x1, 0x4, 0xb}) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_READ_SNR(r2, 0x80026f48, &(0x7f00000004c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$DVB_DVR_DMX_DQBUF(r3, 0xc0186f40, &(0x7f0000000100)={0x9, 0x6, 0x1, 0xe2d, 0x19, 0x78}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="070000000a0a0101000000006c00040000000000"], 0x14}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, {0x1, 0x2, 0x3, 0x0, 0x0, 0x20000, 0xc, 0x0, 0x44}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x4, @mcast1}}}, &(0x7f00000000c0)=0x84) ioctl$FBIOBLANK(r1, 0x4611, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfe, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) openat$fb1(0xffffffffffffff9c, &(0x7f0000000700), 0x8000, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000200)={0x3, 0xffffffff, 0xfffffffc, 0x1, 0x4, 0xb}) (async) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) ioctl$FE_READ_SNR(r2, 0x80026f48, &(0x7f00000004c0)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) ioctl$DVB_DVR_DMX_DQBUF(r3, 0xc0186f40, &(0x7f0000000100)={0x9, 0x6, 0x1, 0xe2d, 0x19, 0x78}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="070000000a0a0101000000006c00040000000000"], 0x14}}, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, {0x1, 0x2, 0x3, 0x0, 0x0, 0x20000, 0xc, 0x0, 0x44}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) (async) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x4, @mcast1}}}, &(0x7f00000000c0)=0x84) (async) ioctl$FBIOBLANK(r1, 0x4611, 0x0) (async) 145.611108ms ago: executing program 2 (id=23546): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0xc803000000000000}}, 0x1c) 145.388149ms ago: executing program 1 (id=23547): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0xd7) 145.066287ms ago: executing program 8 (id=23548): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7}}, 0x1c}}, 0x1000000) 64.488584ms ago: executing program 1 (id=23549): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gre={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010101}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xfffc7}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x78}, 0x1, 0x0, 0x0, 0x48800}, 0x440b0) 64.074834ms ago: executing program 8 (id=23550): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4a5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x8, 0xfff, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x66, 0x0, 0x80, 0x0, 0x0, @private=0xa010102, @multicast1}}}}) r2 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) syz_io_uring_setup(0x832, &(0x7f0000000280)={0x0, 0xcd1d, 0x10100, 0x1}, &(0x7f0000000000), &(0x7f0000000080)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x102, 0x1cc) sendfile(r3, r3, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x9, 0x80000001, 0x40, 0x40220, r0, 0x3, '\x00', r1, r2, 0x1, 0x1, 0x3, 0xf}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r2, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000040)='B@', 0x0}, 0x20) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f003}) syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100000, 0x186}, 0x0, &(0x7f00000003c0)) r9 = getpid() syz_pidfd_open(r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) ftruncate(r10, 0xc17a) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xfff2, 0x4}, {0x11, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x80}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto(r11, 0x0, 0x0, 0x20048840, 0x0, 0x0) pipe(0x0) splice(r11, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000500)={'syztnl0\x00', r1, 0x10, 0x40, 0x9, 0x2fa, {{0x22, 0x4, 0x0, 0x3b, 0x88, 0x68, 0x0, 0x81, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xa}, {[@ra={0x94, 0x4}, @end, @rr={0x7, 0x17, 0xb4, [@broadcast, @multicast1, @empty, @loopback, @empty]}, @timestamp_prespec={0x44, 0x14, 0xa8, 0x3, 0x2, [{@multicast2, 0x101}, {@remote, 0x8}]}, @noop, @cipso={0x86, 0x3a, 0x2, [{0x5, 0x3, "8d"}, {0x7, 0xd, "f1057b842a1f970e838f6c"}, {0x6, 0x9, "c9146e4eacbc87"}, {0x6, 0xa, "738065b8471fec25"}, {0x7, 0x6, "ab5bf2e7"}, {0x1, 0x6, "78a6c11d"}, {0x2, 0x5, "b7ee09"}]}, @lsrr={0x83, 0x7, 0x8d, [@dev={0xac, 0x14, 0x14, 0xb}]}]}}}}}) 63.767599ms ago: executing program 2 (id=23551): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 323.815µs ago: executing program 6 (id=23552): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x200000c4) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000600)=[{&(0x7f0000001080)="f8589635d32d0cc810a251d09923bc6ec61eb4a8befff0c6b4f742d48222fc23", 0x20}, {&(0x7f0000000440)="59e86e2f00b6b69f73772a47819f33747b11321d660b360007bd6450cff6382401ee216df5f6950d434f2fe2f64e2c26", 0x30}, {&(0x7f00000004c0)="91a88126ae4525f190c86d2e46972341d69fafc6265f29c8f1dc54", 0x1b}, {&(0x7f0000000500)="a1f11ac87c838025224f157d67aa9a5d8b5b6acf18aaeffa698a6abb15b4fbf32e6dd12ab5d286be7ab0dc3008bacd064338dfecf6723c73fd91c015db6db12a36262f3e52e6d835684dc3430f1be445541c8c6ae3e122a832145a11af78b2c03f90c688edee03eaec31beffc801ae58a2ec2691b09b591f6a747cc1fb9828dd2e301a40037c1d3c629a2533d7a902cc0215dc79b8a27fe0a4eada7ea28e32ab12799b984a4124fc95a4a620115990f2f874a2aa0f97374c3410daabb668aa7385b708b70f7aae2ba9e6b757e044", 0xce}], 0x4}}], 0x1, 0x4004021) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) accept4(r3, 0x0, 0x0, 0x80800) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x0, 0x1b0, 0xe0, 0xfeffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r7, &(0x7f0000000080)=""/4096, 0x1000) ioctl$TIOCOUTQ(r4, 0x4bfb, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a0000000000006111e00000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)=""/233, 0xe9}], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="00000000000000000000000000000000000000f4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000400"/24, @ANYRES32=r5, @ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r9, &(0x7f0000000d40), 0x0}, 0x20) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000380)="ad9268", 0x3}], 0x1) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r10, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r10, &(0x7f0000000000)="832e0a40000000000000000e0580a7b6070d63e286a5070f", 0x18) 0s ago: executing program 8 (id=23553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x6, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180fff000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): d to clone upperpath [ 740.526490][T17225] wg1: left promiscuous mode [ 740.528381][T17225] wg1: left allmulticast mode [ 740.535230][T17225] erspan1: left allmulticast mode [ 740.537417][T17225] bond1: left promiscuous mode [ 740.545382][T17225] ip6gre2: left promiscuous mode [ 740.547270][T17225] ip6gre2: left allmulticast mode [ 740.561121][T17225] bond9: left allmulticast mode [ 740.572791][T17225] bond11: left promiscuous mode [ 740.574618][T17225] bond11: left allmulticast mode [ 740.589357][T17225] vlan3: left promiscuous mode [ 740.591063][T17225] bond13: left promiscuous mode [ 740.592783][T17225] bridge12: left promiscuous mode [ 740.594648][T17225] vlan3: left allmulticast mode [ 740.596356][T17225] bond13: left allmulticast mode [ 740.598124][T17225] bridge12: left allmulticast mode [ 740.641717][T17225] geneve4: left promiscuous mode [ 740.691065][ T829] lo speed is unknown, defaulting to 1000 [ 740.695896][ T829] syU×: Port: 1 Link DOWN [ 740.699827][T17228] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.706836][ T167] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.710029][ T167] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.718557][ T829] lo speed is unknown, defaulting to 1000 [ 740.718567][ T167] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.685946][T17277] overlayfs: failed to clone upperpath [ 742.211547][T17301] overlayfs: failed to clone upperpath [ 742.464408][T17316] trusted_key: encrypted_key: key trusted:syz not found [ 743.070709][T17336] __nla_validate_parse: 13 callbacks suppressed [ 743.070723][T17336] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19141'. [ 743.079004][T17336] netlink: 3 bytes leftover after parsing attributes in process `syz.6.19141'. [ 743.119133][ T40] audit: type=1800 audit(2000000236.576:51798): pid=17338 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.19142" name="nullb0" dev="tmpfs" ino=1091 res=0 errno=0 [ 743.223795][T17346] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19146'. [ 743.252063][T17347] trusted_key: encrypted_key: key trusted:syz not found [ 743.367596][T17358] wg1: entered promiscuous mode [ 743.372135][T17358] wg1: entered allmulticast mode [ 743.672193][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19160'. [ 743.944969][T17390] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19164'. [ 744.362661][ T829] usb 13-1: new high-speed USB device number 36 using dummy_hcd [ 744.465067][T17413] trusted_key: encrypted_key: key trusted:syz not found [ 744.531858][ T829] usb 13-1: Using ep0 maxpacket: 8 [ 744.544328][ T829] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 744.548738][ T829] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 744.553694][ T829] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 744.558206][ T829] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.565141][ T829] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 744.569525][ T829] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.728131][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19186'. [ 744.800278][ T829] usb 13-1: GET_CAPABILITIES returned 0 [ 744.802751][ T829] usbtmc 13-1:16.0: can't read capabilities [ 744.934060][T17449] trusted_key: encrypted_key: key trusted:syz not found [ 744.935819][T17449] IPVS: ip_vs_add_dest(): server weight less than zero [ 745.016148][T17398] usb 13-1: usbtmc_ioctl_clear_in_halt returned -32 [ 745.021634][ T7012] usb 13-1: USB disconnect, device number 36 [ 745.483834][T17491] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19209'. [ 745.835451][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19225'. [ 745.888059][T17527] overlayfs: failed to clone upperpath [ 746.185883][T17545] wg1: left promiscuous mode [ 746.187854][T17545] wg1: left allmulticast mode [ 746.239490][T17553] IPVS: ip_vs_add_dest(): server weight less than zero [ 746.275470][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19237'. [ 746.302696][T17555] overlayfs: failed to clone upperpath [ 746.396585][T17567] netlink: 104 bytes leftover after parsing attributes in process `syz.2.19243'. [ 747.337742][T17629] kAFS: unable to lookup cell '(,c¾ûL' [ 747.340783][T17629] kAFS: unable to lookup cell '(,c¾ûL' [ 747.622774][ T54] page_pool_release_retry() stalled pool shutdown: id 179, 14 inflight 60 sec [ 747.672272][T17679] Cache volume key already in use (9p,syz,) [ 747.876257][T17700] IPVS: ip_vs_add_dest(): server weight less than zero [ 748.180892][T17716] overlayfs: failed to clone upperpath [ 748.222636][T17719] overlayfs: failed to clone upperpath [ 748.432852][T17741] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 748.470072][T17746] __nla_validate_parse: 7 callbacks suppressed [ 748.470088][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19314'. [ 748.477691][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19314'. [ 748.482514][T17746] overlayfs: failed to clone upperpath [ 748.844124][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19330'. [ 748.851882][T17782] overlayfs: failed to clone upperpath [ 748.955198][ T6093] kernel read not supported for file /3551/comm (pid: 6093 comm: kworker/2:3) [ 749.298318][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19341'. [ 749.401696][T17811] team0: Device gtp0 is of different type [ 749.531174][T17823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19348'. [ 749.690745][ T6093] usb 13-1: new high-speed USB device number 37 using dummy_hcd [ 749.851703][ T6093] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 749.855201][ T6093] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 749.858453][ T6093] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 749.864953][ T6093] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 749.867921][ T6093] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 749.870605][ T6093] usb 13-1: Product: syz [ 749.878651][ T6093] usb 13-1: Manufacturer: syz [ 749.880161][ T6093] usb 13-1: SerialNumber: syz [ 750.018090][T17858] IPVS: ip_vs_add_dest(): server weight less than zero [ 750.105869][ T6093] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 750.323403][ T6117] usb 13-1: USB disconnect, device number 37 [ 750.327062][ T6117] usblp0: removed [ 751.253144][T17918] overlayfs: failed to resolve './file0': -2 [ 751.298605][ T6050] Bluetooth: hci3: unknown advertising packet type: 0x6f [ 751.298649][ T6050] Bluetooth: hci3: Dropping invalid advertising data [ 751.306111][ T6050] Bluetooth: hci3: Malformed LE Event: 0x02 [ 751.372545][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19395'. [ 751.373795][T17927] process '/newroot/264/file0' started with executable stack [ 751.592317][T17942] overlayfs: failed to resolve './file0': -2 [ 751.797078][T17964] Cache volume key already in use (9p,syz,) [ 753.882092][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19470'. [ 754.625653][ T6093] usb 13-1: new high-speed USB device number 38 using dummy_hcd [ 754.774976][T18144] IPVS: ip_vs_add_dest(): server weight less than zero [ 754.785458][ T6093] usb 13-1: Using ep0 maxpacket: 8 [ 754.789499][ T6093] usb 13-1: config 0 interface 0 has no altsetting 0 [ 754.791655][ T6093] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 754.794610][ T6093] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.800827][ T6093] usb 13-1: config 0 descriptor?? [ 755.237057][ T6093] mcp2221 0003:04D8:00DD.0016: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 755.449318][ T6093] usb 13-1: USB disconnect, device number 38 [ 757.556619][T18246] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19533'. [ 759.436851][T18317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19562'. [ 759.738330][T18342] netlink: 'syz.6.19571': attribute type 9 has an invalid length. [ 759.741856][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19571'. [ 759.749590][T18342] netlink: 'syz.6.19571': attribute type 9 has an invalid length. [ 759.753095][ T103] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.756381][ T103] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.759479][ T103] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.762249][ T103] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.765870][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19571'. [ 760.945868][T18450] overlayfs: failed to clone upperpath [ 761.214683][ T40] audit: type=1326 audit(2000000253.557:51799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.2.19628" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9e8b9c629 code=0x0 [ 762.216818][T18557] netlink: 'syz.2.19656': attribute type 25 has an invalid length. [ 762.219763][T18557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19656'. [ 762.222717][T18557] netlink: 'syz.2.19656': attribute type 25 has an invalid length. [ 762.226389][T18557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19656'. [ 762.600765][T18583] overlayfs: failed to clone lowerpath [ 762.758189][T18606] netlink: 'syz.1.19675': attribute type 3 has an invalid length. [ 762.794002][T18612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19680'. [ 762.798175][T18612] netlink: 'syz.1.19680': attribute type 14 has an invalid length. [ 762.801960][T18612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19680'. [ 762.805702][T18612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19680'. [ 762.809335][T18612] netlink: 'syz.1.19680': attribute type 14 has an invalid length. [ 762.812561][T18612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19680'. [ 763.124691][T18640] netlink: 'syz.1.19693': attribute type 22 has an invalid length. [ 763.128149][T18640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19693'. [ 763.132153][T18640] netlink: 'syz.1.19693': attribute type 22 has an invalid length. [ 763.319416][T18655] SELinux: ebitmap start bit (538976288) is not a multiple of the map unit size (64) [ 763.325352][T18655] SELinux: failed to load policy [ 763.591805][T18689] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 763.668349][T18696] netlink: 'syz.2.19715': attribute type 3 has an invalid length. [ 763.700198][ C2] ata1: illegal qc_active transition (00000000->00001000) [ 764.052764][ T1115] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 764.056393][ T1115] ata1.00: configured for UDMA/100 [ 764.802183][T18774] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 764.925117][T18780] __nla_validate_parse: 2 callbacks suppressed [ 764.925136][T18780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19750'. [ 765.433425][ T829] usb 13-1: new high-speed USB device number 39 using dummy_hcd [ 765.461607][T18817] overlayfs: missing 'lowerdir' [ 765.596720][ T829] usb 13-1: Using ep0 maxpacket: 8 [ 765.600730][ T829] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 765.606452][ T829] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 765.610906][ T829] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 765.615608][ T829] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 765.621760][ T829] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 765.625672][ T829] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.634082][T18834] overlayfs: failed to clone upperpath [ 765.848241][ T829] usb 13-1: usb_control_msg returned -32 [ 765.852691][T18849] overlayfs: failed to clone lowerpath [ 765.856028][ T829] usbtmc 13-1:16.0: can't read capabilities [ 765.863729][ T829] usb 13-1: USB disconnect, device number 39 [ 766.310842][T18890] overlayfs: missing 'lowerdir' [ 766.474598][ T40] audit: type=1400 audit(2000000258.492:51800): avc: denied { append } for pid=18895 comm="syz.8.19799" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 767.577824][T18979] netlink: 750 bytes leftover after parsing attributes in process `syz.2.19836'. [ 767.611251][T18985] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 767.615099][T18985] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 767.795574][T19004] netlink: 'syz.8.19847': attribute type 1 has an invalid length. [ 767.811432][T19004] 8021q: adding VLAN 0 to HW filter on device bond10 [ 767.846572][T19009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19849'. [ 768.231620][T19033] overlayfs: failed to clone upperpath [ 768.274225][T19035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19861'. [ 768.292752][ T40] audit: type=1326 audit(2000000260.200:51801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19036 comm="syz.2.19862" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x0 [ 768.564792][T19043] kvm: kvm [19042]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 768.569565][T19043] kvm: kvm [19042]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 768.596549][T19043] kvm: kvm [19042]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 768.621926][T19043] kvm: kvm [19042]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 768.625175][T19043] kvm: kvm [19042]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 768.664264][T19050] overlayfs: missing 'workdir' [ 769.292970][ T900] usb 13-1: new high-speed USB device number 40 using dummy_hcd [ 769.344495][T19074] all: renamed from bridge_slave_0 [ 769.464903][ T900] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 769.469710][ T900] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 769.473615][ T900] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 769.480440][ T900] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.486624][T19058] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 769.494546][ T900] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 769.534120][T19087] overlayfs: failed to clone upperpath [ 769.708914][ T900] usb 13-1: USB disconnect, device number 40 [ 769.965116][T19118] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19895'. [ 770.252168][T19137] bond13: (slave veth0_to_bond): Releasing active interface [ 770.297356][T19137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.321590][T19137] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 770.332476][T19142] team0: Mode changed to "loadbalance" [ 770.462810][T19157] netlink: 'syz.6.19913': attribute type 3 has an invalid length. [ 772.141775][T19303] 9p: Bad value for 'version' [ 772.179717][T19307] overlayfs: missing 'lowerdir' [ 772.349222][T19330] 9p: Bad value for 'version' [ 772.410545][T19337] 9p: Bad value for 'version' [ 772.516019][T19347] overlayfs: failed to clone lowerpath [ 772.532653][T19351] overlayfs: failed to clone upperpath [ 772.861520][T19385] overlayfs: failed to clone upperpath [ 772.898093][T19389] 9p: Bad value for 'version' [ 772.983225][T19393] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20010'. [ 773.295045][T19418] ªªªªªª: renamed from wg2 [ 773.665515][T19426] overlayfs: failed to clone upperpath [ 773.748424][T19430] 9p: Bad value for 'version' [ 773.789485][T19432] 9p: Bad value for 'version' [ 775.537197][T19323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 775.711283][T19454] 9p: Bad value for 'version' [ 775.913617][T19472] input: syz1 as /devices/virtual/input/input64 [ 775.922726][T19474] overlayfs: failed to clone upperpath [ 775.936814][T19474] overlayfs: failed to clone lowerpath [ 776.013974][T19481] overlayfs: failed to clone upperpath [ 777.432100][T19542] xfrm0 speed is unknown, defaulting to 1000 [ 777.488476][T19548] netlink: 12 bytes leftover after parsing attributes in process `syz.8.20076'. [ 777.580875][T19542] lo speed is unknown, defaulting to 1000 [ 777.886152][T19571] syz_tun: entered allmulticast mode [ 777.892518][T19569] syz_tun: left allmulticast mode [ 778.012424][T19583] overlayfs: failed to clone lowerpath [ 778.061801][ T40] audit: type=1800 audit(2000000269.357:51802): pid=19587 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.20089" name="nullb0" dev="tmpfs" ino=1091 res=0 errno=0 [ 778.184517][T19595] netlink: 'syz.1.20092': attribute type 4 has an invalid length. [ 778.320398][T19599] netlink: 'syz.2.20095': attribute type 10 has an invalid length. [ 778.351347][T19603] overlayfs: failed to clone upperpath [ 778.436647][T19607] overlayfs: failed to clone upperpath [ 778.924431][T19623] tipc: Resetting bearer [ 779.130509][T19639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20110'. [ 779.448391][T19662] overlayfs: failed to clone upperpath [ 779.521508][T19670] Cache volume key already in use (9p,syz,) [ 779.709352][T19676] tmpfs: Unknown parameter 'usrquota0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.709352][T19676] 0 [ 779.826593][T19686] overlayfs: failed to clone upperpath [ 780.164764][T19733] gretap2: entered promiscuous mode [ 780.296784][T19746] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 781.677280][ T6116] usb 13-1: new high-speed USB device number 41 using dummy_hcd [ 781.847808][ T6116] usb 13-1: Using ep0 maxpacket: 8 [ 781.852070][ T6116] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 781.855396][ T6116] usb 13-1: config 0 has no interface number 0 [ 781.858218][ T6116] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 781.863161][ T6116] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 781.868103][ T6116] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 781.872896][ T6116] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 781.878524][ T6116] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 781.882475][ T6116] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.887508][ T6116] usb 13-1: config 0 descriptor?? [ 781.899140][ T6116] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 782.175714][ T6117] usb 13-1: USB disconnect, device number 41 [ 782.184814][ T6117] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 782.411575][T19865] tipc: Enabling of bearer rejected, already enabled [ 782.417020][T19865] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 782.419660][T19865] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 782.492776][T19871] netlink: 64 bytes leftover after parsing attributes in process `syz.2.20200'. [ 782.786017][T19892] batadv_slave_0: entered promiscuous mode [ 783.063838][T19907] uprobe: syz.1.20214:19907 failed to unregister, leaking uprobe [ 783.145980][T19917] netlink: 'syz.2.20218': attribute type 1 has an invalid length. [ 783.168874][T19917] 8021q: adding VLAN 0 to HW filter on device bond15 [ 783.593058][T19939] netlink: 28 bytes leftover after parsing attributes in process `syz.8.20227'. [ 784.099542][T19969] netlink: 28 bytes leftover after parsing attributes in process `syz.8.20240'. [ 784.393240][T19985] kvm: pic: single mode not supported [ 784.393339][T19985] pic_ioport_write: 23 callbacks suppressed [ 784.393348][T19985] kvm: pic: level sensitive irq not supported [ 784.399824][T19985] kvm: pic: non byte read [ 784.412770][T19985] kvm: pic: non byte read [ 784.435156][T19985] kvm: pic: non byte read [ 784.440832][T19985] kvm: pic: single mode not supported [ 784.440849][T19985] kvm: pic: level sensitive irq not supported [ 784.443679][T19985] kvm: pic: non byte read [ 784.451718][T19985] kvm: pic: single mode not supported [ 784.451736][T19985] kvm: pic: level sensitive irq not supported [ 784.454526][T19985] kvm: pic: non byte read [ 784.463801][T19985] kvm: pic: non byte read [ 784.467954][T19985] kvm: pic: non byte read [ 784.478187][T19985] kvm: pic: single mode not supported [ 784.478204][T19985] kvm: pic: level sensitive irq not supported [ 784.481144][T19985] kvm: pic: non byte read [ 784.487496][T19985] kvm: pic: single mode not supported [ 784.487512][T19985] kvm: pic: level sensitive irq not supported [ 784.489971][T19985] kvm: pic: non byte read [ 785.058747][T20022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20256'. [ 785.542137][T20068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20272'. [ 786.575424][T20110] overlayfs: failed to clone upperpath [ 787.325158][T20115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20290'. [ 787.377294][T20119] xt_hashlimit: size too large, truncated to 1048576 [ 787.495270][T20123] overlayfs: failed to clone upperpath [ 787.679779][T20137] overlayfs: failed to clone upperpath [ 788.136789][T20162] netlink: 28 bytes leftover after parsing attributes in process `syz.8.20309'. [ 788.328452][T20169] batadv_slave_0: left promiscuous mode [ 788.508477][T20188] tipc: Resetting bearer [ 788.555995][T20188] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 788.558703][T20188] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 789.045029][T20212] overlayfs: failed to clone upperpath [ 789.240153][T20222] overlayfs: failed to clone upperpath [ 789.348644][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20333'. [ 789.444033][T20242] netlink: 'syz.2.20339': attribute type 1 has an invalid length. [ 789.464255][T20242] bond16: entered promiscuous mode [ 789.466284][T20242] 8021q: adding VLAN 0 to HW filter on device bond16 [ 789.472613][ T40] audit: type=1400 audit(2000000280.071:51803): avc: denied { write } for pid=20241 comm="syz.2.20339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 789.485433][T20242] bond16: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 789.489478][T20242] bond16: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 789.494815][T20242] bond16: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 789.641091][T20245] netlink: 164 bytes leftover after parsing attributes in process `syz.2.20340'. [ 790.070649][T20255] binder: 20254:20255 ioctl c0306201 2000000003c0 returned -14 [ 790.201749][T20265] netlink: 'syz.6.20350': attribute type 8 has an invalid length. [ 790.206537][T20267] netlink: 'syz.8.20349': attribute type 1 has an invalid length. [ 790.220995][T20265] netlink: 'syz.6.20350': attribute type 1 has an invalid length. [ 790.224315][T20265] netlink: 92 bytes leftover after parsing attributes in process `syz.6.20350'. [ 790.233999][T20265] mac80211_hwsim hwsim47 : renamed from wlan1 [ 790.254584][T20267] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 790.258843][T20267] bond11: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 790.280824][T20267] bond11: (slave vxcan3): making interface the new active one [ 790.284189][T20267] bond11: (slave vxcan3): Enslaving as an active interface with an up link [ 790.296706][T20267] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20349'. [ 790.304378][T20267] bond11 (unregistering): (slave vxcan3): Releasing backup interface [ 790.346910][T20267] bond11 (unregistering): Released all slaves [ 790.665712][T20289] netlink: 28 bytes leftover after parsing attributes in process `syz.6.20357'. [ 791.259465][ T1027] usb 13-1: new high-speed USB device number 42 using dummy_hcd [ 791.419276][ T1027] usb 13-1: Using ep0 maxpacket: 8 [ 791.423256][ T1027] usb 13-1: config 0 has no interfaces? [ 791.425417][ T1027] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 791.428994][ T1027] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.434653][ T1027] usb 13-1: config 0 descriptor?? [ 791.763780][ T1027] usb 13-1: USB disconnect, device number 42 [ 792.187730][T20339] netlink: 'syz.1.20378': attribute type 1 has an invalid length. [ 792.212685][T20339] 8021q: adding VLAN 0 to HW filter on device bond25 [ 792.341575][T20351] netlink: 28 bytes leftover after parsing attributes in process `syz.8.20383'. [ 792.489506][ T103] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.492881][ T103] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.507155][ T103] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.510405][ T103] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.152473][T20386] netlink: 'syz.2.20396': attribute type 13 has an invalid length. [ 793.830513][T20418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20408'. [ 794.031783][T20433] netlink: 'syz.1.20414': attribute type 1 has an invalid length. [ 794.056839][T20433] 8021q: adding VLAN 0 to HW filter on device bond26 [ 794.101128][T20433] bond26: (slave gretap5): making interface the new active one [ 794.106748][T20433] bond26: (slave gretap5): Enslaving as an active interface with an up link [ 794.590736][ T40] audit: type=1400 audit(2000000284.875:51804): avc: denied { ioctl } for pid=20461 comm="syz.6.20423" path="socket:[202810]" dev="sockfs" ino=202810 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 794.706319][ T40] audit: type=1400 audit(2000000284.978:51805): avc: denied { watch watch_reads } for pid=20465 comm="syz.6.20425" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 794.724893][ T40] audit: type=1326 audit(2000000284.997:51806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20465 comm="syz.6.20425" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ffb19c629 code=0x0 [ 795.692598][T20476] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20429'. [ 796.739989][ T6050] Bluetooth: hci3: command 0x2016 tx timeout [ 797.008162][T20531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20449'. [ 797.145055][T20545] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 797.154028][T20545] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 797.572209][T20587] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.20467'. [ 797.637702][ T6044] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 797.682283][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 798.303541][T20622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 798.328015][T20624] tipc: Enabling of bearer rejected, already enabled [ 798.415689][T20628] 0: reclassify loop, rule prio 0, protocol 800 [ 799.238068][T20683] 0: reclassify loop, rule prio 0, protocol 800 [ 799.844813][T20708] netlink: 76 bytes leftover after parsing attributes in process `syz.1.20508'. [ 800.513524][T20743] tipc: Enabling of bearer rejected, failed to enable media [ 801.002099][T20765] netlink: 76 bytes leftover after parsing attributes in process `syz.2.20524'. [ 801.404654][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20530'. [ 801.651619][T20808] tipc: Resetting bearer [ 801.694860][T20808] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 801.698093][T20808] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 801.832492][T20812] netlink: 104 bytes leftover after parsing attributes in process `syz.6.20538'. [ 801.839106][T20812] vxcan1: entered promiscuous mode [ 802.476701][ T6050] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 802.560074][ T6050] Bluetooth: hci3: hardware error 0x08 [ 802.656683][T20857] fuse: Bad value for 'fd' [ 802.849297][T20872] netlink: 'syz.8.20560': attribute type 1 has an invalid length. [ 802.853656][T20874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20561'. [ 802.870854][T20872] 8021q: adding VLAN 0 to HW filter on device bond11 [ 802.907491][T20872] bond11: (slave gretap2): making interface the new active one [ 802.911967][T20872] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 802.921459][T20872] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20872 comm=syz.8.20560 [ 803.077111][T20879] netlink: 788 bytes leftover after parsing attributes in process `syz.6.20563'. [ 803.081195][T20879] bond0: entered allmulticast mode [ 803.083836][T20879] gretap1: entered allmulticast mode [ 803.129747][T20885] ptrace attach of "/syz-executor exec"[14773] was attempted by "/syz-executor exec"[20885] [ 803.142860][ T40] audit: type=1804 audit(2000000292.887:51807): pid=20885 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.20565" name="file0" dev="tmpfs" ino=3213 res=1 errno=0 [ 804.237083][T20911] netlink: 'syz.8.20574': attribute type 24 has an invalid length. [ 804.333133][T20920] netlink: 12 bytes leftover after parsing attributes in process `syz.8.20579'. [ 804.850111][T20979] bridge_slave_0: entered promiscuous mode [ 804.852569][T20979] bridge_slave_0: entered allmulticast mode [ 804.934614][ T6050] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 805.136694][T21013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20619'. [ 806.050071][T21081] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20649'. [ 806.235692][T21097] netlink: 'syz.8.20657': attribute type 1 has an invalid length. [ 806.266194][T21097] 8021q: adding VLAN 0 to HW filter on device bond12 [ 806.276575][T21097] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21097 comm=syz.8.20657 [ 806.386635][T21108] tipc: Enabled bearer , priority 0 [ 806.599163][T21125] netlink: 'syz.2.20669': attribute type 1 has an invalid length. [ 806.626649][T21125] 8021q: adding VLAN 0 to HW filter on device bond17 [ 806.641894][T21125] bond17: (slave gretap3): making interface the new active one [ 806.645926][T21125] bond17: (slave gretap3): Enslaving as an active interface with an up link [ 806.654214][T21125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21125 comm=syz.2.20669 [ 806.695497][T21131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20671'. [ 807.041460][T21153] netlink: 'syz.2.20681': attribute type 1 has an invalid length. [ 807.060260][T21153] 8021q: adding VLAN 0 to HW filter on device bond18 [ 807.070376][T21153] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21153 comm=syz.2.20681 [ 807.346967][T21181] xt_hashlimit: size too large, truncated to 1048576 [ 807.369698][T21183] netlink: 'syz.2.20694': attribute type 1 has an invalid length. [ 807.395841][T21183] 8021q: adding VLAN 0 to HW filter on device bond19 [ 807.406227][T21183] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21183 comm=syz.2.20694 [ 807.450234][ T1027] tipc: Node number set to 414362594 [ 808.000219][T21209] netlink: 100 bytes leftover after parsing attributes in process `syz.6.20704'. [ 808.035679][T21215] netlink: 'syz.6.20706': attribute type 1 has an invalid length. [ 808.049872][T21215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 808.058929][T21215] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21215 comm=syz.6.20706 [ 810.591445][T21424] netlink: 'syz.8.20793': attribute type 1 has an invalid length. [ 810.604552][T21424] 8021q: adding VLAN 0 to HW filter on device bond13 [ 810.714617][T21433] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20796'. [ 810.756408][T21437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20795'. [ 810.759654][T21437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20795'. [ 810.762571][T21437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20795'. [ 810.767471][T21437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20795'. [ 810.881056][T21454] netlink: 'syz.8.20805': attribute type 1 has an invalid length. [ 810.911730][T21454] 8021q: adding VLAN 0 to HW filter on device bond14 [ 810.926525][T21454] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21454 comm=syz.8.20805 [ 811.190090][T21469] xfrm0 speed is unknown, defaulting to 1000 [ 811.316738][T21469] lo speed is unknown, defaulting to 1000 [ 811.730752][T21511] bond0: (slave vlan5): Opening slave failed [ 811.916085][ T1027] page_pool_release_retry() stalled pool shutdown: id 179, 14 inflight 121 sec [ 813.556710][T21569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20849'. [ 813.561160][T21569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20849'. [ 813.564412][T21569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20849'. [ 813.569398][T21569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20849'. [ 813.661079][T21571] fuse: Bad value for 'fd' [ 813.664207][T21571] overlayfs: failed to clone upperpath [ 815.549008][T21614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20865'. [ 815.707855][T21627] netlink: 'syz.1.20871': attribute type 14 has an invalid length. [ 815.712447][T21627] netlink: 'syz.1.20871': attribute type 14 has an invalid length. [ 817.676885][T21699] overlayfs: failed to clone lowerpath [ 818.199559][T21747] __nla_validate_parse: 4 callbacks suppressed [ 818.199585][T21747] netlink: 14 bytes leftover after parsing attributes in process `syz.8.20923'. [ 818.422113][ T40] audit: type=1326 audit(2000000307.232:51808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21766 comm="syz.2.20930" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x0 [ 818.513143][T21773] netlink: 'syz.1.20933': attribute type 1 has an invalid length. [ 818.532681][T21773] 8021q: adding VLAN 0 to HW filter on device bond27 [ 819.049658][T21809] netlink: 'syz.6.20945': attribute type 3 has an invalid length. [ 819.150992][T21817] overlayfs: failed to clone upperpath [ 819.341346][T21834] bridge_slave_0: left promiscuous mode [ 819.344398][T21834] bridge_slave_0: left allmulticast mode [ 819.802961][T21858] overlayfs: failed to clone upperpath [ 820.126763][T21885] overlayfs: failed to clone upperpath [ 820.180263][T21893] overlayfs: failed to clone upperpath [ 820.200309][T21895] 9p: Bad value for 'wfdno' [ 820.370553][T21914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20988'. [ 820.407129][T21919] fuse: Bad value for 'fd' [ 820.524557][T21932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21000'. [ 820.576176][T21932] bridge22: port 1(veth37) entered blocking state [ 820.578423][T21932] bridge22: port 1(veth37) entered disabled state [ 820.580793][T21932] veth37: entered allmulticast mode [ 820.587487][T21932] veth37: entered promiscuous mode [ 820.742448][T21961] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 820.745659][T21961] overlayfs: missing 'lowerdir' [ 820.810535][T21968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21016'. [ 821.000731][T21994] netlink: 'syz.8.21029': attribute type 1 has an invalid length. [ 821.026792][T21994] 8021q: adding VLAN 0 to HW filter on device bond15 [ 821.042771][T21994] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21994 comm=syz.8.21029 [ 821.123916][T22010] overlayfs: failed to clone upperpath [ 821.150815][T22014] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21038'. [ 821.188247][T22018] netlink: 'syz.1.21040': attribute type 8 has an invalid length. [ 821.196337][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21040'. [ 821.215346][T22018] bond0: entered promiscuous mode [ 821.219065][T22018] bond0: left promiscuous mode [ 821.334173][T22030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21046'. [ 821.573332][T22048] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21054'. [ 821.691277][T22052] netlink: 'syz.2.21056': attribute type 1 has an invalid length. [ 821.717810][T22052] 8021q: adding VLAN 0 to HW filter on device bond20 [ 821.728479][T22052] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22052 comm=syz.2.21056 [ 822.067088][T22091] netlink: 'syz.6.21071': attribute type 4 has an invalid length. [ 822.988200][T22117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21081'. [ 823.126231][T22129] vxcan1: left promiscuous mode [ 823.129711][T22129] bond0: left allmulticast mode [ 823.131688][T22129] gretap1: left allmulticast mode [ 823.144615][T22132] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22132 comm=syz.8.21087 [ 823.375105][T22139] overlayfs: failed to clone upperpath [ 823.647342][T22153] overlayfs: failed to clone upperpath [ 823.697469][T22155] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21098'. [ 823.731921][T22155] bridge12: port 1(veth19) entered blocking state [ 823.734984][T22155] bridge12: port 1(veth19) entered disabled state [ 823.739493][T22155] veth19: entered allmulticast mode [ 823.742742][T22155] veth19: entered promiscuous mode [ 824.098656][T22187] overlayfs: failed to clone upperpath [ 824.305446][T22193] netlink: 'syz.6.21115': attribute type 1 has an invalid length. [ 824.311336][T22193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22193 comm=syz.6.21115 [ 825.844939][T22263] xfrm0 speed is unknown, defaulting to 1000 [ 825.988038][T22275] overlayfs: failed to clone upperpath [ 826.020979][T22263] lo speed is unknown, defaulting to 1000 [ 826.547216][T22301] xt_hashlimit: size too large, truncated to 1048576 [ 826.822376][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21160'. [ 826.935405][T22330] bond16: left promiscuous mode [ 827.988474][T22373] netlink: 'syz.2.21185': attribute type 21 has an invalid length. [ 827.992445][T22373] IPv6: NLM_F_CREATE should be specified when creating new route [ 828.100681][T22383] overlayfs: failed to clone upperpath [ 830.413532][T22526] tipc: Enabling of bearer rejected, already enabled [ 830.535258][T22534] overlayfs: failed to clone upperpath [ 831.078992][T22574] xt_hashlimit: size too large, truncated to 1048576 [ 831.215217][T22582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21263'. [ 831.255997][T22584] netlink: 'syz.8.21264': attribute type 10 has an invalid length. [ 831.312980][T22590] tipc: Enabling of bearer rejected, already enabled [ 831.361087][T22592] netlink: 28 bytes leftover after parsing attributes in process `syz.8.21268'. [ 831.365024][T22592] netlink: 28 bytes leftover after parsing attributes in process `syz.8.21268'. [ 831.394794][T22594] tipc: Enabling of bearer rejected, already enabled [ 831.467089][T22600] netlink: 'syz.6.21272': attribute type 1 has an invalid length. [ 831.496578][T22600] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 831.499979][T22605] netlink: 76 bytes leftover after parsing attributes in process `syz.8.21274'. [ 831.505118][T22600] netlink: 28 bytes leftover after parsing attributes in process `syz.6.21272'. [ 831.510179][T22600] bond4 (unregistering): (slave ip6gretap2): Releasing backup interface [ 831.552233][T22600] bond4 (unregistering): Released all slaves [ 831.725268][T22624] tipc: Enabling of bearer rejected, already enabled [ 831.730014][T22624] netlink: 44 bytes leftover after parsing attributes in process `syz.1.21283'. [ 831.781517][T22629] tipc: Enabling of bearer rejected, already enabled [ 832.184687][T22665] xfrm0 speed is unknown, defaulting to 1000 [ 832.219580][ T40] audit: type=1326 audit(2000000320.170:51809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22664 comm="syz.2.21298" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9e8b9c629 code=0x0 [ 832.310090][T22674] netlink: 788 bytes leftover after parsing attributes in process `syz.8.21300'. [ 832.313201][T22674] bond0: entered allmulticast mode [ 832.315135][T22674] geneve2: entered allmulticast mode [ 832.350802][T22665] lo speed is unknown, defaulting to 1000 [ 832.484726][T22692] ptrace attach of "/syz-executor exec"[32119] was attempted by "/syz-executor exec"[22692] [ 832.503831][ T40] audit: type=1804 audit(2000000320.442:51810): pid=22692 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.21307" name="file0" dev="tmpfs" ino=10495 res=1 errno=0 [ 832.519221][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21309'. [ 832.531995][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21309'. [ 832.535180][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21309'. [ 833.354448][T22734] bond2: (slave macvlan0): Releasing active interface [ 833.410679][T22734] bond0 (unregistering): Released all slaves [ 833.746293][T22759] rdma_rxe: rxe_newlink: failed to add lo [ 834.002210][T22793] netlink: 'syz.2.21351': attribute type 1 has an invalid length. [ 834.033618][T22793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.042363][T22793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22793 comm=syz.2.21351 [ 835.007466][T22901] bond0: left allmulticast mode [ 835.009149][T22901] geneve2: left allmulticast mode [ 835.021435][T22905] netlink: 'syz.6.21398': attribute type 1 has an invalid length. [ 835.036241][T22905] 8021q: adding VLAN 0 to HW filter on device bond4 [ 835.042146][T22905] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22905 comm=syz.6.21398 [ 835.229491][ T40] audit: type=1326 audit(2000000323.003:51811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.2.21407" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9e8b9c629 code=0x0 [ 835.307457][T22934] netlink: 'syz.1.21410': attribute type 1 has an invalid length. [ 835.324178][T22934] 8021q: adding VLAN 0 to HW filter on device bond28 [ 835.333023][T22934] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22934 comm=syz.1.21410 [ 836.173554][T22961] netlink: 'syz.8.21421': attribute type 1 has an invalid length. [ 836.195787][T22961] 8021q: adding VLAN 0 to HW filter on device bond16 [ 836.204243][T22961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22961 comm=syz.8.21421 [ 836.275985][T22965] tipc: Enabling of bearer rejected, already enabled [ 836.282528][T22965] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 837.850051][T23032] xfrm0 speed is unknown, defaulting to 1000 [ 837.940034][T23032] lo speed is unknown, defaulting to 1000 [ 838.415988][T23063] xfrm0 speed is unknown, defaulting to 1000 [ 838.506032][T23063] lo speed is unknown, defaulting to 1000 [ 838.884863][T23084] xt_hashlimit: size too large, truncated to 1048576 [ 839.484439][T23112] netlink: 'syz.8.21483': attribute type 1 has an invalid length. [ 839.491612][T23112] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23112 comm=syz.8.21483 [ 839.763876][T23132] overlayfs: failed to clone upperpath [ 839.767499][T23132] overlayfs: failed to clone lowerpath [ 840.646003][T23192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23192 comm=syz.2.21518 [ 841.330834][T23196] netlink: 'syz.8.21520': attribute type 3 has an invalid length. [ 841.705086][T23225] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23225 comm=syz.8.21532 [ 841.905416][T23239] overlayfs: failed to clone lowerpath [ 842.150438][T23248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23248 comm=syz.6.21542 [ 842.862738][T23292] overlayfs: failed to clone upperpath [ 842.991465][T23311] overlayfs: failed to clone upperpath [ 843.107152][T23322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23322 comm=syz.2.21574 [ 843.321005][T23331] overlayfs: failed to clone upperpath [ 843.599383][T23339] netlink: 'syz.6.21581': attribute type 3 has an invalid length. [ 844.570069][T23378] overlayfs: failed to clone upperpath [ 844.832405][T23396] overlayfs: failed to clone upperpath [ 844.961939][T23416] overlayfs: failed to clone upperpath [ 845.043032][T23421] cgroup: fork rejected by pids controller in /syz1 [ 845.209041][T23449] overlayfs: failed to clone upperpath [ 845.232981][T23452] xfrm0 speed is unknown, defaulting to 1000 [ 845.273182][T23458] overlayfs: failed to clone upperpath [ 845.384597][T23452] lo speed is unknown, defaulting to 1000 [ 845.544495][T23475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23475 comm=syz.2.21639 [ 845.858925][T23504] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23504 comm=syz.2.21652 [ 846.233464][T23541] __nla_validate_parse: 3 callbacks suppressed [ 846.233478][T23541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21665'. [ 846.242720][T23541] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23541 comm=syz.2.21665 [ 846.629769][T23575] overlayfs: failed to clone upperpath [ 846.757461][T23588] tipc: Enabling of bearer rejected, already enabled [ 846.770593][T23590] overlayfs: failed to clone upperpath [ 847.324912][T23635] netlink: 'syz.6.21701': attribute type 3 has an invalid length. [ 847.796911][T23674] overlayfs: failed to clone upperpath [ 848.118560][ T40] audit: type=1326 audit(2000000335.087:51812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23687 comm="syz.1.21726" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe96239c629 code=0x0 [ 848.743293][T23723] overlayfs: failed to clone upperpath [ 848.951411][T23734] mac80211_hwsim hwsim35 wlan1: Caught tx_queue_len zero misconfig [ 848.957630][T23734] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 849.482404][T23758] netlink: 'syz.8.21752': attribute type 1 has an invalid length. [ 849.512779][T23758] bond17: (slave vxcan5): The slave device specified does not support setting the MAC address [ 849.516840][T23758] bond17: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 849.524701][T23758] bond17: (slave vxcan5): making interface the new active one [ 849.528434][T23758] bond17: (slave vxcan5): Enslaving as an active interface with an up link [ 849.534623][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21752'. [ 849.540745][T23758] bond17 (unregistering): (slave vxcan5): Releasing backup interface [ 849.575552][T23758] bond17 (unregistering): Released all slaves [ 849.845297][T23769] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21757'. [ 849.887414][T23769] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23769 comm=syz.8.21757 [ 849.953089][T23782] overlayfs: failed to clone upperpath [ 850.110613][T23801] netlink: 'syz.6.21771': attribute type 21 has an invalid length. [ 850.114376][T23801] IPv6: NLM_F_CREATE should be specified when creating new route [ 850.147011][T23806] 8021q: adding VLAN 0 to HW filter on device bond17 [ 850.154678][T23806] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23806 comm=syz.8.21773 [ 850.244404][T23817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21778'. [ 850.504004][T23837] 8021q: adding VLAN 0 to HW filter on device bond5 [ 850.515542][T23837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23837 comm=syz.6.21786 [ 851.157063][ T40] audit: type=1400 audit(2000000337.939:51813): avc: denied { map } for pid=23858 comm="syz.1.21794" path="socket:[213314]" dev="sockfs" ino=213314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 851.794243][T23890] netlink: 'syz.2.21806': attribute type 3 has an invalid length. [ 852.417668][T23932] netlink: 28 bytes leftover after parsing attributes in process `syz.6.21822'. [ 852.426326][T23932] lo: entered promiscuous mode [ 852.428071][T23932] tunl0: entered promiscuous mode [ 852.430961][T23932] gre0: entered promiscuous mode [ 852.432960][T23932] gretap0: entered promiscuous mode [ 852.434806][T23932] erspan0: entered promiscuous mode [ 852.436653][T23932] ip_vti0: entered promiscuous mode [ 852.438436][T23932] ip6_vti0: entered promiscuous mode [ 852.440739][T23932] sit0: entered promiscuous mode [ 852.442422][T23932] ip6tnl0: entered promiscuous mode [ 852.444372][T23932] ip6gre0: entered promiscuous mode [ 852.446294][T23932] ip6gretap0: entered promiscuous mode [ 852.448180][T23932] bridge0: entered promiscuous mode [ 852.449975][T23932] team0: entered promiscuous mode [ 852.452512][T23932] team_slave_0: entered promiscuous mode [ 852.454876][T23932] team_slave_1: entered promiscuous mode [ 852.457119][T23932] nlmon0: entered promiscuous mode [ 852.458871][T23932] caif0: entered promiscuous mode [ 852.460594][T23932] batadv0: entered promiscuous mode [ 852.464814][T23932] veth0: entered promiscuous mode [ 852.466634][T23932] veth1: entered promiscuous mode [ 852.472449][T23932] wg0: entered promiscuous mode [ 852.474465][T23932] wg1: entered promiscuous mode [ 852.476132][T23932] ªªªªªª: entered promiscuous mode [ 852.478028][T23932] veth0_to_bridge: entered promiscuous mode [ 852.480298][T23932] veth1_to_bridge: entered promiscuous mode [ 852.482574][T23932] veth0_to_bond: entered promiscuous mode [ 852.486145][T23932] bond_slave_0: entered promiscuous mode [ 852.489200][T23932] veth1_to_bond: entered promiscuous mode [ 852.492047][T23932] bond_slave_1: entered promiscuous mode [ 852.495003][T23932] veth0_to_team: entered promiscuous mode [ 852.497478][T23932] veth1_to_team: entered promiscuous mode [ 852.500143][T23932] veth0_to_batadv: entered promiscuous mode [ 852.502403][T23932] batadv_slave_0: entered promiscuous mode [ 852.504806][T23932] veth1_to_batadv: entered promiscuous mode [ 852.507621][T23932] xfrm0: entered promiscuous mode [ 852.510057][T23932] veth0_to_hsr: entered promiscuous mode [ 852.512158][T23932] veth1_to_hsr: entered promiscuous mode [ 852.514608][T23932] hsr0: entered promiscuous mode [ 852.519087][T23932] vlan0: entered promiscuous mode [ 852.521734][T23932] vlan1: entered promiscuous mode [ 852.524363][T23932] macvlan0: entered promiscuous mode [ 852.527820][T23932] macvlan1: entered promiscuous mode [ 852.530354][T23932] ipvlan0: entered promiscuous mode [ 852.533596][T23932] ipvlan1: entered promiscuous mode [ 852.536799][T23932] macvtap0: entered promiscuous mode [ 852.539459][T23932] macsec0: entered promiscuous mode [ 852.541864][T23932] geneve0: entered promiscuous mode [ 852.544316][T23932] geneve1: entered promiscuous mode [ 852.546795][T23932] mac80211_hwsim hwsim47 : entered promiscuous mode [ 852.553068][T23932] bridge1: entered promiscuous mode [ 852.555580][T23932] veth2: entered promiscuous mode [ 852.559308][T23932] bond1: entered promiscuous mode [ 852.562047][T23932] veth4: entered promiscuous mode [ 852.564755][T23932] veth5: entered promiscuous mode [ 852.567282][T23932] ip6erspan0: entered promiscuous mode [ 852.570759][T23932] bond2: entered promiscuous mode [ 852.572636][T23932] batadv1: entered promiscuous mode [ 852.574799][T23932] vlan3: entered promiscuous mode [ 852.576755][T23932] bond0: entered promiscuous mode [ 852.578411][T23932] gretap1: entered promiscuous mode [ 852.581075][T23932] macsec1: entered promiscuous mode [ 852.583020][T23932] bridge2: entered promiscuous mode [ 852.584786][T23932] veth6: entered promiscuous mode [ 852.586951][T23932] veth7: entered promiscuous mode [ 852.589091][T23932] syztnl0: entered promiscuous mode [ 852.591540][T23932] ip6gretap1: entered promiscuous mode [ 852.593440][T23932] @: entered promiscuous mode [ 852.595063][T23932] bridge3: entered promiscuous mode [ 852.597092][T23932] veth8: entered promiscuous mode [ 852.598922][T23932] veth9: entered promiscuous mode [ 852.601568][T23932] bridge4: entered promiscuous mode [ 852.603417][T23932] bridge5: entered promiscuous mode [ 852.605355][T23932] veth10: entered promiscuous mode [ 852.607698][T23932] veth11: entered promiscuous mode [ 852.609479][T23932] bond3: entered promiscuous mode [ 852.612379][T23932] ip6gretap2: entered promiscuous mode [ 852.614632][T23932] bond4: entered promiscuous mode [ 852.616641][T23932] netdevsim netdevsim6 eth0: entered promiscuous mode [ 852.619566][T23932] netdevsim netdevsim6 eth1: entered promiscuous mode [ 852.623795][T23932] netdevsim netdevsim6 eth2: entered promiscuous mode [ 852.626856][T23932] netdevsim netdevsim6 eth3: entered promiscuous mode [ 852.630718][T23932] bond5: entered promiscuous mode [ 853.016395][T23980] lo: Caught tx_queue_len zero misconfig [ 853.019108][T23980] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 853.059697][T23983] tipc: Enabling of bearer rejected, already enabled [ 853.590113][T24001] netlink: 76 bytes leftover after parsing attributes in process `syz.6.21849'. [ 853.974498][T24031] tipc: Enabling of bearer rejected, already enabled [ 853.980785][T24031] netlink: 'syz.1.21858': attribute type 13 has an invalid length. [ 854.025958][T24033] netlink: 'syz.2.21859': attribute type 11 has an invalid length. [ 854.034597][T24033] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.21859'. [ 854.044602][T24031] syzkaller0: Caught tx_queue_len zero misconfig [ 854.281470][T24041] netlink: 788 bytes leftover after parsing attributes in process `syz.1.21863'. [ 854.285587][T24041] bond0: entered allmulticast mode [ 854.739015][T24068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21872'. [ 854.744449][T24068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21872'. [ 854.748016][T24068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21872'. [ 854.751861][T24068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21872'. [ 854.755577][T24068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21872'. [ 854.759329][T24068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21872'. [ 854.915527][T24075] bond0: left allmulticast mode [ 854.939733][T24072] tipc: Started in network mode [ 854.941691][T24072] tipc: Node identity 4, cluster identity 4711 [ 854.943878][T24072] tipc: Node number set to 4 [ 855.397508][ T40] audit: type=1326 audit(2000000341.908:51814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24091 comm="syz.6.21883" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ffb19c629 code=0x0 [ 856.524228][T24139] netlink: 'syz.8.21900': attribute type 1 has an invalid length. [ 856.541529][T24139] 8021q: adding VLAN 0 to HW filter on device bond18 [ 856.548719][T24139] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24139 comm=syz.8.21900 [ 856.642259][T24146] overlayfs: failed to clone upperpath [ 856.956631][T24176] netlink: 'syz.1.21914': attribute type 1 has an invalid length. [ 856.971431][T24176] 8021q: adding VLAN 0 to HW filter on device bond29 [ 856.979481][T24176] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24176 comm=syz.1.21914 [ 857.719397][ T40] audit: type=1400 audit(2000000344.103:51815): avc: denied { create } for pid=24220 comm="syz.6.21933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 857.728650][ T40] audit: type=1400 audit(2000000344.112:51816): avc: denied { getopt } for pid=24220 comm="syz.6.21933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 857.736689][ T40] audit: type=1400 audit(2000000344.112:51817): avc: denied { getopt } for pid=24220 comm="syz.6.21933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 857.801387][T24230] __nla_validate_parse: 4 callbacks suppressed [ 857.801400][T24230] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21937'. [ 857.808806][T24230] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24230 comm=syz.6.21937 [ 857.968673][ T40] audit: type=1400 audit(2000000344.328:51818): avc: denied { map } for pid=24235 comm="syz.6.21939" path="socket:[213681]" dev="sockfs" ino=213681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 858.186581][T24270] netlink: 180 bytes leftover after parsing attributes in process `syz.1.21951'. [ 858.190197][T24270] netlink: 180 bytes leftover after parsing attributes in process `syz.1.21951'. [ 858.293004][T24281] netlink: 'syz.8.21956': attribute type 4 has an invalid length. [ 858.587307][T24319] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24319 comm=syz.8.21974 [ 858.759673][T24337] trusted_key: encrypted_key: master key parameter 'zer.state' is invalid [ 858.807300][T24339] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21980'. [ 858.852527][T24339] bridge0: port 1(veth21) entered blocking state [ 858.855317][T24339] bridge0: port 1(veth21) entered disabled state [ 858.858058][T24339] veth21: entered allmulticast mode [ 858.861241][T24339] veth21: entered promiscuous mode [ 859.170126][T24370] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value [ 859.244656][T24382] netlink: 212336 bytes leftover after parsing attributes in process `syz.6.21998'. [ 859.383026][T24405] netlink: 177816 bytes leftover after parsing attributes in process `syz.2.21999'. [ 859.388042][T24404] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24404 comm=syz.6.22009 [ 859.424072][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22012'. [ 859.427367][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22012'. [ 859.443106][ T40] audit: type=1326 audit(2000000345.707:51819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 859.450998][ T40] audit: type=1326 audit(2000000345.707:51820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 859.460881][ T40] audit: type=1326 audit(2000000345.707:51821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 859.470178][ T40] audit: type=1326 audit(2000000345.707:51822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 859.479679][ T40] audit: type=1326 audit(2000000345.707:51823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 859.585840][T24430] ip6tnl0: Caught tx_queue_len zero misconfig [ 859.602860][T24430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22020'. [ 859.677125][T24437] netlink: 'syz.6.22023': attribute type 4 has an invalid length. [ 859.745744][T24443] netlink: 'syz.1.22026': attribute type 16 has an invalid length. [ 859.748646][T24443] netlink: 'syz.1.22026': attribute type 2 has an invalid length. [ 859.751770][T24443] netlink: 64102 bytes leftover after parsing attributes in process `syz.1.22026'. [ 859.995698][T24444] IPVS: set_ctl: invalid protocol: 8 172.30.1.2:20001 [ 860.496179][T24468] CIFS: Unable to determine destination address [ 860.732788][ T40] kauditd_printk_skb: 9582 callbacks suppressed [ 860.732800][ T40] audit: type=1326 audit(2000000346.918:61406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 860.743929][ T40] audit: type=1326 audit(2000000346.918:61407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 860.758627][ T40] audit: type=1326 audit(2000000346.918:61408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 860.766754][T24470] : entered promiscuous mode [ 860.767589][ T40] audit: type=1326 audit(2000000346.918:61409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 860.777169][ T40] audit: type=1326 audit(2000000346.918:61410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 860.784967][ T40] audit: type=1326 audit(2000000346.918:61411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 860.793853][ T40] audit: type=1326 audit(2000000346.918:61412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 860.802166][ T40] audit: type=1326 audit(2000000346.918:61413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 860.809625][ T40] audit: type=1326 audit(2000000346.918:61414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 860.820768][ T40] audit: type=1326 audit(2000000346.918:61415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.2.22014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e8b9c629 code=0x50000 [ 862.205100][T24529] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 862.209809][T24529] overlayfs: missing 'lowerdir' [ 862.905047][T24561] netlink: 'syz.2.22073': attribute type 9 has an invalid length. [ 862.913981][T24561] netlink: 'syz.2.22073': attribute type 9 has an invalid length. [ 863.165572][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 863.443529][T24582] __nla_validate_parse: 13 callbacks suppressed [ 863.443548][T24582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22082'. [ 863.452885][T24582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22082'. [ 863.551774][T24589] netlink: 24 bytes leftover after parsing attributes in process `syz.6.22085'. [ 863.607548][T24593] netlink: 'syz.6.22087': attribute type 8 has an invalid length. [ 863.722696][T24593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.821967][T24603] netlink: 24 bytes leftover after parsing attributes in process `syz.8.22089'. [ 863.870385][T24603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=24603 comm=syz.8.22089 [ 863.912371][T24609] netlink: 'syz.8.22091': attribute type 10 has an invalid length. [ 863.920490][T24605] macsec2: entered promiscuous mode [ 864.001664][T24612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22090'. [ 864.006615][T24612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22090'. [ 864.258932][T24627] fuse: Bad value for 'user_id' [ 864.260529][T24627] fuse: Bad value for 'user_id' [ 864.361875][T24638] overlayfs: failed to clone upperpath [ 864.445027][T24644] all: renamed from bridge_slave_0 [ 864.745832][T24681] bond6 (unregistering): Released all slaves [ 864.919236][T24691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22121'. [ 865.400655][T24733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22134'. [ 865.405477][T24733] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22134'. [ 865.487088][T24740] netlink: 24 bytes leftover after parsing attributes in process `syz.8.22137'. [ 865.648691][T24750] netlink: 'syz.6.22142': attribute type 1 has an invalid length. [ 865.670450][T24750] 8021q: adding VLAN 0 to HW filter on device bond6 [ 865.677504][T24750] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24750 comm=syz.6.22142 [ 865.783198][T24756] xt_CONNSECMARK: invalid mode: 0 [ 866.154858][ T40] kauditd_printk_skb: 14376 callbacks suppressed [ 866.154870][ T40] audit: type=1326 audit(2000000352.012:75792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.1.22153" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe96239c629 code=0x0 [ 867.046360][T24816] netlink: 'syz.8.22166': attribute type 1 has an invalid length. [ 867.070278][T24816] 8021q: adding VLAN 0 to HW filter on device bond19 [ 867.077703][T24816] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24816 comm=syz.8.22166 [ 867.327362][T24836] : entered promiscuous mode [ 867.370762][T24844] netlink: 'syz.1.22177': attribute type 29 has an invalid length. [ 867.377302][T24844] netlink: 'syz.1.22177': attribute type 29 has an invalid length. [ 868.634202][T24889] xfrm0 speed is unknown, defaulting to 1000 [ 868.769505][T24889] lo speed is unknown, defaulting to 1000 [ 868.820980][T24893] netlink: 'syz.6.22196': attribute type 1 has an invalid length. [ 868.823773][T24893] __nla_validate_parse: 14 callbacks suppressed [ 868.823783][T24893] netlink: 96 bytes leftover after parsing attributes in process `syz.6.22196'. [ 868.828990][T24893] netlink: 658 bytes leftover after parsing attributes in process `syz.6.22196'. [ 868.831961][T24893] netlink: 1 bytes leftover after parsing attributes in process `syz.6.22196'. [ 868.874033][T24898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22197'. [ 868.958870][T24902] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24902 comm=syz.2.22199 [ 868.969507][T24902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22199'. [ 869.010932][T24912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22203'. [ 869.011614][T24913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22203'. [ 869.013971][T24912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22203'. [ 869.016939][T24913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22203'. [ 869.033701][ T40] audit: type=1400 audit(2000000354.714:75793): avc: denied { setopt } for pid=24901 comm="syz.2.22199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 869.263165][T24931] netlink: 24 bytes leftover after parsing attributes in process `syz.6.22210'. [ 869.384400][ T40] audit: type=1400 audit(2000000355.043:75794): avc: denied { map } for pid=24940 comm="syz.1.22215" path="/6226/file0" dev="tmpfs" ino=32020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 869.460031][T24935] netlink: Conntrack attr has 4 unknown bytes [ 869.471636][T24935] bridge0: port 3(ipvlan2) entered blocking state [ 869.474652][T24935] bridge0: port 3(ipvlan2) entered disabled state [ 869.477493][T24935] ipvlan2: entered allmulticast mode [ 869.479710][T24935] bridge0: entered allmulticast mode [ 869.483925][T24935] ipvlan2: left allmulticast mode [ 869.486136][T24935] bridge0: left allmulticast mode [ 870.504860][T25021] macsec2: entered promiscuous mode [ 870.507201][T25021] macsec2: entered allmulticast mode [ 870.643601][T25053] (syz.8.22258,25053,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 870.654583][ T40] audit: type=1400 audit(2000000356.234:75795): avc: denied { execute } for pid=25051 comm="syz.8.22258" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=218594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 870.807233][T25066] futex_wake_op: syz.6.22264 tries to shift op by 32; fix this program [ 871.041225][T25091] netlink: 'syz.6.22274': attribute type 63 has an invalid length. [ 871.043994][T25091] gretap0: left promiscuous mode [ 871.045832][T25091] gretap0: entered allmulticast mode [ 871.049114][T25091] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 871.080764][T25099] netlink: 'syz.8.22277': attribute type 15 has an invalid length. [ 871.701052][T25133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25133 comm=syz.1.22286 [ 871.728455][T25137] xfrm0 speed is unknown, defaulting to 1000 [ 871.838947][T25137] lo speed is unknown, defaulting to 1000 [ 871.977155][ T40] audit: type=1400 audit(2000000357.472:75796): avc: denied { accept } for pid=25157 comm="syz.6.22297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 872.073999][T25165] overlayfs: failed to clone upperpath [ 872.077609][T25164] delete_channel: no stack [ 872.103271][T25172] netlink: 'syz.8.22302': attribute type 20 has an invalid length. [ 872.111021][T25172] netlink: 'syz.8.22302': attribute type 20 has an invalid length. [ 872.113631][ T167] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.118988][ T79] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.121663][ T79] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.124181][ T79] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.140539][T25169] ip6tnl0: Caught tx_queue_len zero misconfig [ 872.161692][T25172] batadv_slave_0: Caught tx_queue_len zero misconfig [ 872.205467][T25158] netlink: Unknown conntrack attr (0) [ 872.604749][T25185] netlink: 'syz.8.22307': attribute type 1 has an invalid length. [ 872.630852][T25185] 8021q: adding VLAN 0 to HW filter on device bond20 [ 872.640669][T25185] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25185 comm=syz.8.22307 [ 872.807826][T25201] lo: left promiscuous mode [ 872.810871][T25201] tunl0: left promiscuous mode [ 872.813298][T25201] gre0: left promiscuous mode [ 872.816498][T25201] gretap0: left allmulticast mode [ 872.822874][T25201] erspan0: left promiscuous mode [ 872.824569][T25201] ip_vti0: left promiscuous mode [ 872.826939][T25201] ip6_vti0: left promiscuous mode [ 872.829524][T25201] sit0: left promiscuous mode [ 872.832518][T25201] ip6tnl0: left promiscuous mode [ 872.835128][T25201] ip6gre0: left promiscuous mode [ 872.837534][T25201] ip6gretap0: left promiscuous mode [ 872.839927][T25201] bridge0: left promiscuous mode [ 872.844692][T25201] team0: left promiscuous mode [ 872.847827][T25201] nlmon0: left promiscuous mode [ 872.850213][T25201] caif0: left promiscuous mode [ 872.853078][T25201] batadv0: left promiscuous mode [ 872.855344][T25201] veth0: left promiscuous mode [ 872.857537][T25201] veth1: left promiscuous mode [ 872.859745][T25201] wg0: left promiscuous mode [ 872.861974][T25201] wg1: left promiscuous mode [ 872.864209][T25201] ªªªªªª: left promiscuous mode [ 872.866355][T25201] veth0_to_bridge: left promiscuous mode [ 872.868893][T25201] veth1_to_bridge: left promiscuous mode [ 872.871543][T25201] veth0_to_bond: left promiscuous mode [ 872.874130][T25201] bond_slave_0: left promiscuous mode [ 872.876647][T25201] veth1_to_bond: left promiscuous mode [ 872.879168][T25201] bond_slave_1: left promiscuous mode [ 872.881644][T25201] veth0_to_team: left promiscuous mode [ 872.885358][T25201] team_slave_0: left promiscuous mode [ 872.887824][T25201] veth1_to_team: left promiscuous mode [ 872.890167][T25201] team_slave_1: left promiscuous mode [ 872.892644][T25201] veth0_to_batadv: left promiscuous mode [ 872.895407][T25201] batadv_slave_0: left promiscuous mode [ 872.897833][T25201] veth1_to_batadv: left promiscuous mode [ 872.900543][T25201] xfrm0: left promiscuous mode [ 872.902756][T25201] veth0_to_hsr: left promiscuous mode [ 872.905890][T25201] veth1_to_hsr: left promiscuous mode [ 872.908442][T25201] hsr0: left promiscuous mode [ 872.910887][T25201] vlan0: left promiscuous mode [ 872.913254][T25201] vlan1: left promiscuous mode [ 872.915844][T25201] macvlan0: left promiscuous mode [ 872.918116][T25201] macvlan1: left promiscuous mode [ 872.920467][T25201] ipvlan0: left promiscuous mode [ 872.922742][T25201] ipvlan1: left promiscuous mode [ 872.925351][T25201] macvtap0: left promiscuous mode [ 872.947881][T25201] macsec0: left promiscuous mode [ 872.950168][T25201] geneve0: left promiscuous mode [ 872.952491][T25201] geneve1: left promiscuous mode [ 872.954806][T25201] mac80211_hwsim hwsim47 : left promiscuous mode [ 872.957781][T25201] bridge1: left promiscuous mode [ 872.981174][T25201] veth2: left promiscuous mode [ 872.983188][T25201] bond1: left promiscuous mode [ 872.985059][T25201] veth4: left promiscuous mode [ 872.986834][T25201] veth5: left promiscuous mode [ 872.988701][T25201] ip6erspan0: left promiscuous mode [ 872.991336][T25201] vlan3: left promiscuous mode [ 872.993028][T25201] bond2: left promiscuous mode [ 872.994884][T25201] batadv1: left promiscuous mode [ 872.996743][T25201] bond0: left promiscuous mode [ 872.998531][T25201] gretap1: left promiscuous mode [ 873.000343][T25201] macsec1: left promiscuous mode [ 873.002680][T25201] bridge2: left promiscuous mode [ 873.004540][T25201] veth6: left promiscuous mode [ 873.006294][T25201] veth7: left promiscuous mode [ 873.008152][T25201] syztnl0: left promiscuous mode [ 873.009977][T25201] ip6gretap1: left promiscuous mode [ 873.014615][T25201] @: left promiscuous mode [ 873.016236][T25201] bridge3: left promiscuous mode [ 873.018497][T25201] veth8: left promiscuous mode [ 873.020403][T25201] veth9: left promiscuous mode [ 873.022138][T25201] bridge4: left promiscuous mode [ 873.024224][T25201] bridge5: left promiscuous mode [ 873.025941][T25201] veth10: left promiscuous mode [ 873.027623][T25201] veth11: left promiscuous mode [ 873.029347][T25201] bond3: left promiscuous mode [ 873.031096][T25201] ip6gretap2: left promiscuous mode [ 873.032874][T25201] bond4: left promiscuous mode [ 873.035128][T25201] netdevsim netdevsim6 eth0: left promiscuous mode [ 873.037400][T25201] netdevsim netdevsim6 eth1: left promiscuous mode [ 873.039562][T25201] netdevsim netdevsim6 eth2: left promiscuous mode [ 873.041873][T25201] netdevsim netdevsim6 eth3: left promiscuous mode [ 873.044669][T25201] bond5: left promiscuous mode [ 873.102823][T25217] netlink: 'syz.2.22317': attribute type 1 has an invalid length. [ 873.121220][T25217] 8021q: adding VLAN 0 to HW filter on device bond21 [ 873.130874][T25217] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25217 comm=syz.2.22317 [ 873.742597][T25235] xfrm0 speed is unknown, defaulting to 1000 [ 873.887815][T25235] lo speed is unknown, defaulting to 1000 [ 874.260842][T25272] IPv6: sit2: Disabled Multicast RS [ 874.352161][T25278] __nla_validate_parse: 32 callbacks suppressed [ 874.352174][T25278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22340'. [ 874.355349][ T40] audit: type=1326 audit(2000000359.696:75797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25283 comm="syz.8.22343" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd00cb9c629 code=0x0 [ 874.675845][T25320] netlink: 'syz.2.22356': attribute type 4 has an invalid length. [ 874.722512][T25325] overlayfs: failed to clone lowerpath [ 874.725355][T25325] overlayfs: failed to clone lowerpath [ 874.873588][T25334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22362'. [ 874.899890][T25336] xfrm0 speed is unknown, defaulting to 1000 [ 874.940982][T25339] netlink: 45 bytes leftover after parsing attributes in process `syz.6.22361'. [ 875.050961][T25336] lo speed is unknown, defaulting to 1000 [ 875.078642][T25345] geneve1: Caught tx_queue_len zero misconfig [ 875.284654][T25371] overlayfs: failed to clone upperpath [ 875.355789][T25374] netlink: 'syz.8.22377': attribute type 4 has an invalid length. [ 875.543501][T25391] netlink: 45 bytes leftover after parsing attributes in process `syz.8.22381'. [ 875.637404][T25383] xfrm0 speed is unknown, defaulting to 1000 [ 875.715232][ T40] audit: type=1400 audit(2000000360.981:75798): avc: denied { ioctl } for pid=25393 comm="syz.1.22383" path="socket:[219359]" dev="sockfs" ino=219359 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 875.735824][T25383] lo speed is unknown, defaulting to 1000 [ 876.216170][ T1027] page_pool_release_retry() stalled pool shutdown: id 179, 14 inflight 181 sec [ 876.322413][T25424] netlink: 'syz.2.22395': attribute type 8 has an invalid length. [ 876.361265][T25426] xfrm0 speed is unknown, defaulting to 1000 [ 876.399832][T25430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22398'. [ 876.399873][T25431] netlink: 45 bytes leftover after parsing attributes in process `syz.8.22396'. [ 876.501501][T25426] lo speed is unknown, defaulting to 1000 [ 876.515445][T25442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22402'. [ 876.683660][T25448] sctp: [Deprecated]: syz.8.22404 (pid 25448) Use of int in max_burst socket option. [ 876.683660][T25448] Use struct sctp_assoc_value instead [ 876.790091][T25459] Cannot find del_set index 4 as target [ 876.870814][T25466] netlink: 'syz.6.22412': attribute type 1 has an invalid length. [ 876.903485][T25466] 8021q: adding VLAN 0 to HW filter on device bond7 [ 876.918677][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22412'. [ 876.925714][T25466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22412'. [ 876.943685][T25471] xfrm0 speed is unknown, defaulting to 1000 [ 876.974539][T25472] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25472 comm=syz.6.22412 [ 876.991592][T25473] netlink: 45 bytes leftover after parsing attributes in process `syz.8.22413'. [ 877.155818][T25471] lo speed is unknown, defaulting to 1000 [ 877.228802][T25475] 8021q: adding VLAN 0 to HW filter on device bond8 [ 877.233856][T25475] bond0: (slave bond8): Enslaving as an active interface with a down link [ 877.447495][T25491] netlink: 'syz.6.22417': attribute type 2 has an invalid length. [ 877.502756][T25500] lo: MTU too low for tipc bearer [ 877.507966][T25500] tipc: Enabling of bearer rejected, failed to enable media [ 877.641418][T25505] netlink: Conntrack attr has 4 unknown bytes [ 877.673868][T25505] bridge0: port 3(ipvlan2) entered blocking state [ 877.676219][T25505] bridge0: port 3(ipvlan2) entered disabled state [ 877.678635][T25505] ipvlan2: entered allmulticast mode [ 877.680909][T25505] bridge0: entered allmulticast mode [ 877.687297][T25505] ipvlan2: left allmulticast mode [ 877.689049][T25505] bridge0: left allmulticast mode [ 877.830316][T25528] netlink: 'syz.8.22430': attribute type 13 has an invalid length. [ 877.882829][ T40] audit: type=1326 audit(2000000363.008:75799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.8.22430" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00cb9c629 code=0x7ffc0000 [ 877.883501][T25528] mac80211_hwsim hwsim35 syzkaller0: Caught tx_queue_len zero misconfig [ 877.892462][ T40] audit: type=1326 audit(2000000363.008:75800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.8.22430" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00cb9c629 code=0x7ffc0000 [ 877.924403][ T40] audit: type=1326 audit(2000000363.055:75801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.8.22430" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd00cb9c629 code=0x7ffc0000 [ 877.935968][ T40] audit: type=1326 audit(2000000363.055:75802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.8.22430" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd00cb9c629 code=0x7ffc0000 [ 877.944949][ T40] audit: type=1326 audit(2000000363.055:75803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.8.22430" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd00cb9c629 code=0x7ffc0000 [ 877.954309][ T40] audit: type=1326 audit(2000000363.055:75804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.8.22430" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd00cb9c629 code=0x7ffc0000 [ 877.963330][ T40] audit: type=1326 audit(2000000363.055:75805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.8.22430" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd00cb9c629 code=0x7ffc0000 [ 877.972257][ T40] audit: type=1326 audit(2000000363.064:75806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.8.22430" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd00cb9c629 code=0x7ffc0000 [ 877.981287][ T40] audit: type=1326 audit(2000000363.064:75807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.8.22430" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd00cb9c629 code=0x7ffc0000 [ 877.989959][ T40] audit: type=1326 audit(2000000363.064:75808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.8.22430" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd00cb9c629 code=0x7ffc0000 [ 877.993123][T25541] xfrm0 speed is unknown, defaulting to 1000 [ 878.076625][T25541] lo speed is unknown, defaulting to 1000 [ 878.481822][T25553] netlink: Conntrack attr has 4 unknown bytes [ 878.496783][T25553] bridge0: port 3(ipvlan2) entered blocking state [ 878.499574][T25553] bridge0: port 3(ipvlan2) entered disabled state [ 878.502745][T25553] ipvlan2: entered allmulticast mode [ 878.504814][T25553] bridge0: entered allmulticast mode [ 878.509886][T25553] ipvlan2: left allmulticast mode [ 878.514711][T25553] bridge0: left allmulticast mode [ 878.549133][T25563] overlayfs: missing 'lowerdir' [ 878.593548][T25566] sit0: entered promiscuous mode [ 878.595357][T25566] netlink: 'syz.8.22445': attribute type 1 has an invalid length. [ 878.780773][T25589] xfrm0 speed is unknown, defaulting to 1000 [ 878.963729][T25589] lo speed is unknown, defaulting to 1000 [ 879.302472][T25651] xfrm0 speed is unknown, defaulting to 1000 [ 879.482728][T25673] syU×: rxe_newlink: already configured on lo [ 879.523329][T25651] lo speed is unknown, defaulting to 1000 [ 879.565641][T25677] netlink: 'syz.6.22484': attribute type 1 has an invalid length. [ 879.600626][T25677] 8021q: adding VLAN 0 to HW filter on device bond9 [ 879.616583][T25677] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25677 comm=syz.6.22484 [ 879.780971][T25688] overlay: Bad value for 'workdir' [ 879.994102][T25706] __nla_validate_parse: 14 callbacks suppressed [ 879.994115][T25706] netlink: 76 bytes leftover after parsing attributes in process `syz.6.22494'. [ 880.024226][T25708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22495'. [ 880.068330][T25706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22494'. [ 880.072438][T25706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=25706 comm=syz.6.22494 [ 880.249347][T25723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22501'. [ 880.301045][T25731] xt_HMARK: spi-set and port-set can't be combined [ 880.408859][T25741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22509'. [ 880.480685][T25748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22512'. [ 880.651868][T25765] cgroup: subsys name conflicts with all [ 880.758851][T25774] x_tables: duplicate underflow at hook 1 [ 881.056556][T25786] afs: Unknown parameter 'dyns/kernel/debug/sync/info' [ 881.061241][T25786] overlayfs: failed to clone lowerpath [ 881.164316][T25792] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22532'. [ 881.242801][T25796] netlink: 'syz.8.22534': attribute type 16 has an invalid length. [ 881.246119][T25796] netlink: 28 bytes leftover after parsing attributes in process `syz.8.22534'. [ 881.292611][T25800] sit0: left promiscuous mode [ 881.359014][ T12] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.362080][ T12] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.365461][ T12] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.369149][ T12] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.844237][T25841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=25841 comm=syz.2.22551 [ 881.897145][T25847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=25847 comm=syz.6.22553 [ 882.023320][T25853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22556'. [ 882.087122][T25854] netlink: 'syz.6.22555': attribute type 1 has an invalid length. [ 882.126292][T25854] bond10: entered promiscuous mode [ 882.129139][T25854] 8021q: adding VLAN 0 to HW filter on device bond10 [ 882.276823][T25868] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.22560'. [ 882.371254][T25874] netlink: 'syz.2.22562': attribute type 4 has an invalid length. [ 882.376679][T25874] netlink: 'syz.2.22562': attribute type 4 has an invalid length. [ 882.381891][ T7012] lo speed is unknown, defaulting to 1000 [ 882.384267][ T7012] syU×: Port: 1 Link ACTIVE [ 882.386150][ T7012] lo speed is unknown, defaulting to 1000 [ 882.654828][T25881] netlink: 'syz.8.22565': attribute type 16 has an invalid length. [ 882.658809][T25881] netlink: 'syz.8.22565': attribute type 17 has an invalid length. [ 882.871961][T25885] netlink: Conntrack attr has 4 unknown bytes [ 882.879231][T25885] bridge0: port 2(ipvlan2) entered blocking state [ 882.881520][T25885] bridge0: port 2(ipvlan2) entered disabled state [ 882.883964][T25885] ipvlan2: entered allmulticast mode [ 882.892457][T25885] bridge0: entered allmulticast mode [ 882.895194][T25885] ipvlan2: left allmulticast mode [ 882.896910][T25885] bridge0: left allmulticast mode [ 882.954063][T25892] netlink: 'syz.6.22570': attribute type 1 has an invalid length. [ 882.984926][T25892] 8021q: adding VLAN 0 to HW filter on device bond11 [ 882.996331][T25892] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25892 comm=syz.6.22570 [ 883.179567][T25916] netlink: 'syz.6.22577': attribute type 16 has an invalid length. [ 883.182522][T25916] netlink: 'syz.6.22577': attribute type 17 has an invalid length. [ 883.271543][T25924] netlink: 'syz.6.22580': attribute type 1 has an invalid length. [ 883.295256][T25924] 8021q: adding VLAN 0 to HW filter on device bond12 [ 883.306669][T25924] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25924 comm=syz.6.22580 [ 883.425543][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 883.425559][ T40] audit: type=1400 audit(2000000368.224:75830): avc: denied { listen } for pid=25932 comm="syz.6.22583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 883.600948][T25950] netlink: 'syz.2.22587': attribute type 16 has an invalid length. [ 883.603406][T25950] netlink: 'syz.2.22587': attribute type 17 has an invalid length. [ 883.880791][T25965] tmpfs: Bad value for 'mpol' [ 884.100252][T25983] 8021q: adding VLAN 0 to HW filter on device bond31 [ 884.105710][T25983] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25983 comm=syz.1.22599 [ 884.108148][T25984] xfrm0 speed is unknown, defaulting to 1000 [ 884.207319][T25984] lo speed is unknown, defaulting to 1000 [ 884.729541][T26030] xfrm0 speed is unknown, defaulting to 1000 [ 884.932306][T26030] lo speed is unknown, defaulting to 1000 [ 885.199400][T26062] : entered promiscuous mode [ 885.623029][T26112] bond10: left promiscuous mode [ 885.692842][T26124] openvswitch: : Dropping previously announced user features [ 885.708074][T26096] __nla_validate_parse: 22 callbacks suppressed [ 885.708091][T26096] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.22640'. [ 885.714982][T26096] netlink: Conntrack attr has 4 unknown bytes [ 885.724958][T26096] bridge0: port 1(ipvlan3) entered blocking state [ 885.727340][T26096] bridge0: port 1(ipvlan3) entered disabled state [ 885.730214][T26096] ipvlan3: entered allmulticast mode [ 885.732525][T26096] bridge0: entered allmulticast mode [ 885.736330][T26096] ipvlan3: left allmulticast mode [ 885.738213][T26096] bridge0: left allmulticast mode [ 885.854029][T26137] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 885.864080][T26139] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22654'. [ 885.907480][T26139] overlayfs: failed to clone upperpath [ 885.907680][T26143] netlink: 204 bytes leftover after parsing attributes in process `syz.1.22656'. [ 885.914448][T26143] openvswitch: netlink: Flow actions attr not present in new flow. [ 885.942899][T26145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=26145 comm=syz.2.22657 [ 885.976498][T26149] netlink: 24 bytes leftover after parsing attributes in process `syz.8.22659'. [ 886.106322][T26165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=26165 comm=syz.8.22667 [ 886.138076][T26159] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.22664'. [ 886.141327][T26159] netlink: Conntrack attr has 4 unknown bytes [ 886.147777][T26159] bridge0: port 1(ipvlan3) entered blocking state [ 886.150070][T26171] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22669'. [ 886.150114][T26159] bridge0: port 1(ipvlan3) entered disabled state [ 886.155898][T26159] ipvlan3: entered allmulticast mode [ 886.157609][T26159] bridge0: entered allmulticast mode [ 886.160880][T26159] ipvlan3: left allmulticast mode [ 886.163000][T26159] bridge0: left allmulticast mode [ 886.192379][T26173] netlink: 52 bytes leftover after parsing attributes in process `syz.1.22670'. [ 886.330673][T26182] netlink: 24 bytes leftover after parsing attributes in process `syz.8.22674'. [ 886.494437][T26194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22679'. [ 886.517777][T26194] 8021q: adding VLAN 0 to HW filter on device bond32 [ 886.521522][T26197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22680'. [ 886.944867][ T40] audit: type=1400 audit(2000000371.517:75831): avc: denied { create } for pid=26220 comm="syz.6.22691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 887.736391][T26252] validate_nla: 8 callbacks suppressed [ 887.736408][T26252] netlink: 'syz.2.22700': attribute type 4 has an invalid length. [ 887.802139][T26258] netlink: 'syz.2.22702': attribute type 16 has an invalid length. [ 887.805584][T26258] netlink: 'syz.2.22702': attribute type 17 has an invalid length. [ 887.873210][T26267] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 887.931041][T26262] bridge0: port 3(ipvlan3) entered blocking state [ 887.934241][T26262] bridge0: port 3(ipvlan3) entered disabled state [ 887.937362][T26262] ipvlan3: entered allmulticast mode [ 887.939751][T26262] bridge0: entered allmulticast mode [ 887.944037][T26262] ipvlan3: left allmulticast mode [ 887.947235][T26262] bridge0: left allmulticast mode [ 888.035808][T26280] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 888.171040][T26290] netlink: 'syz.1.22716': attribute type 10 has an invalid length. [ 888.177784][T26290] bond23: option mode: unable to set because the bond device has slaves [ 888.186527][T26290] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 888.193371][T26290] bond23: (slave macvlan5): Enslaving as a backup interface with a down link [ 888.297208][T26306] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 888.416904][T26314] hsr_slave_1 (unregistering): left promiscuous mode [ 888.941304][T26353] netlink: 'syz.8.22737': attribute type 16 has an invalid length. [ 888.944513][T26356] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 888.945032][T26353] netlink: 'syz.8.22737': attribute type 17 has an invalid length. [ 888.958242][T26356] netlink: 'syz.2.22741': attribute type 16 has an invalid length. [ 888.962000][T26356] netlink: 'syz.2.22741': attribute type 17 has an invalid length. [ 889.087045][ T40] audit: type=1400 audit(2000000373.534:75832): avc: denied { setopt } for pid=26363 comm="syz.2.22744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 889.298624][T26383] macsec2: left promiscuous mode [ 889.300891][T26383] macsec2: left allmulticast mode [ 889.305435][ T6117] lo speed is unknown, defaulting to 1000 [ 889.308014][ T6117] syU×: Port: 1 Link DOWN [ 889.311365][ T6117] lo speed is unknown, defaulting to 1000 [ 889.547562][T26387] bridge0: port 3(ipvlan3) entered blocking state [ 889.550184][T26387] bridge0: port 3(ipvlan3) entered disabled state [ 889.553729][T26387] ipvlan3: entered allmulticast mode [ 889.558591][T26387] bridge0: entered allmulticast mode [ 889.562715][T26387] ipvlan3: left allmulticast mode [ 889.565118][T26387] bridge0: left allmulticast mode [ 889.612097][T26398] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=94 sclass=netlink_xfrm_socket pid=26398 comm=syz.1.22759 [ 889.825563][T26408] 8021q: VLANs not supported on gre0 [ 890.001168][T26426] xfrm0 speed is unknown, defaulting to 1000 [ 890.095507][T26422] bridge0: port 2(ipvlan2) entered blocking state [ 890.098763][T26422] bridge0: port 2(ipvlan2) entered disabled state [ 890.101148][T26422] ipvlan2: entered allmulticast mode [ 890.102973][T26422] bridge0: entered allmulticast mode [ 890.106553][T26422] ipvlan2: left allmulticast mode [ 890.108961][T26422] bridge0: left allmulticast mode [ 890.164213][T26426] lo speed is unknown, defaulting to 1000 [ 890.339160][T26456] netlink: 'syz.8.22781': attribute type 16 has an invalid length. [ 890.341842][T26456] netlink: 'syz.8.22781': attribute type 17 has an invalid length. [ 890.521775][T26476] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 890.538996][T26478] bond5: option mode: unable to set because the bond device has slaves [ 890.656199][T26486] bond15: Removing last ns target with arp_interval on [ 890.780149][ T40] audit: type=1800 audit(2000000375.120:75833): pid=26509 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.22805" name="nullb0" dev="tmpfs" ino=17778 res=0 errno=0 [ 890.813557][T26511] 8021q: adding VLAN 0 to HW filter on device bond2 [ 890.876648][T26518] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 891.198060][ T40] audit: type=1800 audit(2000000375.514:75834): pid=26533 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.22815" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 891.242097][T26535] __nla_validate_parse: 14 callbacks suppressed [ 891.242110][T26535] netlink: 24 bytes leftover after parsing attributes in process `syz.8.22816'. [ 891.298216][T26541] bond5: option mode: unable to set because the bond device has slaves [ 891.539642][T26564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22827'. [ 891.591403][T26570] netlink: 24 bytes leftover after parsing attributes in process `syz.8.22831'. [ 891.667043][T26579] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 891.757884][T26596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22842'. [ 891.807353][T26604] xt_hashlimit: overflow, rate too high: 0 [ 891.812830][T26604] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22846'. [ 891.824314][T26604] netlink: 24 bytes leftover after parsing attributes in process `syz.8.22846'. [ 891.828371][T26604] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22846'. [ 891.832422][T26604] netlink: 24 bytes leftover after parsing attributes in process `syz.8.22846'. [ 891.852227][T26608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22848'. [ 891.855492][T26608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22848'. [ 891.966883][T26630] tunl0: Caught tx_queue_len zero misconfig [ 892.064606][T26649] syz_tun: entered allmulticast mode [ 892.067310][T26648] syz_tun: left allmulticast mode [ 892.189430][T26666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=26666 comm=syz.8.22869 [ 892.223213][T26676] xfrm0 speed is unknown, defaulting to 1000 [ 892.261820][T26688] bond5: option mode: unable to set because the bond device has slaves [ 892.351019][T26693] overlayfs: failed to clone lowerpath [ 892.368866][T26676] lo speed is unknown, defaulting to 1000 [ 892.381592][T26693] gfs2: path_lookup on b::: returned error -2 [ 892.511665][T26715] bond23: option mode: unable to set because the bond device has slaves [ 892.576795][T26721] overlayfs: failed to clone upperpath [ 892.585764][T26721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57104 sclass=netlink_route_socket pid=26721 comm=syz.8.22890 [ 893.109858][T26733] validate_nla: 14 callbacks suppressed [ 893.109878][T26733] netlink: 'syz.6.22894': attribute type 16 has an invalid length. [ 893.116749][T26733] netlink: 'syz.6.22894': attribute type 17 has an invalid length. [ 893.205212][T26738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=26738 comm=syz.6.22896 [ 893.249753][T26742] netlink: 'syz.6.22898': attribute type 4 has an invalid length. [ 893.610110][T26765] geneve4: entered promiscuous mode [ 893.612395][T26765] geneve4: entered allmulticast mode [ 893.853323][T26775] netlink: 'syz.1.22909': attribute type 1 has an invalid length. [ 893.867681][T26775] 8021q: adding VLAN 0 to HW filter on device bond33 [ 893.878080][T26775] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26775 comm=syz.1.22909 [ 894.050184][T26788] IPv6: NLM_F_CREATE should be specified when creating new route [ 894.248691][T26805] netlink: 'syz.1.22923': attribute type 16 has an invalid length. [ 894.252235][T26805] netlink: 'syz.1.22923': attribute type 17 has an invalid length. [ 894.522007][T26827] netlink: 'syz.2.22932': attribute type 16 has an invalid length. [ 894.526292][T26827] netlink: 'syz.2.22932': attribute type 17 has an invalid length. [ 894.663438][T26837] xfrm0 speed is unknown, defaulting to 1000 [ 894.812409][T26837] lo speed is unknown, defaulting to 1000 [ 894.839917][T26850] netlink: 'syz.6.22943': attribute type 16 has an invalid length. [ 894.843821][T26850] netlink: 'syz.6.22943': attribute type 17 has an invalid length. [ 895.118115][T26857] bond16: (slave geneve2): making interface the new active one [ 895.122279][T26857] bond16: (slave geneve2): Enslaving as an active interface with an up link [ 895.126006][T17099] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 895.140417][T17099] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 895.144032][T17099] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 895.147628][T17099] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 895.433101][T26890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=26890 comm=syz.2.22960 [ 895.646992][T26900] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 895.933058][ T40] audit: type=1326 audit(2000000379.947:75835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26909 comm="syz.2.22966" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9e8b9c629 code=0x0 [ 896.284328][T26913] 8021q: adding VLAN 0 to HW filter on device bond34 [ 896.292123][T26913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26913 comm=syz.1.22967 [ 896.421327][T26922] gretap0: refused to change device tx_queue_len [ 896.423953][T26922] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 896.603491][T26931] xfrm0 speed is unknown, defaulting to 1000 [ 896.624534][T26936] xt_l2tp: unknown flags: 51 [ 896.757540][T26939] 8021q: adding VLAN 0 to HW filter on device bond21 [ 896.769264][T26939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26939 comm=syz.8.22978 [ 896.808251][T26931] lo speed is unknown, defaulting to 1000 [ 897.045708][T26945] tipc: Enabling of bearer rejected, failed to enable media [ 897.100445][T26956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=26956 comm=syz.8.22982 [ 897.280644][T26962] 8021q: adding VLAN 0 to HW filter on device bond22 [ 897.376677][T26972] __nla_validate_parse: 8 callbacks suppressed [ 897.376697][T26972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22988'. [ 897.555821][T26968] bridge0: port 1(ipvlan3) entered blocking state [ 897.558248][T26968] bridge0: port 1(ipvlan3) entered disabled state [ 897.564208][T26968] ipvlan3: entered allmulticast mode [ 897.565997][T26968] bridge0: entered allmulticast mode [ 897.572391][T26968] ipvlan3: left allmulticast mode [ 897.576889][T26968] bridge0: left allmulticast mode [ 897.621321][T26977] netlink: 104 bytes leftover after parsing attributes in process `syz.6.22957'. [ 897.721686][T26994] netlink: 24 bytes leftover after parsing attributes in process `syz.8.22995'. [ 897.937115][T27008] netlink: 24 bytes leftover after parsing attributes in process `syz.6.23002'. [ 897.997438][T26998] bridge0: port 1(ipvlan3) entered blocking state [ 898.000623][T26998] bridge0: port 1(ipvlan3) entered disabled state [ 898.003675][T26998] ipvlan3: entered allmulticast mode [ 898.006053][T26998] bridge0: entered allmulticast mode [ 898.010374][T26998] ipvlan3: left allmulticast mode [ 898.012977][T26998] bridge0: left allmulticast mode [ 898.238277][T27024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23009'. [ 898.256401][T27026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23010'. [ 898.261720][T27026] netlink: 28 bytes leftover after parsing attributes in process `syz.6.23010'. [ 898.509060][T27030] xt_hashlimit: size too large, truncated to 1048576 [ 898.612355][T27044] cgroup: No subsys list or none specified [ 898.659346][T27049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23020'. [ 898.665603][T27049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23020'. [ 898.672453][T27050] validate_nla: 13 callbacks suppressed [ 898.672470][T27050] netlink: 'syz.8.23021': attribute type 1 has an invalid length. [ 898.701257][T27050] 8021q: adding VLAN 0 to HW filter on device bond23 [ 898.723992][T27050] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27050 comm=syz.8.23021 [ 898.822161][T27064] netlink: 'syz.8.23028': attribute type 21 has an invalid length. [ 898.825661][T27064] IPv6: NLM_F_CREATE should be specified when creating new route [ 898.848876][T27064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 898.851659][T27064] IPv6: NLM_F_CREATE should be set when creating new route [ 898.853927][T27064] IPv6: NLM_F_CREATE should be set when creating new route [ 898.856193][T27064] IPv6: NLM_F_CREATE should be set when creating new route [ 898.863687][T27064] netlink: 'syz.8.23028': attribute type 21 has an invalid length. [ 898.866469][T27064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 898.873917][T27069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23029'. [ 899.100463][T27085] netlink: 'syz.1.23036': attribute type 1 has an invalid length. [ 899.134626][T27085] 8021q: adding VLAN 0 to HW filter on device bond35 [ 899.160046][T27090] netlink: 'syz.2.23039': attribute type 10 has an invalid length. [ 899.164002][T27085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27085 comm=syz.1.23036 [ 899.183434][T27090] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 899.187801][T27090] bond2: (slave macvlan2): speed changed to 0 on port 1 [ 899.195195][T27090] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 899.267660][T27092] bridge0: port 2(ipvlan2) entered blocking state [ 899.270607][T27092] bridge0: port 2(ipvlan2) entered disabled state [ 899.273575][T27092] ipvlan2: entered allmulticast mode [ 899.280553][T27092] bridge0: entered allmulticast mode [ 899.284912][T27092] ipvlan2: left allmulticast mode [ 899.288773][T27092] bridge0: left allmulticast mode [ 899.542376][T27123] netlink: 'syz.8.23051': attribute type 10 has an invalid length. [ 899.630593][T27132] netlink: 'syz.8.23054': attribute type 16 has an invalid length. [ 899.634009][T27132] netlink: 'syz.8.23054': attribute type 17 has an invalid length. [ 899.704409][T27136] bond17 (unregistering): Released all slaves [ 899.953332][T27174] netlink: 'syz.8.23070': attribute type 10 has an invalid length. [ 899.978619][T27174] bond5: option mode: unable to set because the bond device has slaves [ 899.999497][ T40] audit: type=1400 audit(2000000383.756:75836): avc: denied { map } for pid=27179 comm="syz.6.23073" path="pipe:[224986]" dev="pipefs" ino=224986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 900.054342][T27189] netlink: 'syz.2.23077': attribute type 1 has an invalid length. [ 900.077235][T27193] 9pnet_virtio: no channels available for device 127.0.0.1 [ 900.110995][T27189] 8021q: adding VLAN 0 to HW filter on device bond22 [ 900.183827][T27204] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27204 comm=syz.2.23077 [ 900.265634][T27200] team0: entered promiscuous mode [ 900.267958][T27200] team0: entered allmulticast mode [ 900.271368][T27200] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.288040][T27200] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 900.294732][ T103] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 900.300319][ T103] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 900.316987][T27196] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 900.351060][ T103] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 900.357751][T27212] bond5: option mode: unable to set because the bond device has slaves [ 900.603661][T27234] bridge14: entered promiscuous mode [ 900.605851][T27234] bridge14: entered allmulticast mode [ 900.736148][T27248] 8021q: adding VLAN 0 to HW filter on device bond23 [ 900.744771][T27248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27248 comm=syz.2.23100 [ 901.150967][ T6117] libceph: connect (1)[c::]:6789 error -22 [ 901.153804][ T6117] libceph: mon0 (1)[c::]:6789 connect error [ 901.262199][T27260] ceph: No mds server is up or the cluster is laggy [ 901.350878][ T40] audit: type=1326 audit(2000000385.032:75837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27258 comm="syz.1.23103" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe96239c629 code=0x0 [ 901.614537][T27281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=27281 comm=syz.8.23109 [ 901.812533][T27294] 8021q: adding VLAN 0 to HW filter on device bond24 [ 901.880374][T27297] 9pnet_virtio: no channels available for device 127.0.0.1 [ 901.958445][T27301] fuse: Unknown parameter 'grou‹_id' [ 902.041914][T27307] xfrm0 speed is unknown, defaulting to 1000 [ 902.157406][T27307] lo speed is unknown, defaulting to 1000 [ 902.587739][T27341] bond0: Caught tx_queue_len zero misconfig [ 903.039625][T27378] 8021q: adding VLAN 0 to HW filter on device bond25 [ 903.051679][T27378] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27378 comm=syz.8.23150 [ 903.169131][T27399] bond2: option mode: unable to set because the bond device has slaves [ 903.174959][T27381] could not allocate digest TFM handle cryptd(blake2b-160) [ 903.180877][T27399] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 903.223063][T27403] __nla_validate_parse: 12 callbacks suppressed [ 903.223082][T27403] netlink: 700 bytes leftover after parsing attributes in process `syz.1.23157'. [ 903.242805][T27404] xt_limit: Overflow, try lower: 271964/0 [ 903.273929][T27403] xt_limit: Overflow, try lower: 271964/0 [ 903.369973][T27408] No source specified [ 903.396944][T27415] netlink: 36 bytes leftover after parsing attributes in process `syz.6.23160'. [ 903.443785][T27421] overlayfs: failed to clone upperpath [ 903.446555][T27421] overlayfs: failed to clone lowerpath [ 903.492631][T27430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23167'. [ 903.578445][T27443] netlink: 24 bytes leftover after parsing attributes in process `syz.6.23172'. [ 903.707566][T27458] bond2: option mode: unable to set because the bond device has slaves [ 903.718617][T27458] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 903.826530][T27467] tmpfs: Unknown parameter '01777777777777777777777' [ 903.883259][T27473] netlink: 24 bytes leftover after parsing attributes in process `syz.6.23184'. [ 904.201652][T27498] bridge0: port 3(ipvlan3) entered blocking state [ 904.203889][T27498] bridge0: port 3(ipvlan3) entered disabled state [ 904.206398][T27498] ipvlan3: entered allmulticast mode [ 904.208254][T27498] bridge0: entered allmulticast mode [ 904.212154][T27498] ipvlan3: left allmulticast mode [ 904.213957][T27498] bridge0: left allmulticast mode [ 904.366228][T27515] openvswitch: netlink: EtherType 50a is less than min 600 [ 904.535471][T27534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40472 sclass=netlink_route_socket pid=27534 comm=syz.6.23209 [ 904.567605][T27538] validate_nla: 15 callbacks suppressed [ 904.567617][T27538] netlink: 'syz.6.23211': attribute type 1 has an invalid length. [ 904.587321][T27538] 8021q: adding VLAN 0 to HW filter on device bond17 [ 904.598244][T27538] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27538 comm=syz.6.23211 [ 904.781532][T27555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23219'. [ 904.787072][ T40] audit: type=1326 audit(2000000388.250:75838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27556 comm="syz.6.23220" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ffb19c629 code=0x0 [ 904.791633][T27555] netlink: 700 bytes leftover after parsing attributes in process `syz.2.23219'. [ 904.812188][T27559] netlink: 'syz.1.23221': attribute type 21 has an invalid length. [ 904.815741][T27559] netlink: 408 bytes leftover after parsing attributes in process `syz.1.23221'. [ 904.863186][T27564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23222'. [ 904.916831][T27564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23222'. [ 904.920917][T27564] nbd: device at index 64 is going down [ 904.953476][T27572] netlink: 'syz.2.23225': attribute type 39 has an invalid length. [ 904.965533][ T40] audit: type=1400 audit(2000000388.419:75839): avc: denied { listen } for pid=27571 comm="syz.2.23225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 905.001605][T27576] team0: left promiscuous mode [ 905.003699][T27576] team0: left allmulticast mode [ 905.041394][T27569] udevd[27569]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 905.049940][T27263] udevd[27263]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 905.304310][T27598] bond2: option mode: unable to set because the bond device has slaves [ 905.319870][T27598] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 905.442042][T27603] xfrm0 speed is unknown, defaulting to 1000 [ 905.552911][T27603] lo speed is unknown, defaulting to 1000 [ 905.792789][T27631] 8021q: adding VLAN 0 to HW filter on device bond18 [ 905.813995][T27631] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 905.834181][T27631] bond18: (slave macvlan2): Enslaving as a backup interface with an up link [ 905.917991][ T12] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 905.930076][ T12] bond18: (slave macvlan2): link status up again after 0 ms [ 905.933513][ T12] bond18: (slave macvlan2): failed to get link speed/duplex [ 906.043171][ T103] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 906.070649][ T103] bond18: (slave macvlan2): failed to get link speed/duplex [ 906.183249][ T103] bond18: (slave macvlan2): failed to get link speed/duplex [ 906.197125][T27672] bond5: option mode: unable to set because the bond device has slaves [ 906.313558][ T103] bond18: (slave macvlan2): failed to get link speed/duplex [ 906.335219][T27691] 9pnet_virtio: no channels available for device 127.0.0.1 [ 906.373429][T27695] bridge0: port 1(ipvlan3) entered blocking state [ 906.384983][T27695] bridge0: port 1(ipvlan3) entered disabled state [ 906.387671][T27695] ipvlan3: entered allmulticast mode [ 906.389782][T27695] bridge0: entered allmulticast mode [ 906.393744][T27695] ipvlan3: left allmulticast mode [ 906.397607][T27695] bridge0: left allmulticast mode [ 906.428735][ T103] bond18: (slave macvlan2): failed to get link speed/duplex [ 906.486197][T27699] openvswitch: netlink: Flow actions attr not present in new flow. [ 906.649874][T27719] tmpfs: Unknown parameter 'usrquotaiãpÖvÞÞ¬×1®_/zÊ/Òm#¥ZuYL ìùF' [ 906.723831][T27726] netlink: 'syz.1.23283': attribute type 1 has an invalid length. [ 907.002754][T27747] tmpfs: Bad value for 'mpol' [ 907.059716][T27748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=27748 comm=syz.1.23291 [ 907.194572][T27752] netlink: 'syz.6.23293': attribute type 33 has an invalid length. [ 907.209410][T27752] fuse: Bad value for 'rootmode' [ 907.297362][T27761] netlink: 'syz.6.23296': attribute type 1 has an invalid length. [ 907.308440][T27764] netlink: 'syz.2.23297': attribute type 16 has an invalid length. [ 907.311088][T27764] netlink: 'syz.2.23297': attribute type 17 has an invalid length. [ 907.349293][T27761] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address [ 907.358879][T27761] bond19: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 907.365610][T27761] bond19: (slave vxcan1): making interface the new active one [ 907.368567][T27761] bond19: (slave vxcan1): Enslaving as an active interface with an up link [ 907.614735][T27781] bridge0: port 1(ipvlan3) entered blocking state [ 907.617771][T27781] bridge0: port 1(ipvlan3) entered disabled state [ 907.620838][T27781] ipvlan3: entered allmulticast mode [ 907.623036][T27781] bridge0: entered allmulticast mode [ 907.627204][T27781] ipvlan3: left allmulticast mode [ 907.629319][T27781] bridge0: left allmulticast mode [ 907.793143][T27794] netlink: 'syz.6.23311': attribute type 16 has an invalid length. [ 907.795730][T27794] netlink: 'syz.6.23311': attribute type 17 has an invalid length. [ 907.893181][T27810] bridge0: port 1(ipvlan3) entered blocking state [ 907.896009][T27810] bridge0: port 1(ipvlan3) entered disabled state [ 907.898858][T27810] ipvlan3: entered allmulticast mode [ 907.900993][T27810] bridge0: entered allmulticast mode [ 907.904521][T27810] ipvlan3: left allmulticast mode [ 907.906373][T27810] bridge0: left allmulticast mode [ 908.018665][T27824] xfrm0 speed is unknown, defaulting to 1000 [ 908.200310][T27824] lo speed is unknown, defaulting to 1000 [ 908.659648][T27888] xfrm0 speed is unknown, defaulting to 1000 [ 908.883741][T27888] lo speed is unknown, defaulting to 1000 [ 908.937730][T27916] __nla_validate_parse: 21 callbacks suppressed [ 908.937744][T27916] netlink: 500 bytes leftover after parsing attributes in process `syz.2.23355'. [ 909.030296][T27930] bond5: option mode: unable to set because the bond device has slaves [ 909.143176][T27937] bridge0: port 1(ipvlan3) entered blocking state [ 909.146453][T27937] bridge0: port 1(ipvlan3) entered disabled state [ 909.149058][T27937] ipvlan3: entered allmulticast mode [ 909.150978][T27937] bridge0: entered allmulticast mode [ 909.154427][T27937] ipvlan3: left allmulticast mode [ 909.156487][T27937] bridge0: left allmulticast mode [ 909.694888][T27982] overlayfs: failed to clone lowerpath [ 909.785897][T27990] tipc: Enabled bearer , priority 10 [ 909.996037][T28012] validate_nla: 4 callbacks suppressed [ 909.996051][T28012] netlink: 'syz.6.23392': attribute type 16 has an invalid length. [ 910.003242][T28012] netlink: 'syz.6.23392': attribute type 17 has an invalid length. [ 910.161225][T28031] netlink: 24 bytes leftover after parsing attributes in process `syz.8.23401'. [ 910.179037][T28035] net_ratelimit: 24 callbacks suppressed [ 910.179055][T28035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 910.197308][T28034] bond0: Caught tx_queue_len zero misconfig [ 910.249001][T28042] netlink: 'syz.8.23403': attribute type 4 has an invalid length. [ 910.752649][T28091] netlink: 'syz.2.23423': attribute type 9 has an invalid length. [ 910.758797][T28091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23423'. [ 910.764399][T28091] netlink: 'syz.2.23423': attribute type 9 has an invalid length. [ 910.767725][T28091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23423'. [ 910.784920][T28095] netlink: 'syz.6.23424': attribute type 4 has an invalid length. [ 910.862743][T28101] macvlan3: entered promiscuous mode [ 910.900228][T28109] netlink: 'syz.6.23429': attribute type 1 has an invalid length. [ 910.903887][T28108] netlink: 'syz.6.23429': attribute type 1 has an invalid length. [ 911.105109][T28108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23429'. [ 911.111314][T28108] netlink: 'syz.6.23429': attribute type 6 has an invalid length. [ 911.115001][T28108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23429'. [ 911.120197][T28108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23429'. [ 911.124299][T28108] netlink: 'syz.6.23429': attribute type 6 has an invalid length. [ 911.128452][T28108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23429'. [ 911.389927][T28137] netlink: 20 bytes leftover after parsing attributes in process `syz.8.23442'. [ 911.450808][T28141] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 911.619152][T28165] netlink: 28 bytes leftover after parsing attributes in process `syz.8.23453'. [ 911.744894][T28178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28178 comm=syz.8.23459 [ 911.781273][T28180] raw_sendmsg: syz.2.23456 forgot to set AF_INET. Fix it! [ 911.815171][T28188] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28188 comm=syz.2.23462 [ 911.827295][T28188] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=28188 comm=syz.2.23462 [ 912.000853][T28216] overlayfs: failed to clone upperpath [ 912.055055][T28218] 8021q: adding VLAN 0 to HW filter on device bond37 [ 912.077399][T28218] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 912.083527][T28218] bond23: (slave macvlan6): Enslaving as a backup interface with a down link [ 912.175211][T28233] xfrm0 speed is unknown, defaulting to 1000 [ 912.272324][T28239] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 912.278063][ T40] audit: type=1400 audit(2000000395.277:75840): avc: denied { listen } for pid=28235 comm="syz.8.23477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 912.327385][T28233] lo speed is unknown, defaulting to 1000 [ 913.344948][T28300] openvswitch: netlink: IPv6 tunnel dst address is zero [ 913.352279][T28303] openvswitch: netlink: Missing key (keys=40, expected=100) [ 913.728756][T28337] 8021q: adding VLAN 0 to HW filter on device bond26 [ 914.295322][T28376] Invalid source name [ 914.297473][T28376] UBIFS error (pid: 28376): cannot open "./file0", error -22 [ 914.725940][T28421] bond38: entered promiscuous mode [ 914.734259][T28421] 8021q: adding VLAN 0 to HW filter on device bond38 [ 914.746207][T28425] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 914.766955][T28421] 8021q: adding VLAN 0 to HW filter on device bond38 [ 914.769752][T28421] bond38: (slave gre7): The slave device specified does not support setting the MAC address [ 914.774247][T28421] bond38: (slave gre7): Setting fail_over_mac to active for active-backup mode [ 914.783192][T28421] bond38: (slave gre7): making interface the new active one [ 914.786768][T28421] gre7: entered promiscuous mode [ 914.789922][T28421] bond38: (slave gre7): Enslaving as an active interface with an up link [ 914.810695][ T79] ------------[ cut here ]------------ [ 914.814021][ T79] kernel BUG at net/core/skbuff.c:2306! [ 914.821859][ T79] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 914.826902][ T79] CPU: 3 UID: 0 PID: 79 Comm: kworker/u32:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.831933][ T79] Tainted: [L]=SOFTLOCKUP [ 914.833804][ T79] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 914.838280][ T79] Workqueue: bond38 bond_resend_igmp_join_requests_delayed [ 914.842063][ T79] RIP: 0010:pskb_expand_head+0xa08/0xfe0 [ 914.845561][ T79] Code: de 5d af f8 be 01 00 00 00 48 89 df e8 31 ec ff ff e9 ea f9 ff ff e8 c7 5d af f8 90 0f 0b 90 45 31 ed eb 80 e8 b9 5d af f8 90 <0f> 0b e8 b1 5d af f8 90 0f 0b e8 a9 5d af f8 81 cd 00 00 02 00 e9 [ 914.848864][T28432] --map-set only usable from mangle table [ 914.854032][ T79] RSP: 0018:ffffc9000161f500 EFLAGS: 00010293 [ 914.854060][ T79] RAX: 0000000000000000 RBX: ffff88804cb41a40 RCX: ffffffff895938ae [ 914.854070][ T79] RDX: ffff888022a84900 RSI: ffffffff895941e7 RDI: ffff888022a84900 [ 914.854080][ T79] RBP: 0000000000000820 R08: 0000000000000005 R09: 0000000000000000 [ 914.854091][ T79] R10: 00000000961b4ff0 R11: 0000000000000000 R12: ffff88804cb41a40 [ 914.854102][ T79] R13: 00000000961b56b0 R14: dffffc0000000000 R15: 00000000961b4ff0 [ 914.854114][ T79] FS: 0000000000000000(0000) GS:ffff8880d6648000(0000) knlGS:0000000000000000 [ 914.854147][ T79] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 914.883901][ T79] CR2: 00007ffe3cd5fd20 CR3: 000000003961d000 CR4: 0000000000352ef0 [ 914.888440][ T79] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 914.891898][ T79] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 914.895304][ T79] Call Trace: [ 914.896785][ T79] [ 914.898071][ T79] ? __pfx_pskb_expand_head+0x10/0x10 [ 914.900356][ T79] ipgre_header+0xdd/0x540 [ 914.902206][ T79] ? __pfx_ipgre_header+0x10/0x10 [ 914.904504][ T79] neigh_connected_output+0x34d/0x5d0 [ 914.907505][ T79] ip6_finish_output2+0xb0f/0x1ce0 [ 914.909961][ T79] __ip6_finish_output+0x357/0x1080 [ 914.912225][ T79] ip6_output+0x2aa/0xa60 [ 914.914109][ T79] ? __pfx_ip6_output+0x10/0x10 [ 914.916272][ T79] ? __pfx_ip6_finish_output+0x10/0x10 [ 914.918661][ T79] ? NF_HOOK.constprop.0+0x276/0x8b0 [ 914.921003][ T79] ? NF_HOOK.constprop.0+0x276/0x8b0 [ 914.923789][ T79] NF_HOOK.constprop.0+0x114/0x8b0 [ 914.926835][ T79] ? __pfx_NF_HOOK.constprop.0+0x10/0x10 [ 914.929531][ T79] ? __pfx_dst_output+0x10/0x10 [ 914.931661][ T79] mld_sendpack+0x8f7/0xec0 [ 914.933646][ T79] ? __pfx_mld_sendpack+0x10/0x10 [ 914.935910][ T79] mld_send_report+0xd7/0x3c0 [ 914.937957][ T79] ipv6_mc_netdev_event+0x2b8/0x3a0 [ 914.940349][ T79] notifier_call_chain+0x99/0x420 [ 914.942821][ T79] call_netdevice_notifiers_info+0xbe/0x110 [ 914.945922][ T79] call_netdevice_notifiers+0x7c/0xb0 [ 914.948378][ T79] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 914.951039][ T79] bond_resend_igmp_join_requests_delayed+0x5e/0x170 [ 914.953992][ T79] process_one_work+0x9d7/0x1920 [ 914.956314][ T79] ? __pfx_process_one_work+0x10/0x10 [ 914.959203][ T79] ? __pfx_bond_resend_igmp_join_requests_delayed+0x10/0x10 [ 914.962831][ T79] worker_thread+0x5da/0xe40 [ 914.964894][ T79] ? kthread+0x13a/0x450 [ 914.966771][ T79] ? __pfx_worker_thread+0x10/0x10 [ 914.968981][ T79] kthread+0x370/0x450 [ 914.970821][ T79] ? __pfx_kthread+0x10/0x10 [ 914.972980][ T79] ret_from_fork+0x754/0xd80 [ 914.975331][ T79] ? __pfx_ret_from_fork+0x10/0x10 [ 914.977942][ T79] ? __switch_to+0x7b4/0x1120 [ 914.980304][ T79] ? __pfx_kthread+0x10/0x10 [ 914.982406][ T79] ret_from_fork_asm+0x1a/0x30 [ 914.984503][ T79] [ 914.985927][ T79] Modules linked in: [ 914.988355][ T79] ---[ end trace 0000000000000000 ]--- [ 915.001794][ T79] RIP: 0010:pskb_expand_head+0xa08/0xfe0 [ 915.004312][ T79] Code: de 5d af f8 be 01 00 00 00 48 89 df e8 31 ec ff ff e9 ea f9 ff ff e8 c7 5d af f8 90 0f 0b 90 45 31 ed eb 80 e8 b9 5d af f8 90 <0f> 0b e8 b1 5d af f8 90 0f 0b e8 a9 5d af f8 81 cd 00 00 02 00 e9 [ 915.013168][ T79] RSP: 0018:ffffc9000161f500 EFLAGS: 00010293 [ 915.017708][ T79] RAX: 0000000000000000 RBX: ffff88804cb41a40 RCX: ffffffff895938ae [ 915.021301][ T79] RDX: ffff888022a84900 RSI: ffffffff895941e7 RDI: ffff888022a84900 [ 915.024723][ T79] RBP: 0000000000000820 R08: 0000000000000005 R09: 0000000000000000 [ 915.028601][ T79] R10: 00000000961b4ff0 R11: 0000000000000000 R12: ffff88804cb41a40 [ 915.032439][ T79] R13: 00000000961b56b0 R14: dffffc0000000000 R15: 00000000961b4ff0 [ 915.036158][ T79] FS: 0000000000000000(0000) GS:ffff8880d6548000(0000) knlGS:0000000000000000 [ 915.039970][ T79] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 915.042758][ T79] CR2: 00007fd00d94da08 CR3: 0000000035074000 CR4: 0000000000352ef0 [ 915.046568][ T79] Kernel panic - not syncing: Fatal exception [ 915.051053][ T79] Kernel Offset: disabled [ 915.053171][ T79] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:01:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc9000c540000 RCX=000000000000003f RDX=0000000000001000 RSI=0000000000000000 RDI=fffff520018a8000 RBP=0000000000008000 RSP=ffffc90003b37a48 R8 =0000000000000005 R9 =0000000000000000 R10=fffff520018a8000 R11=0000000000000000 R12=ffff88803ad9a480 R13=ffffc90003b37d40 R14=ffff88805bfdd780 R15=00000000003d0f00 RIP=ffffffff8b8f8fb6 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557607e500 ffffffff 00c00000 GS =0000 ffff8880d6348000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555760919e8 CR3=0000000013b2f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=000000000c02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe96314d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff27af21f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff27af21f6 00007fff27af21fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe96243319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9624331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe962433343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9624331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9625eb600 00007fe9625eb5e0 00007fe9625eb5e8 00007fe9625eb618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe96314d020 00007fe9625eb5c0 00007fe9625eb5d0 00007fe9625eb610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9625eb5f8 00007fe9625eb5c8 00007fe9625eb600 00007fe9625eb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000004c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000001440 RBX=ffffc9000169f560 RCX=1ffff1100563b020 RDX=0000000000000000 RSI=0000000000000004 RDI=0000000000000000 RBP=ffffea0005ff9380 RSP=ffffc9000169f460 R8 =0000000000000001 R9 =ffffed100581890c R10=ffff88802c0c4863 R11=0000000000000012 R12=ffff88802b1d8000 R13=ffff888122b599a0 R14=0000000000000034 R15=000000000000008a RIP=ffffffff82811b1c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4dada53300 ffffffff 00c00000 GS =0000 ffff8880d6448000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005590686e0ec8 CR3=00000000361b9000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000afe8 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=702085d560351c59 01733969b6b58974 702085d560351c59 01733969b6b58974 702085d560351c59 01733969b6b58974 702085d560351c59 01733969b6b58974 ZMM18=0b94531fe44e143a 791afccc1b8d233e 0b94531fe44e143a 791afccc1b8d233e 0b94531fe44e143a 791afccc1b8d233e 0b94531fe44e143a 791afccc1b8d233e ZMM19=6c77000000000000 0000000000000004 6c77000000000000 0000000000000003 6c77000000000000 0000000000000002 6c77000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030c820400138c03 0000000204061388 0328080013800313 800401a1800301a1 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800401a2a0030008 0001a290030fffff ffffffff0401a280 0301000000080602 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004040275bc0070 746701ffffffffff fffffff708028003 2008000610002010 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f4ca08001390030c 820400138c030000 0002040613880328 0800138003138004 ZMM25=740c6402740c6402 740c6402740c6402 740c6402740c6402 740c6402740c6402 740c6402740c6402 740c6402740c6402 740c6402740c6402 740c6402740c6402 ZMM26=e1947c08e1947c08 e1947c08e1947c08 e1947c08e1947c08 e1947c08e1947c08 e1947c08e1947c08 e1947c08e1947c08 e1947c08e1947c08 e1947c08e1947c08 ZMM27=4f0138034f013803 4f0138034f013803 4f0138034f013803 4f0138034f013803 4f0138034f013803 4f0138034f013803 4f0138034f013803 4f0138034f013803 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4783000047830000 4783000047830000 4783000047830000 4783000047830000 4783000047830000 4783000047830000 4783000047830000 4783000047830000 info registers vcpu 2 CPU#2 RAX=1ffff1100b19f5ab RBX=0000000000000004 RCX=ffffffff85285572 RDX=ffff888028b44900 RSI=ffffffff8528557f RDI=ffff888058cfad58 RBP=ffff888058cfad50 RSP=ffffc9000de7fa60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff888058cfacf0 R15=dffffc0000000000 RIP=ffffffff852855ba RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555665f8500 ffffffff 00c00000 GS =0000 ffff8880d6548000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd00d9456b8 CR3=0000000035074000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000fcfc0000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7864696f6972702e 6f6972705f74656e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3cd615f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3cd615f6 00007ffe3cd615fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd00cc3319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd00cc331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd00cc33343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd00cc331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8578faf5 RDI=ffffffff9b49d940 RBP=ffffffff9b49d900 RSP=ffffc9000161ee68 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000063 R14=0000000000000010 R15=ffffffff8578fa90 RIP=ffffffff8578fb1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6648000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe3cd5fd20 CR3=000000003961d000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=0000000010000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005639619f6600 00005639619f6600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdd5ef210 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e72656b205d39 37542020205b5d31 32303431382e3431 3920205b203a6c65 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73696d7265702074 656b636f735f6369 72656e65675f6b6e 696c74656e3d7373 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c637420745f6d 64617379733a725f 6d64617379733a74 6f6f723d74786574 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f637420745f6d 64617379733a725f 6d64617379733a74 6f6f723d74786574 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f637320223737 3433322e382e7a79 73223d6d6d6f6320 35333238323d6469 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000