last executing test programs: 35.081299431s ago: executing program 1 (id=176): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'syz2', 0x3a, 'Y$*@', 0x3a, './file0', 0x3a, [0x50, 0x46, 0x46]}, 0x32) 35.081153974s ago: executing program 1 (id=177): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f150000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x2, 0x0, 0x4, 0x0, 0x1, 0x20, 0x5bc}}}}}]}, 0x3c}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x4, 0x2, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) syz_extract_tcp_res$synack(&(0x7f0000000280)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xba, &(0x7f0000000140)=ANY=[@ANYBLOB="aaa2aaaaaaaaba99c659c50828341e000800489600a8006600003d06907801000000000000000107070800000000441c0d330a01010000000003e000000200000067ac1e000100000005018327daffffffffac1414aa00000000ac1e0101027f000001e00000024e204e2400"/118, @ANYRES32=r3, @ANYRES32=0x41424344, @ANYBLOB="21c2006890780002fe08f989042c75d3fe14f989e453d380f7be372886b2e48d666bf449040205060000000204020402fe06e2d4c3d9fe06e2d4c3d9"], 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x4100, 0x0) mkdirat(r4, &(0x7f0000000240)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000002c0)=[@window={0x3, 0x0, 0xfff}, @timestamp, @sack_perm, @timestamp, @window={0x3, 0x3, 0x9}], 0x5) 34.16699515s ago: executing program 1 (id=189): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ec, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0xf34, 0x10008095, 0x0, 0x0) 34.166241138s ago: executing program 1 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa, 0x5}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x20040000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x96}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x30, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v2={0x3, 0x1, 0x8, 0x7}, 0x9, 0x1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x30) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1048c, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 34.100671067s ago: executing program 1 (id=193): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d2", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 33.881173207s ago: executing program 1 (id=199): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="02aa4b6b35b671a20fd5"], 0x8) (async) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x84) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400b03109a8db27e7d42249addddcb5db4677ec340104cebfbf832bb3f356ef291424a10a0c9a66b36cba7ff21553fa23fd41fcef5493b3a26aadab98ba05e39de9fc1fdcf19767def52861502c", @ANYRES16=r5, @ANYBLOB="090300000000000000002a000000"], 0x14}}, 0x0) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x14, r6, 0x72b}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x25, 0x0, @val=@perf_event={0xfffffffffffffe01}}, 0x18) (async) fsetxattr$security_ima(r2, &(0x7f0000000080), &(0x7f00000000c0)=@ng={0x4, 0x4}, 0x2, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="81000000006bfb19"], 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000180)=0x2b1, 0x4) 33.851039566s ago: executing program 32 (id=199): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="02aa4b6b35b671a20fd5"], 0x8) (async) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x84) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400b03109a8db27e7d42249addddcb5db4677ec340104cebfbf832bb3f356ef291424a10a0c9a66b36cba7ff21553fa23fd41fcef5493b3a26aadab98ba05e39de9fc1fdcf19767def52861502c", @ANYRES16=r5, @ANYBLOB="090300000000000000002a000000"], 0x14}}, 0x0) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x14, r6, 0x72b}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x25, 0x0, @val=@perf_event={0xfffffffffffffe01}}, 0x18) (async) fsetxattr$security_ima(r2, &(0x7f0000000080), &(0x7f00000000c0)=@ng={0x4, 0x4}, 0x2, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="81000000006bfb19"], 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000180)=0x2b1, 0x4) 12.136598099s ago: executing program 2 (id=622): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 12.060543592s ago: executing program 2 (id=623): socket$inet6(0xa, 0x80002, 0x88) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0x7, 0x7}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x3}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) mkdir(&(0x7f0000000140)='./file0\x00', 0xc8) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000200)) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000080)=0x2000004, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) 11.967212614s ago: executing program 2 (id=624): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x1f00000000000000, 0x3a, 'syz2', 0x3a, 'Y$*@', 0x3a, './file0', 0x3a, [0x50, 0x46, 0x46]}, 0x32) 11.966857384s ago: executing program 2 (id=626): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1014d9, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 11.939275751s ago: executing program 2 (id=628): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8990, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x52, @empty, @mcast1, 0x0, 0x8000, 0x101}}) 11.620051335s ago: executing program 2 (id=638): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 11.569273563s ago: executing program 33 (id=638): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 11.359538269s ago: executing program 4 (id=644): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)={0x5, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}, {0x1, 0x98, &(0x7f0000000580)=""/152}, {0x8080000, 0x5d, &(0x7f0000000ac0)=""/93}, {0x1, 0x5c, &(0x7f0000000b40)=""/92}, {0x1, 0x55, &(0x7f0000000bc0)=""/85}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) 11.29051941s ago: executing program 4 (id=645): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x40, 0x0, 0x0, 0xb, 0xa, "760304b0b53e337b6de4440300ef0000008e28"}) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f00000000c0)=0x2, 0xfffffffd) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x4) 11.290266745s ago: executing program 4 (id=646): r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x600002, 0x44, 0x4}, 0x18) r2 = syz_open_dev$mouse(&(0x7f0000000400), 0x10, 0x18000) renameat2(r1, &(0x7f00000003c0)='./file0\x00', r2, &(0x7f0000000440)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd37\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010058a67000fedbdf250800000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x8840) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040083}, 0x4) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r4, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 11.187968361s ago: executing program 4 (id=647): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x275a, 0x0) readahead(r0, 0x0, 0xffffffffffffff01) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) setreuid(0x0, 0xee00) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r2, 0x9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) inotify_init() r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f00000000c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0xd2bb, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000780)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd_index=0x2, 0xcab, 0x0, 0x1000, 0x1}) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, r9, 0x0, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0x146) read$FUSE(r1, &(0x7f0000006400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}], [{@euid_gt={'euid>', r10}}, {@fowner_gt={'fowner>', r11}}, {@obj_role={'obj_role', 0x3d, 'user_id'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x63, 0x37, 0x39, 0x65, 0xc9d5fe13f9de3821, 0x61, 0x31], 0x2d, [0x66, 0x5b, 0x32, 0x69d6f7c78aac445e], 0x2d, [0x66, 0x31, 0x39, 0x30], 0x2d, [0x30, 0x65, 0x63, 0x1], 0x2d, [0x34, 0x34, 0x66, 0x62, 0x35, 0x35, 0x65, 0x65]}}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise}]}}) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.140904575s ago: executing program 4 (id=649): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x901891cbff212725, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="00010900000000000000030000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x90) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e07090908"], 0xa) 10.909017938s ago: executing program 4 (id=650): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.862224106s ago: executing program 34 (id=650): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.553489779s ago: executing program 5 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1014d9, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 7.460814932s ago: executing program 5 (id=675): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0xeffd}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.179428958s ago: executing program 5 (id=689): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'tunl0\x00', 0x1}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') io_uring_enter(r1, 0x6871, 0x70f7, 0x44, &(0x7f0000000080)={[0x2]}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004c88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d"], 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.117708848s ago: executing program 35 (id=689): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'tunl0\x00', 0x1}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') io_uring_enter(r1, 0x6871, 0x70f7, 0x44, &(0x7f0000000080)={[0x2]}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004c88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d"], 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.500001233s ago: executing program 6 (id=719): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mount$9p_virtio(0x0, &(0x7f0000000100)='\x00', 0x0, 0x2020002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.298423096s ago: executing program 6 (id=729): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x11, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}]}}}}}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xd0e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x1c000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x80000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000280)=[@decrefs, @request_death, @increfs_done, @request_death={0x400c630e, 0x2}, @clear_death={0x400c630f, 0x1}, @register_looper], 0x0, 0x0, 0x0}) 4.249946759s ago: executing program 6 (id=731): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) sendto$inet6(r0, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) 4.191121372s ago: executing program 6 (id=733): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1014d9, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 4.190925901s ago: executing program 6 (id=734): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0xfdef}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.589716961s ago: executing program 6 (id=740): r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x600002, 0x44, 0x4}, 0x18) r2 = syz_open_dev$mouse(&(0x7f0000000400), 0x10, 0x18000) renameat2(r1, &(0x7f00000003c0)='./file0\x00', r2, &(0x7f0000000440)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd37\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r9, @ANYBLOB="010058a67000fedbdf250800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x8840) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040083}, 0x4) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r4, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 3.539264017s ago: executing program 36 (id=740): r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x600002, 0x44, 0x4}, 0x18) r2 = syz_open_dev$mouse(&(0x7f0000000400), 0x10, 0x18000) renameat2(r1, &(0x7f00000003c0)='./file0\x00', r2, &(0x7f0000000440)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd37\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r9, @ANYBLOB="010058a67000fedbdf250800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x8840) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040083}, 0x4) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r4, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 1.4691627s ago: executing program 7 (id=771): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a0101010000000089", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.399480956s ago: executing program 7 (id=773): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce07020000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.399100263s ago: executing program 7 (id=775): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r1 = syz_open_dev$radio(&(0x7f00000005c0), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @p_u8=0x0}}) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000080)=0x6e) sendto$unix(r2, &(0x7f0000000200)="12177cc9e11aa54f377dafa87a63d527ceb346f50dbd7fd6c895363031923b126043ef4d6243ebd9e2d896786a77a444f33b088b1b9351aa8b200f5b50eb7c7071c11246fd6dd6c1ccee475e44bbd6a01e0d67f3bb40dea0f864b19426c2f48857cf5afd0e8fcb00b24b50ed8c7628abce9fb1372cb0bdf0062088c27bac7ba606249e6b37bae37f4e07b7c957020d5c51088fc4931c65", 0x97, 0x4008000, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r3 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'ctr(des3_ede)\x00'}, {0x20, 'skcipher\x00'}]}, 0x24) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="560bf69049f63cbab0a679e81176b5df0e8f47f1541a14bdd9b8fe4f0c10057e758b9b0743b795d7594ced917e4165ea686cc89d1de1ae80a2cd128e5829d412f6dbec727d8c545486e673b04037a7455e7b462bb5cc3cb60f38d28b3e7af5c1ceaf52ab9afeaf880c4d2fadd06ef68b2386491d410d23971e830b260a42507ad9f77308ac20b79e0bf2f1189b90fe5a46765ea501e59c8ae58c2429345883b7c1", 0xa1) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/12, 0xc}], 0x1}}], 0x1, 0x0, 0x0) 1.329195418s ago: executing program 7 (id=778): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x1, 0x1}}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='rpm_return_int\x00', r3, 0x0, 0x8}, 0x18) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x72, 0x101301) 1.239920717s ago: executing program 0 (id=786): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 763.708934ms ago: executing program 0 (id=781): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4042}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002340)="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"}, {&(0x7f0000003340)="49f34f9e4610f2f136bc2f9a51fba7b6dc7d3607a06e983c233b9fafc8c0a595dc62fd4824595bca5b8fd60ed59b77d50270731c9c22d9ca31eed864276baf17672b48bef0c6e68476fcc149f921b85e6bde346c8d3786b1d22c90b5be74d9ec4682b241c7d2"}], 0x10000000000000e0, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x100, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000040)={0x10}) socket$kcm(0x10, 0x2, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x20, &(0x7f0000000240)="6f7350de54c92267e8d6c0b626d2393917646639b0bb946d", 0x0, 0x18) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0xfffffffffffffdd9) quotactl$Q_SETINFO(0x0, &(0x7f0000004240)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x40, r9, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_b, @initial, {0x3, 0x5}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x2, 0x0, 0x2}}, 0x33, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x4008000) 760.143551ms ago: executing program 3 (id=782): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a0101010000000089", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 681.136307ms ago: executing program 3 (id=783): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2c8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)={0x3, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}, {0x1, 0x98, &(0x7f0000000580)=""/152}, {0x8080000, 0x5d, &(0x7f0000000ac0)=""/93}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) 680.862398ms ago: executing program 0 (id=784): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0xffa4}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 680.793766ms ago: executing program 3 (id=785): mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000cc0)={[{@mode={'mode', 0x3d, 0x9}}]}) 680.536863ms ago: executing program 0 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x8, 0x7, 0x0, 0x200003f0, 0xb02d], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) keyctl$KEYCTL_WATCH_KEY(0x15, r3, r4, 0xfffffffdffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0900900ffffffffffff08021100000050505050505053000400880031008c18b9096a74882ce0d45a7f0f87e3b8e9000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10) 600.343881ms ago: executing program 3 (id=788): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x1f000000) 600.062446ms ago: executing program 3 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGMASK(r7, 0x80104592, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x3, 0x0) r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$netlink(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)=[{&(0x7f0000006900)={0x1414, 0x31, 0x400, 0x70bd27, 0x25dfdbfc, "", [@nested={0x1008, 0x4d, 0x0, 0x1, [@typed={0x1004, 0xd9, 0x0, 0x0, @binary="a5bb363c2817f52c3aee9882d392a488d6f0919175ffe5d120b7721845a3fdb65419c5aa2f7f7a17810ae3358234ad8e114518035d21500547402181d3e4554bb5dbada2606f5ce3ced980a7b1df2b0297463c325060fa35741af799bc77e4cd6a8c2ae0782f8ebc94fcd3a0eeaf56e3f033738201d552d5619ffe611d534b9efaf7cde56ddfba4e77c65d0c39136924138d2911a5264f94a92b3d1991aa959e9301f6808376786e1f3735dcfcff6b6b2644980398882fb183efba1fec892251f0662d957cf67a56f6b086c83621cc000ca5ae3fa4dbb2affad8fc3c6cacab97cf8bd8f3d62aebea46bfff788e404f9e8cd2cd2b4b58b1e8b371580dbba2b70583c29a7997c6a66bb477318108d5529a9f8278aae14f447b33ac62d32ed291cac0498f1962822a940157026f8e3f214f0e5bbf0ba7128c8faf15280a943a4c282253e06c5793ce9676702af197dfe9c6e598410182dfd8b9bb8a26310f82bd6e9293fada2a9ac9dd38bee9bc9052dee85ba60ad4b9d61f7423bd635f36c8d8a75104413cb44f0491d0040faabe2b957a4d0e0a0151f3768549583baa244446c46f4cc3a65952dfd147f97a179c118a733bb5d6760ee6bf5ed53baf8be5835562fbd5076c9fb4951b4a13210bdbee51b7a03d17442adba18ff5c4aa611ed928d3852c023fb5138154445a73268bc7117c90b927d396755345d99d38adfb381683852a5fb0b52cc6f2d06caf6cf07f99c2ddcd75a043bc2de79bbcd570bf6e489fda28cfc1538cbdda1a226d9d0c33450a1bd15ea42e82b933c24365014e3f33ab3091b3b116981a90295a9b8cd08fcf5dee599d6ee24e36c1a159f3cdee223e8f821bd46919770b13a8540cfac4b40a935f23256fda0f6cea94aad62e608d08330120513a5433eea17f06f3e694e457eaed6a089f5d05544cd2f185e38f13774b55fab06a71aed7455ecaffed8a5047dd0bac7e1406548854ec3e93368f80def5ff65954ea69da3545aa8db9d3a3b6745956f570841f189f6bb48753e5f268c4caf6e238523e42a195553d1e47487fd3b61af3ea86605a82b7f827404d12166a47d8639ab490fe3727c0f7a35ac67a43dc71e2df839e4dd49e18b8c9bf513d089290a62f196be13239822840c918c6f54448868749c053cb7b2165ed94ab7ca1596f4c535cf1a6dfff3c1bcf3419edec07dfdbcff0ac780ce028267572e8894522089d3353488b9ea39d3dafca340bdde12fac5b6b95ef33ebf0b273acd557ecbdcee3d87f204a36e42961a646e81dc178ec12cf94de0c29db7a7108821e10c793ecdd65f332b9ccabcfce21dc278da5ce397fc334a4a6893cf85fc0f6f47bfd9710586a9afd031c012d5fb23896e69399c0a3a4e25c611c612be08126513e2b94ad7ac0c5746835afbcbf3336af4a1da5ab97074789a69737290fdf529bb4c6d87245597fa45d7ef25fa9a10155c94a15a54fd4892096db8ae2b9a5fb801c9a012ce8accacce00285d0396688946cb71c7404e8ccd384d08e74283a3e5ba60f48147c81e881e5a8012253deaa15b345bcebec85baa225f479d2c6fb82c582164eaddae722cd1b9513bb1ef58d6c84a721f962916f2627054a60f449a6aebdf9706e2bc194276380d602da9336d12609a9c3b936c09ac3766b1a79868a4a12d0da8427342916771ecf75234e117f03efbd2db3bb8ad69ed3e23afcad14001085c77b80116aa555d10e7dc7fc0c47ada1efd967561b81bbac56ae8045bb191a16a5aee448e82146790cc05a49df6bcfdd02352760911ac92554c81ae8247e140f7d40b24e12250dfc83d727e87467098571905385ceb8399c32eb8302991f3529407efa3a3e5355dc8618ac9d49a1f475f0f6ad7ccbe36c5bb71d242f58f16937adfeac57271f751a25cb826f82ae3f5c1a4bfef2e23304ad903872a0f0c0800b2e1086a116a8d95dc5618611b1fd195e98218d5e757091a9bdcc84de46ba652747d8288c0d5058508772b1bd627d94024206f56591f7e2eea24bf07f3eb3828f78f6170628677ac2b276e9bd9078362ab0b65417d091236736f5faa626aac425f84a511704166532611feac6d11fddf1b573d6eba749e941d1c0f164c164245b70c3b1d67655c8afc5c844d72dd8ea9302b86e7916f45b21f38dd8dc57e03363b9df9b2aa35ad764f522f9f71fb213e238ed13e6e2c8ae3af4e3a81edcf054a095ca0afe82c1d44ab992adcb998fa2def9e423ec969f7fb6f876a9c2ee87dd89136bb762e124191c1866406acea30f1ed344f5f3e0cdb6bc33359ae4fb377507de5fa56ea74fb206fd49d973f6ca0aa5a06df51fc1bd8464307f0771a1ce871a7b70ce482b65731779e7330d72b371719b4cb0f55f8220e6d4aface009087cec16ce88dde7879ff411062aaa94f2093f6b557bd1a85e5be49579626c83129e74d88b9d86d4fc36371255eb7802bb51f62f5aebc03d2b1bbfa3555991659f195e5fd1457b131adabf54bc542845f77dde2f2a0a727149dc23ca4f4edf2140a9b51729ec978f9e131aa716cbfa5b6bdfe0917d9b25f1322eb9aff1d00df72037eb6db90e7e9c4899bcb8bcdfa4668aa23479fd1016704e7e2ae949d858e4b396587dde3d0c1ddd188c8752b0893ebe64efce4adc588daa497dd4235e64d8e2a28c5f95931818feca4a935b1e1f4c04bce6a821e56426d0ebe4f2804c72933be35b14aaa82363179a0a7ced0c5123a634781128fd8a2b87c13a24ae069bfeebeb2f7047a3e814d4ac56a2671f2f9e3854873805b17b10fc25302c83a71b6b24fd275ff1f6927a81ac11561b8b24599c7126a655da12f77695f4039724323277d299ce57d6e920958b93225502bc0f09916b555536d76305f97d0b452b92ebc876e6c4363022d9ec0c8eaaa40cef47577b5a6b7b31cd38b3054a1091ccf2952f91d82af2949f4c66648fd99ab8b12dd511fd6f34a4b5b8758a7b8daa21a1088ad613082bd3966c48ee43f33e210631cf46a900ec47540068ff0c0a603f186962122ebf59657fa3651f3ea0ce2a6e26fcc4eb69737c75e0c739cf2e3b79fb1fa0a552b0a32068360b1ba577904be5f2461aed3f48973ec2e2de927126affad9013f57e3d88beebe44a3d9907508d53f0dface64763b94b5db90df8c4d5c1a67134022e6dd7468bac3032279f607add565ca9d954501c84ffee5ec905d9d2ce2d0b6fca7649df5787a9e1feb36a4a6f5b3f96dd68f5d367b417c5042df451bc47bf5a829ee232e6ef30a1a8325efc084e4f7e24c3017e87135d091f81d009001e5dc43e608f216b97eea27a00c19cfade715b12306b2d1ba581617e5332c1e40372371cea4afc7c08334df27d1d267a88669054d029e54e0487ca893421d5246eb846dc2fd83d6f213739622d65a9a744942a3ac5a8f56b1c22ecf2080dc118e6ed8229477e218ce8a83e27c0defd075b1d52f5fd0b9a0a6b43604ff5ff92099989e98bb7c54a50beb6f55e531afdeb94de0fd92c0211998f7c2780ceee9d1b7e18a5a53f78e44937016243a9a6ca81f23f9e854cc31ab49a6b805a2b6789ae9c8c0ef383d7874dfea0962c9acbec0c32758c81594fec98d39a4c2bdf1c29382e0d369a58a67621b17981ec751fee35429032dbdeb69442a8423369e2a414ae5720c47e442d2826a2d4726bd83315a3c730c7299b01be98d5f62edced43e4c478080e41909ffd36735fb486cf7ff2b27e1a288c7058c12cdba0030245364be202f6d2d4b8d357840ecc7274c902164b9b235ffd904babc89f76d9427efc8efba06217d9630e9cbcd2651f859e931f9e6905c4767492daa9e58f6019c9daef86b5bc4ed5b237725e984f8294310562affd031af7502d0550e0af779b6245a1930db6ca056f84fd47ea8367346275d00ce8cccf3cdd07d6f1bcd4f346fb4957c48c476ba9b753477b6654c3f95feac6ad0f4a5f027cf7c4b67ae7c8a99799797d1f28f4c90a173ad1e21134537c6c701a17daf37dfd12f1d3dabf7246c237c65f6945be9fb324424173da6ad3c95d826b0b01fa19cf60b12815019e7845ab0243ae36fb3e737b594542b6f4e24637b23f030ee676366406b24d3963e17b203b3a71d89dc76fa33eb05d7d493661413f9a32801b96d5365b6ae117ecf444d30234a86062bf8cb1b742b741f0d9031bf76d6dfc744745902a423d33e473b860782311a121aec1700ee3dc3282de36f05477ec45111eff978576e663d8b6b5062ad06743df49cf8e9c26881911a4010bece62837f08fad65ef1a6ad7766f42248db6fa6af616baff93be99fbfcb424f850b2e2df3c68b5515eb2bec6a3b8f9f2f35f37f8d617c7c748826c70461bc394850d5b2f0120cc1bb1ca4d0a9103421988ef32bc8033f6e25b29d43d021cec8cb9b89f08cb0a63ced9dcacf335963a530b1ff719f47df056aeafc9ac2d384331b835b83ab8558d5f142de08ee2d4ff706fe04c39a93e1dac86b82ccf26d90169567dcaa4b47c7d03e6e7f390e62cdb75f096bbf6ff5fc3fe5cfd3f5483c5285976ca657089fec14b4a8c39e61edd1ce8df6f757b3d05e643c79ea1f2bab3f2ab12f63e392d9107829dea84e035c71482d2566ebe19c9f2561b934358d7a2b9cb52c6f4c74170957b563c9d615c90a190078d483f11549e4a21c1808a5d140362c3f7bcbee16ba894a8784efa14c68e137e056f30b4ef9f28b0f602405ad5bd5ba1f16351f02644cd172831e40ca860642892c4263471a4c9639c4db43ff478132671bc01f85e3acdd417fec883fd65435045ff0ab1825eab493f306fed948000001a69571b7174b50c29979155c4d2bdaed85dac04c26dc730f63e14e25e40708a86bb40b7a7500e7f61779f15e810c7c8bfc3884368a0bf4459c15e63af895de1fb97b510cec0752672feddccc8702a9d240160aefc791a918d432ec86414cf28e27e5bf2746aedf614d704d435d32ee584cfdb009d354533fa67cd179609531c04d78955efff4dc1fdab304d1b76bbfffa265687cd214cbe0e7e8d3b60ac99fd748abd8757e5c88c5ff464fd15747c85d498dd6da2dbb77885abd0d84ab6e38a6b4b804fb386249f975adbf710dce82c0935439ac0b5e1f3a04243880db44d4a51c9b4b6e1d693e3cd73c424811806ca20dcb218b35dce8b6e12fa7ca7f6b5f533243b7267d4bc5d0706d428e686746038123f6fe338bd37799addac195957ca0a075fcdd0de1e917e01d0172578c95fbd433b73ad8aab38549e7abb0175ca7f67c88e93a7377a9cf14df6f49d03947cd9158c3201256f25ef1f2c1610fa2960565fb9b63c5c8e47711c2602c8d483b0741c279a0f20f0a523e4feded59f29acb02884577ea01b2c268a4ef9f20cfaead7fbd7e919ed5c4b00512ef57575ec86656baf5548196cd9f8f49c6b58488b0873f0c8c26e9bac662d52af17efc08772c30ec66f742578a1fc66e197edcd883af82a654a410aa2b8e2f0317db0db2eae21d076b3303b0b1e91019ed32a9dbbdb9390db09542cf8556357d0d827e3dbfd86dfbd1dc1480647da6826c00bbb75bb6464d92a128f85b35f4860a9e6422765c3890366b4b050e5695da6860d7e81e98e313bd0719941badf3240c48f389e3a1bbf3c9aad7a5ec3361d21782044c50f7e727a11f15280b9cc613a8b749d03afe63130fda7b63198bc8075f1e8cea901bd02637c23048c848686ff8543385f0a6bb5d3cfeb1ea0511cc2f9e6ee9c68e96f396cecf83de574ee84edfe8250edf5818d0ba5aa8e13cf49de1ef7669f121187c519accf"}]}, @nested={0x17b, 0xbf, 0x0, 0x1, [@nested={0x4, 0x10}, @generic="0f63a4ba587309c97d77a140e98d11827f54498fcba063123d4df46cdb29d4785844d57cfa1a9c1e3cfe80c39b3065501833ee1db8574ac854e64da369af96644d60f978c08bf2aa407177ef45e006e5b48db1362e1c0d3b407185ce6f319b0724c31b95a4f027ace6b43a5ac9d2b343e71da7057d0e2ea357c1dc9602bf16ced7eff77c06ccd6319ac96ed63af934bae4e1e5adb088bfa1892011e8fe3bc2", @typed={0xc, 0x3a, 0x0, 0x0, @u64=0x3}, @typed={0x4, 0xbc}, @nested={0x4, 0x4d}, @generic="1cd0b2fdcc132372d9d7c1e5798b0117cdc70a0ec00cca19b303ee76f52ff18f006870417b55085dab1b15432886d503d7e58baf6af25c1e00b4a53d10fb8414ca5634c6f68d04bfe77ffd57c270839b2bc188e96c9841a6daccf29108b2c2e0f2409484cda05d4256f20e388a95470ccc0f212d1386ce9a84e5a9f9df44a7d4162dbd5cd3c185711abcf1d4422d3e00293e0a6c2ff69754ee110c3eb8f04cb47c900211ba54fe27b335f1c6801152f6355c638f4c3c499f", @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@multicast1}]}, @generic="34fcf2a584e4929f5d0de5f6716b6010d1204a7063394ec2c5c58d55c5864a5709d9203a0ccc2927e545ed41cd9cfc753dc61a2d5d9c47b3db8941d6fbb75a8e12120f9e3f21c89a422c0ebe65a42ba638fc70ee2905c6b4f93b0b67c3fcb270846367ddfd9b91bd6bd3bd9f5995e231a114c86cbe350e439a5f7e5511fd701d769f24fe98ecfe398fa0b3eecbe934d604eb5544c17191ad4f948e1626557524ab11896e52d5f17905ad309c03083b7318cc390abcb77b53df046940e15f5cc317d0deca624de058cccdc0787cdde523856f4be46e288d3bc18ac0798563f452", @generic="ac5d27dd51085a5690d1f84250542ec400d4ee269bac7bc23a5a01f7a4a9bae5ca220f672aedec34e510f889b68b756e6994cac49984119a972d9f886e4b1191d03ed26ae9c9e988a9eb69767103ef8d5b95d69fdc6bcd6294464bab2a199488f7c35f5c5e81b3793952028430bfaddc7e757a1bfd55260ef46c152deb47c11c82d6274189db995042ccb1", @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="eac3e1d8ed68f260b5f49a80b7b4bcb0365cb3d761a4c0f6bb7d76565c8f399bbb0fa1592fda59639aa0407bfe523d62ba810339faae2351b641520f0d949d060249f7c65ee214010027cb63df2da4141fc25ac438645ce27b48df", @generic="ea16242d22011f5f30e6e42cfb4e8d4f6771d5d6fbb4d227eb5089dec30b0ca1fd47c9bf0190d5dee7a19d88ff8d9f393c2587c0aeb9572bb47b8acea2ad69be09cf05b30732eb1cb095ac0402de84bb626dfb843d87d19f9f68388400e051cb32026cb709ac33a02c112996132eae57e8fc326d4bb13715e3b82db15260620719780b3b1d7f5fcd25fe0b923280bb25e9064e68ef15c81708", @typed={0xc, 0x3c, 0x0, 0x0, @str='gretap0\x00'}]}, 0x1414}], 0x1, &(0x7f0000000380)=[@rights={{0x2c, 0x1, 0x1, [r6, r3, r7, r2, r5, r8, r9]}}], 0x30, 0x80}, 0x4000) syz_fuse_handle_req(r3, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x78, 0x0, 0x0, {0xcdce, 0x6, 0x0, {0x3, 0x0, 0x1000, 0x1, 0x5, 0x6, 0x80000000, 0xb, 0x1, 0x8000, 0x10000005, 0x0, 0x0, 0x300, 0x23}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r5, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb100c117080086dd4803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xb}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3ff}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x44}}, 0x4804) 599.082755ms ago: executing program 0 (id=790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 519.029279ms ago: executing program 0 (id=791): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x8, 0x3, 0x14a8, 0x1410, 0x11, 0x148, 0x0, 0x0, 0x1410, 0x2a8, 0x2a8, 0x1410, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x12d0, 0x1318, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x7ff, {0x4}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x7]}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1508) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock2(&(0x7f0000338000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000001c0)) 518.664104ms ago: executing program 3 (id=792): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071121900000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000440)={'netdevsim0\x00', &(0x7f0000000300)=@ethtool_ringparam={0x10, 0xfd, 0x3, 0x80000001, 0x0, 0x6, 0x1d78, 0x4, 0xffff}}) 291.317µs ago: executing program 7 (id=793): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, &(0x7f0000000000)="8832b2e8ca05307c37fe24b4558886869e9cd19316548cdb446276e63d278cffea7c2d775e5bbe19b4e330195fa1f842232d16cebaf3535d", 0x38, 0x80, &(0x7f0000000380)=@in6={0xa, 0x4e23, 0xe0000, @mcast2, 0x8}, 0x80) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 0s ago: executing program 7 (id=794): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x802, &(0x7f0000000140)={[{@pids_localevents}, {@subsystem='memory'}], [{@smackfsdef={'smackfsdef', 0x3d, 'workdir'}}, {@smackfsdef={'smackfsdef', 0x3d, 'mountinfo\x00'}}, {@audit}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0004, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1048c, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 0 audit(1746375992.610:207): avc: denied { create } for pid=6100 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.368733][ T40] audit: type=1400 audit(1746375992.610:208): avc: denied { write } for pid=6100 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.376624][ T6101] relay: one or more items not logged [item size (56) > sub-buffer size (13)] [ 57.444196][ T6106] syzkaller0: entered promiscuous mode [ 57.447150][ T6106] syzkaller0: entered allmulticast mode [ 57.467356][ T40] audit: type=1400 audit(1746375992.720:209): avc: denied { unlink } for pid=5925 comm="syz-executor" name="file0" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.596050][ T40] audit: type=1400 audit(1746375992.850:210): avc: denied { read } for pid=6112 comm="syz.1.42" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.597332][ T6113] program syz.1.42 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.604142][ T40] audit: type=1400 audit(1746375992.850:211): avc: denied { open } for pid=6112 comm="syz.1.42" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.863681][ T6125] ip6gre0: entered promiscuous mode [ 57.865923][ T6125] ip6gre0: entered allmulticast mode [ 57.895310][ T5969] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.957851][ T40] audit: type=1400 audit(1746375993.210:212): avc: denied { name_bind } for pid=6131 comm="syz.2.49" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 58.045803][ T5969] usb 8-1: config 0 has no interfaces? [ 58.047588][ T5969] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 58.050504][ T5969] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.055924][ T5969] usb 8-1: config 0 descriptor?? [ 58.082469][ T6136] FAULT_INJECTION: forcing a failure. [ 58.082469][ T6136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.087442][ T6136] CPU: 0 UID: 0 PID: 6136 Comm: syz.0.51 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 58.087468][ T6136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.087479][ T6136] Call Trace: [ 58.087486][ T6136] [ 58.087494][ T6136] dump_stack_lvl+0x16c/0x1f0 [ 58.087522][ T6136] should_fail_ex+0x512/0x640 [ 58.087546][ T6136] __fpu_restore_sig+0xf2/0x13a0 [ 58.087576][ T6136] ? __lock_acquire+0xaa4/0x1ba0 [ 58.087609][ T6136] ? __pfx___fpu_restore_sig+0x10/0x10 [ 58.087650][ T6136] ? __might_fault+0xe3/0x190 [ 58.087666][ T6136] ? __might_fault+0x13b/0x190 [ 58.087685][ T6136] fpu__restore_sig+0x115/0x190 [ 58.087711][ T6136] restore_sigcontext+0x4c9/0x6a0 [ 58.087737][ T6136] ? __pfx_restore_sigcontext+0x10/0x10 [ 58.087778][ T6136] ? __pfx_restore_altstack+0x10/0x10 [ 58.087807][ T6136] ? _raw_spin_unlock_irq+0x23/0x50 [ 58.087828][ T6136] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.087854][ T6136] __do_sys_rt_sigreturn+0x1bb/0x230 [ 58.087879][ T6136] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 58.087911][ T6136] do_syscall_64+0xcd/0x260 [ 58.087934][ T6136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.087952][ T6136] RIP: 0033:0x7fb25278e969 [ 58.087968][ T6136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.087986][ T6136] RSP: 002b:00007fb253537038 EFLAGS: 00000246 [ 58.087999][ T6136] RAX: 0000000000000000 RBX: 00007fb2529b5fa0 RCX: 00007fb25278e969 [ 58.088010][ T6136] RDX: 00002000000002c0 RSI: 0000000000000021 RDI: 0000000000000015 [ 58.088020][ T6136] RBP: 00007fb253537090 R08: 0000000000000000 R09: 0000000000000000 [ 58.088031][ T6136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.088040][ T6136] R13: 0000000000000000 R14: 00007fb2529b5fa0 R15: 00007ffdb15e4748 [ 58.088062][ T6136] [ 58.188690][ T6138] FAULT_INJECTION: forcing a failure. [ 58.188690][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 58.193064][ T6138] CPU: 3 UID: 0 PID: 6138 Comm: syz.0.52 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 58.193084][ T6138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.193093][ T6138] Call Trace: [ 58.193099][ T6138] [ 58.193104][ T6138] dump_stack_lvl+0x16c/0x1f0 [ 58.193126][ T6138] should_fail_ex+0x512/0x640 [ 58.193145][ T6138] ? fs_reclaim_acquire+0xae/0x150 [ 58.193163][ T6138] ? tomoyo_encode2+0x100/0x3e0 [ 58.193181][ T6138] should_failslab+0xc2/0x120 [ 58.193195][ T6138] __kmalloc_noprof+0xd2/0x510 [ 58.193222][ T6138] tomoyo_encode2+0x100/0x3e0 [ 58.193242][ T6138] tomoyo_encode+0x29/0x50 [ 58.193260][ T6138] tomoyo_realpath_from_path+0x18f/0x6e0 [ 58.193284][ T6138] ? tomoyo_profile+0x47/0x60 [ 58.193307][ T6138] tomoyo_path_number_perm+0x245/0x580 [ 58.193322][ T6138] ? tomoyo_path_number_perm+0x237/0x580 [ 58.193340][ T6138] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 58.193357][ T6138] ? find_held_lock+0x2b/0x80 [ 58.193392][ T6138] ? find_held_lock+0x2b/0x80 [ 58.193406][ T6138] ? hook_file_ioctl_common+0x145/0x410 [ 58.193424][ T6138] ? __fget_files+0x20e/0x3c0 [ 58.193447][ T6138] security_file_ioctl+0x9b/0x240 [ 58.193467][ T6138] __x64_sys_ioctl+0xb7/0x200 [ 58.193486][ T6138] do_syscall_64+0xcd/0x260 [ 58.193505][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.193519][ T6138] RIP: 0033:0x7fb25278e969 [ 58.193531][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.193544][ T6138] RSP: 002b:00007fb253537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.193557][ T6138] RAX: ffffffffffffffda RBX: 00007fb2529b5fa0 RCX: 00007fb25278e969 [ 58.193566][ T6138] RDX: 0000200000000440 RSI: 0000000000008946 RDI: 0000000000000003 [ 58.193574][ T6138] RBP: 00007fb253537090 R08: 0000000000000000 R09: 0000000000000000 [ 58.193582][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.193590][ T6138] R13: 0000000000000000 R14: 00007fb2529b5fa0 R15: 00007ffdb15e4748 [ 58.193610][ T6138] [ 58.193628][ T6138] ERROR: Out of memory at tomoyo_realpath_from_path. [ 58.270281][ T6138] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 58.270334][ T5981] usb 8-1: USB disconnect, device number 2 [ 58.277973][ T40] audit: type=1400 audit(1746375993.530:213): avc: denied { firmware_load } for pid=6137 comm="syz.0.52" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 58.282813][ T6138] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 58.419286][ T40] audit: type=1400 audit(1746375993.670:214): avc: denied { write } for pid=6139 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.425689][ T40] audit: type=1400 audit(1746375993.670:215): avc: denied { connect } for pid=6139 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.432211][ T40] audit: type=1400 audit(1746375993.670:216): avc: denied { name_connect } for pid=6139 comm="syz.1.53" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 58.803192][ T5938] Bluetooth: hci3: command tx timeout [ 58.803199][ T5930] Bluetooth: hci0: command tx timeout [ 58.805788][ T5927] Bluetooth: hci1: command tx timeout [ 58.873103][ T5927] Bluetooth: hci2: command tx timeout [ 58.910728][ T6152] 0f<îÎL: renamed from lo (while UP) [ 58.946476][ T6154] netlink: 448 bytes leftover after parsing attributes in process `syz.2.59'. [ 59.068133][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 59.096232][ T6165] FAULT_INJECTION: forcing a failure. [ 59.096232][ T6165] name failslab, interval 1, probability 0, space 0, times 0 [ 59.100052][ T6165] CPU: 2 UID: 0 PID: 6165 Comm: syz.1.64 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 59.100067][ T6165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.100073][ T6165] Call Trace: [ 59.100077][ T6165] [ 59.100081][ T6165] dump_stack_lvl+0x16c/0x1f0 [ 59.100099][ T6165] should_fail_ex+0x512/0x640 [ 59.100112][ T6165] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 59.100131][ T6165] should_failslab+0xc2/0x120 [ 59.100141][ T6165] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 59.100158][ T6165] ? proc_alloc_inode+0x25/0x200 [ 59.100171][ T6165] ? __pfx_proc_alloc_inode+0x10/0x10 [ 59.100180][ T6165] proc_alloc_inode+0x25/0x200 [ 59.100190][ T6165] alloc_inode+0x61/0x240 [ 59.100202][ T6165] new_inode+0x22/0x1c0 [ 59.100215][ T6165] proc_pid_make_inode+0x22/0x160 [ 59.100226][ T6165] proc_ns_instantiate+0x57/0x100 [ 59.100237][ T6165] proc_ns_dir_lookup+0x1af/0x2f0 [ 59.100248][ T6165] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 59.100257][ T6165] lookup_open.isra.0+0x4d7/0x1580 [ 59.100274][ T6165] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 59.100296][ T6165] ? lookup_fast+0x156/0x610 [ 59.100312][ T6165] path_openat+0x905/0x2d40 [ 59.100332][ T6165] ? __pfx_path_openat+0x10/0x10 [ 59.100368][ T6165] do_filp_open+0x20b/0x470 [ 59.100385][ T6165] ? __pfx_do_filp_open+0x10/0x10 [ 59.100405][ T6165] ? __pfx_kfree_link+0x10/0x10 [ 59.100422][ T6165] ? alloc_fd+0x471/0x7d0 [ 59.100441][ T6165] do_sys_openat2+0x11b/0x1d0 [ 59.100453][ T6165] ? __pfx_do_sys_openat2+0x10/0x10 [ 59.100465][ T6165] ? __fget_files+0x20e/0x3c0 [ 59.100483][ T6165] __x64_sys_openat+0x174/0x210 [ 59.100495][ T6165] ? __pfx___x64_sys_openat+0x10/0x10 [ 59.100506][ T6165] ? ksys_write+0x1b9/0x240 [ 59.100525][ T6165] do_syscall_64+0xcd/0x260 [ 59.100540][ T6165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.100551][ T6165] RIP: 0033:0x7fb919b8d2d0 [ 59.100559][ T6165] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 59.100569][ T6165] RSP: 002b:00007fb91aa32f70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 59.100579][ T6165] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb919b8d2d0 [ 59.100585][ T6165] RDX: 0000000000000000 RSI: 00007fb919c10bc9 RDI: 00000000ffffff9c [ 59.100591][ T6165] RBP: 00007fb919c10bc9 R08: 0000000000000000 R09: 0000000000000000 [ 59.100596][ T6165] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 59.100602][ T6165] R13: 0000000000000001 R14: 00007fb919db5fa0 R15: 00007ffe1dfe7288 [ 59.100614][ T6165] [ 59.235659][ T6173] overlay: ./file1 is not a directory [ 59.570934][ T6193] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.003994][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.154648][ T29] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.158306][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 60.161652][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 60.166321][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.170865][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.175036][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.180170][ T29] usb 7-1: config 0 descriptor?? [ 60.370300][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.88'. [ 60.373201][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 60.513019][ T5969] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.594666][ T29] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 60.602044][ T29] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 60.663048][ T5969] usb 8-1: Using ep0 maxpacket: 8 [ 60.666099][ T5969] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 60.668733][ T5969] usb 8-1: config 0 has no interface number 0 [ 60.670668][ T5969] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 60.674280][ T5969] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 60.677985][ T5969] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 60.681889][ T5969] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 60.687302][ T5969] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 60.690503][ T5969] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.695796][ T5969] usb 8-1: config 0 descriptor?? [ 60.703466][ T5969] ldusb 8-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 60.873095][ T5927] Bluetooth: hci1: command tx timeout [ 60.873551][ T5930] Bluetooth: hci3: command tx timeout [ 60.883069][ T5930] Bluetooth: hci0: command tx timeout [ 60.953058][ T5930] Bluetooth: hci2: command tx timeout [ 60.956764][ T835] usb 8-1: USB disconnect, device number 3 [ 60.962087][ T835] ldusb 8-1:0.55: LD USB Device #1 now disconnected [ 61.578513][ T6259] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 61.582163][ T6259] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 61.861255][ T6272] support for cryptoloop has been removed. Use dm-crypt instead. [ 62.479464][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 62.479523][ T40] audit: type=1400 audit(1746375997.730:267): avc: denied { map } for pid=6278 comm="syz.1.105" path="socket:[12316]" dev="sockfs" ino=12316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 62.670136][ T58] usb 7-1: USB disconnect, device number 2 [ 62.693168][ T6286] batadv_slave_1: entered promiscuous mode [ 62.697490][ T6285] batadv_slave_1: left promiscuous mode [ 62.718389][ T40] audit: type=1400 audit(1746375997.970:268): avc: denied { create } for pid=6288 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.725779][ T40] audit: type=1400 audit(1746375997.970:269): avc: denied { connect } for pid=6288 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.734815][ T40] audit: type=1400 audit(1746375997.970:270): avc: denied { read } for pid=6288 comm="syz.3.109" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.738129][ T6292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.111'. [ 62.750097][ T40] audit: type=1400 audit(1746375997.970:271): avc: denied { open } for pid=6288 comm="syz.3.109" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.767483][ T40] audit: type=1400 audit(1746375998.020:272): avc: denied { read } for pid=6293 comm="syz.2.112" name="file0" dev="9p" ino=35913924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 62.787218][ T6297] netlink: 68 bytes leftover after parsing attributes in process `syz.1.113'. [ 62.802065][ T40] audit: type=1800 audit(1746375998.050:273): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.114" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 62.822989][ T40] audit: type=1400 audit(1746375998.060:274): avc: denied { unlink } for pid=6293 comm="syz.2.112" name="file0" dev="9p" ino=35913924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 62.833737][ T40] audit: type=1400 audit(1746375998.090:275): avc: denied { create } for pid=6296 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.840102][ T40] audit: type=1400 audit(1746375998.090:276): avc: denied { ioctl } for pid=6296 comm="syz.1.113" path="socket:[11484]" dev="sockfs" ino=11484 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.857119][ T6306] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 62.868431][ T6306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.115'. [ 62.871484][ T6306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.115'. [ 62.892769][ T6311] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 62.894868][ T6311] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.899171][ T6311] vhci_hcd vhci_hcd.0: Device attached [ 62.901853][ T6311] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 62.907302][ T6311] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 62.909534][ T6311] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.912279][ T6311] vhci_hcd vhci_hcd.0: Device attached [ 62.916177][ T6311] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 62.918260][ T6311] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.920794][ T6311] vhci_hcd vhci_hcd.0: Device attached [ 62.924723][ T6311] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 62.926956][ T6311] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.929552][ T6311] vhci_hcd vhci_hcd.0: Device attached [ 62.932432][ T6311] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 62.934962][ T6325] binfmt_misc: register: failed to install interpreter file ./file0 [ 62.936244][ T6311] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 62.941422][ T6311] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 62.945946][ T6311] vhci_hcd vhci_hcd.0: port 0 already used [ 62.959776][ T6318] vhci_hcd: connection closed [ 62.959890][ T6320] vhci_hcd: connection closed [ 62.959943][ T6312] vhci_hcd: connection closed [ 62.961771][ T6322] vhci_hcd: connection closed [ 62.963165][ T12] vhci_hcd: stop threads [ 62.968193][ T12] vhci_hcd: release socket [ 62.969733][ T12] vhci_hcd: disconnect device [ 62.971888][ T12] vhci_hcd: stop threads [ 62.974125][ T12] vhci_hcd: release socket [ 62.975501][ T12] vhci_hcd: disconnect device [ 62.979106][ T12] vhci_hcd: stop threads [ 62.980492][ T12] vhci_hcd: release socket [ 62.981932][ T12] vhci_hcd: disconnect device [ 62.985290][ T12] vhci_hcd: stop threads [ 62.986617][ T12] vhci_hcd: release socket [ 62.988043][ T12] vhci_hcd: disconnect device [ 63.163194][ T6349] fuse: Bad value for 'user_id' [ 63.165424][ T6349] fuse: Bad value for 'user_id' [ 63.208615][ T6353] FAULT_INJECTION: forcing a failure. [ 63.208615][ T6353] name failslab, interval 1, probability 0, space 0, times 0 [ 63.212582][ T6353] CPU: 2 UID: 0 PID: 6353 Comm: syz.1.132 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 63.212602][ T6353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.212611][ T6353] Call Trace: [ 63.212616][ T6353] [ 63.212625][ T6353] dump_stack_lvl+0x16c/0x1f0 [ 63.212648][ T6353] should_fail_ex+0x512/0x640 [ 63.212666][ T6353] ? fs_reclaim_acquire+0xae/0x150 [ 63.212684][ T6353] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 63.212705][ T6353] should_failslab+0xc2/0x120 [ 63.212720][ T6353] __kmalloc_noprof+0xd2/0x510 [ 63.212748][ T6353] tomoyo_realpath_from_path+0xc2/0x6e0 [ 63.212769][ T6353] ? tomoyo_profile+0x47/0x60 [ 63.212793][ T6353] tomoyo_path_number_perm+0x245/0x580 [ 63.212809][ T6353] ? tomoyo_path_number_perm+0x237/0x580 [ 63.212848][ T6353] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 63.212869][ T6353] ? find_held_lock+0x2b/0x80 [ 63.212907][ T6353] ? find_held_lock+0x2b/0x80 [ 63.212925][ T6353] ? hook_file_ioctl_common+0x145/0x410 [ 63.212945][ T6353] ? __fget_files+0x20e/0x3c0 [ 63.212974][ T6353] security_file_ioctl+0x9b/0x240 [ 63.212996][ T6353] __x64_sys_ioctl+0xb7/0x200 [ 63.213017][ T6353] do_syscall_64+0xcd/0x260 [ 63.213039][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.213053][ T6353] RIP: 0033:0x7fb919b8e969 [ 63.213063][ T6353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.213072][ T6353] RSP: 002b:00007fb91aa33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.213082][ T6353] RAX: ffffffffffffffda RBX: 00007fb919db5fa0 RCX: 00007fb919b8e969 [ 63.213089][ T6353] RDX: 0000200000000000 RSI: 00000000000089f1 RDI: 0000000000000003 [ 63.213095][ T6353] RBP: 00007fb91aa33090 R08: 0000000000000000 R09: 0000000000000000 [ 63.213101][ T6353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.213106][ T6353] R13: 0000000000000000 R14: 00007fb919db5fa0 R15: 00007ffe1dfe7288 [ 63.213119][ T6353] [ 63.278507][ T6353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 63.360415][ T6365] program syz.1.137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.395529][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 63.770644][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 63.778788][ T6398] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 63.785825][ T6398] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 63.788087][ T6398] overlayfs: failed to set xattr on upper [ 63.789893][ T6398] overlayfs: ...falling back to redirect_dir=nofollow. [ 63.791383][ T6399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.149'. [ 63.792075][ T6398] overlayfs: ...falling back to index=off. [ 63.792089][ T6398] overlayfs: ...falling back to uuid=null. [ 63.887544][ T6402] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 63.890473][ T6402] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.895100][ T6402] vhci_hcd vhci_hcd.0: Device attached [ 63.897590][ T6402] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 63.901345][ T6402] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 63.903701][ T6402] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.907324][ T6402] vhci_hcd vhci_hcd.0: Device attached [ 63.910621][ T6402] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 63.912782][ T6402] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.916033][ T6402] vhci_hcd vhci_hcd.0: Device attached [ 63.919113][ T6402] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 63.921131][ T6402] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.924807][ T6402] vhci_hcd vhci_hcd.0: Device attached [ 63.927070][ T6402] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 63.929991][ T6402] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 63.933350][ T6402] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 63.937005][ T6402] vhci_hcd vhci_hcd.0: port 0 already used [ 63.948550][ T6412] vhci_hcd: connection closed [ 63.948732][ T6409] vhci_hcd: connection closed [ 63.948874][ T6403] vhci_hcd: connection closed [ 63.950510][ T103] vhci_hcd: stop threads [ 63.950953][ T6407] vhci_hcd: connection closed [ 63.955227][ T103] vhci_hcd: release socket [ 63.958789][ T103] vhci_hcd: disconnect device [ 63.960578][ T103] vhci_hcd: stop threads [ 63.961891][ T103] vhci_hcd: release socket [ 63.963389][ T103] vhci_hcd: disconnect device [ 63.965032][ T103] vhci_hcd: stop threads [ 63.966296][ T103] vhci_hcd: release socket [ 63.967658][ T103] vhci_hcd: disconnect device [ 63.969203][ T103] vhci_hcd: stop threads [ 63.970507][ T103] vhci_hcd: release socket [ 63.971825][ T103] vhci_hcd: disconnect device [ 64.292514][ T6436] netlink: 448 bytes leftover after parsing attributes in process `syz.2.162'. [ 64.337182][ T6441] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 64.341288][ T6441] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 64.597715][ T6463] netlink: 76 bytes leftover after parsing attributes in process `syz.3.171'. [ 64.606416][ T6466] trusted_key: syz.1.172 sent an empty control message without MSG_MORE. [ 64.647749][ T6471] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 64.649878][ T6471] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.653277][ T6471] vhci_hcd vhci_hcd.0: Device attached [ 64.655748][ T6471] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.659882][ T6471] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 64.661919][ T6471] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.665572][ T6471] vhci_hcd vhci_hcd.0: Device attached [ 64.668679][ T6471] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 64.670699][ T6471] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.673218][ T6471] vhci_hcd vhci_hcd.0: Device attached [ 64.674307][ T6479] random: crng reseeded on system resumption [ 64.678740][ T6471] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 64.680801][ T6471] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.680936][ T6471] vhci_hcd vhci_hcd.0: Device attached [ 64.682421][ T6483] binfmt_misc: register: failed to install interpreter file ./file0 [ 64.688388][ T6471] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.691174][ T6471] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.694307][ T6471] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.698248][ T6471] vhci_hcd vhci_hcd.0: port 0 already used [ 64.708894][ T6481] vhci_hcd: connection closed [ 64.708971][ T6477] vhci_hcd: connection closed [ 64.709018][ T6474] vhci_hcd: connection closed [ 64.712313][ T6472] vhci_hcd: connection closed [ 64.713028][ T46] vhci_hcd: stop threads [ 64.716865][ T46] vhci_hcd: release socket [ 64.718622][ T46] vhci_hcd: disconnect device [ 64.720353][ T46] vhci_hcd: stop threads [ 64.721728][ T46] vhci_hcd: release socket [ 64.722733][ T6487] netlink: 'syz.1.177': attribute type 1 has an invalid length. [ 64.723346][ T46] vhci_hcd: disconnect device [ 64.727014][ T46] vhci_hcd: stop threads [ 64.728336][ T46] vhci_hcd: release socket [ 64.730054][ T46] vhci_hcd: disconnect device [ 64.732784][ T46] vhci_hcd: stop threads [ 64.734697][ T46] vhci_hcd: release socket [ 64.736699][ T46] vhci_hcd: disconnect device [ 64.821035][ T6479] Unrecognized hibernate image header format! [ 64.823321][ T6479] PM: hibernation: Image mismatch: architecture specific data [ 65.277038][ T6492] futex_wake_op: syz.2.178 tries to shift op by -1; fix this program [ 65.348343][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.352598][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.395510][ T6502] netlink: 76 bytes leftover after parsing attributes in process `syz.2.182'. [ 65.617998][ T6526] evm: overlay not supported [ 65.624012][ T6526] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.626185][ T6526] overlayfs: failed to set xattr on upper [ 65.627909][ T6526] overlayfs: ...falling back to redirect_dir=nofollow. [ 65.630130][ T6526] overlayfs: ...falling back to index=off. [ 65.631976][ T6526] overlayfs: ...falling back to uuid=null. [ 65.872430][ T1189] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.959419][ T1189] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.034831][ T1189] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.080646][ T5927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.085543][ T5927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.088481][ T5927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.095837][ T1189] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.097940][ T5927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.102440][ T5927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.240441][ T6549] chnl_net:caif_netlink_parms(): no params data found [ 66.339616][ T6569] binfmt_misc: register: failed to install interpreter file ./file0 [ 66.352122][ T1189] bridge_slave_1: left allmulticast mode [ 66.354494][ T1189] bridge_slave_1: left promiscuous mode [ 66.357580][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.372329][ T1189] bridge_slave_0: left allmulticast mode [ 66.375657][ T1189] bridge_slave_0: left promiscuous mode [ 66.378200][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.383562][ T6575] netlink: 'syz.3.210': attribute type 64 has an invalid length. [ 66.386152][ T6575] netlink: 'syz.3.210': attribute type 4 has an invalid length. [ 66.437932][ T6580] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 66.700411][ T1189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.705225][ T1189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.708839][ T1189] bond0 (unregistering): Released all slaves [ 66.758195][ T6592] Bluetooth: MGMT ver 1.23 [ 66.781216][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.783948][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.786188][ T6549] bridge_slave_0: entered allmulticast mode [ 66.789015][ T6549] bridge_slave_0: entered promiscuous mode [ 66.793871][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.797503][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.799987][ T6549] bridge_slave_1: entered allmulticast mode [ 66.804536][ T6549] bridge_slave_1: entered promiscuous mode [ 66.885239][ T6596] sp0: Synchronizing with TNC [ 66.890252][ T6549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.896406][ T6549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.904545][ T6600] [U] è [ 66.932059][ T6549] team0: Port device team_slave_0 added [ 66.952260][ T6549] team0: Port device team_slave_1 added [ 67.029890][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.032319][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.041609][ T6549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.050830][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.055753][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.067280][ T6549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.099444][ T1189] hsr_slave_0: left promiscuous mode [ 67.101805][ T1189] hsr_slave_1: left promiscuous mode [ 67.104671][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.107691][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.112183][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.117416][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.140933][ T1189] veth1_macvtap: left promiscuous mode [ 67.142886][ T1189] veth0_macvtap: left promiscuous mode [ 67.144758][ T1189] veth1_vlan: left promiscuous mode [ 67.146439][ T1189] veth0_vlan: left promiscuous mode [ 67.731788][ T1189] team0 (unregistering): Port device team_slave_1 removed [ 67.795462][ T1189] team0 (unregistering): Port device team_slave_0 removed [ 68.113885][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 68.113889][ T6635] /dev/sg0: Can't lookup blockdev [ 68.113897][ T40] audit: type=1400 audit(1746376003.370:350): avc: denied { mounton } for pid=6634 comm="syz.3.227" path="/51/bus" dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.152977][ T5927] Bluetooth: hci0: command tx timeout [ 68.305666][ T6637] IPv6: sit1: Disabled Multicast RS [ 68.310850][ T6637] sit1: entered allmulticast mode [ 68.318194][ T40] audit: type=1400 audit(1746376003.570:351): avc: denied { map } for pid=6642 comm="syz.2.230" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.318898][ T6643] binder: 6642:6643 ioctl c0306201 200000001d40 returned -14 [ 68.327368][ T40] audit: type=1400 audit(1746376003.570:352): avc: denied { call } for pid=6642 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 68.338825][ T40] audit: type=1400 audit(1746376003.570:353): avc: denied { transfer } for pid=6642 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 68.345676][ T40] audit: type=1400 audit(1746376003.580:354): avc: denied { write } for pid=6644 comm="syz.0.231" name="igmp6" dev="proc" ino=4026533273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 68.350278][ T6549] hsr_slave_0: entered promiscuous mode [ 68.356612][ T6549] hsr_slave_1: entered promiscuous mode [ 68.359140][ T6549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.362098][ T6549] Cannot create hsr debugfs directory [ 68.524379][ T6549] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.529865][ T6549] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.534764][ T6549] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.544637][ T6549] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.548237][ T6659] futex_wake_op: syz.3.234 tries to shift op by -1; fix this program [ 68.593416][ T837] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.595982][ T6549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.614703][ T6549] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.628824][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.631361][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.640152][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.642437][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.656946][ T40] audit: type=1400 audit(1746376003.910:355): avc: denied { append } for pid=6664 comm="syz.0.235" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 68.661507][ T6667] __nla_validate_parse: 2 callbacks suppressed [ 68.661518][ T6667] netlink: 76 bytes leftover after parsing attributes in process `syz.3.236'. [ 68.664113][ T6665] use of bytesused == 0 is deprecated and will be removed in the future, [ 68.664136][ T6665] use the actual size instead. [ 68.695557][ T6665] mmap: syz.0.235 (6665): VmData 37462016 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 68.733374][ T837] usb 7-1: device descriptor read/64, error -71 [ 68.767735][ T6549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.887877][ T6549] veth0_vlan: entered promiscuous mode [ 68.895932][ T6549] veth1_vlan: entered promiscuous mode [ 68.915187][ T6549] veth0_macvtap: entered promiscuous mode [ 68.919616][ T6549] veth1_macvtap: entered promiscuous mode [ 68.929461][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.934052][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.937539][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.941548][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.946152][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.949400][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.954101][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.960009][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.963834][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.966972][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.970113][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.973454][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.976882][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.980838][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.984994][ T6549] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.987685][ T6549] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.990855][ T6549] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.994562][ T6549] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.997529][ T837] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 69.021978][ T6703] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 69.029109][ T6703] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 69.048623][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.051224][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.077236][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.079840][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.086873][ T40] audit: type=1400 audit(1746376004.340:356): avc: denied { mount } for pid=6549 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.094046][ T40] audit: type=1400 audit(1746376004.340:357): avc: denied { mounton } for pid=6549 comm="syz-executor" path="/syzkaller.IrKh7m/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.104293][ T40] audit: type=1400 audit(1746376004.360:358): avc: denied { mount } for pid=6549 comm="syz-executor" name="/" dev="gadgetfs" ino=6610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.132973][ T837] usb 7-1: device descriptor read/64, error -71 [ 69.243361][ T837] usb usb7-port1: attempt power cycle [ 69.592985][ T837] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 69.623651][ T837] usb 7-1: device descriptor read/8, error -71 [ 69.863099][ T837] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 69.883414][ T837] usb 7-1: device descriptor read/8, error -71 [ 69.900773][ T6749] netlink: 76 bytes leftover after parsing attributes in process `syz.3.244'. [ 69.994378][ T837] usb usb7-port1: unable to enumerate USB device [ 70.109346][ T6762] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 70.111447][ T6762] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 70.114940][ T6762] vhci_hcd vhci_hcd.0: Device attached [ 70.118662][ T6762] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 70.123373][ T58] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 70.125827][ T6762] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 70.127909][ T6762] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 70.131370][ T6762] vhci_hcd vhci_hcd.0: Device attached [ 70.135899][ T6762] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 70.137887][ T6762] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 70.140227][ T6762] vhci_hcd vhci_hcd.0: Device attached [ 70.143940][ T6762] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 70.146148][ T6762] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 70.148715][ T6762] vhci_hcd vhci_hcd.0: Device attached [ 70.151647][ T6762] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 70.155239][ T6762] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 70.158420][ T6762] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 70.162616][ T6762] vhci_hcd vhci_hcd.0: port 0 already used [ 70.164605][ T40] audit: type=1400 audit(1746376005.410:359): avc: denied { read } for pid=6759 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.180917][ T6770] vhci_hcd: connection closed [ 70.181106][ T1145] vhci_hcd: stop threads [ 70.181190][ T6763] vhci_hcd: connection closed [ 70.181411][ T6767] vhci_hcd: connection closed [ 70.182985][ T1145] vhci_hcd: release socket [ 70.183133][ T6765] vhci_hcd: connection closed [ 70.189494][ T1145] vhci_hcd: disconnect device [ 70.192589][ T1145] vhci_hcd: stop threads [ 70.194117][ T1145] vhci_hcd: release socket [ 70.195511][ T1145] vhci_hcd: disconnect device [ 70.197053][ T1145] vhci_hcd: stop threads [ 70.198524][ T1145] vhci_hcd: release socket [ 70.200060][ T1145] vhci_hcd: disconnect device [ 70.201988][ T1145] vhci_hcd: stop threads [ 70.203991][ T1145] vhci_hcd: release socket [ 70.205982][ T1145] vhci_hcd: disconnect device [ 70.233614][ T5927] Bluetooth: hci0: command tx timeout [ 70.252996][ T58] usb 7-1: device descriptor read/64, error -71 [ 70.523071][ T58] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 70.662973][ T58] usb 7-1: device descriptor read/64, error -71 [ 70.783170][ T58] usb usb7-port1: attempt power cycle [ 71.118375][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.123038][ T58] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 71.143867][ T58] usb 7-1: device descriptor read/8, error -71 [ 71.628544][ T6803] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.731807][ T6806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10768 sclass=netlink_route_socket pid=6806 comm=syz.3.256 [ 72.226478][ T6818] random: crng reseeded on system resumption [ 72.258326][ T6822] FAULT_INJECTION: forcing a failure. [ 72.258326][ T6822] name failslab, interval 1, probability 0, space 0, times 0 [ 72.263835][ T6822] CPU: 3 UID: 0 PID: 6822 Comm: syz.3.262 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 72.263852][ T6822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.263859][ T6822] Call Trace: [ 72.263864][ T6822] [ 72.263869][ T6822] dump_stack_lvl+0x16c/0x1f0 [ 72.263919][ T6822] should_fail_ex+0x512/0x640 [ 72.263948][ T6822] ? fs_reclaim_acquire+0xae/0x150 [ 72.263971][ T6822] ? tomoyo_encode2+0x100/0x3e0 [ 72.263992][ T6822] should_failslab+0xc2/0x120 [ 72.264012][ T6822] __kmalloc_noprof+0xd2/0x510 [ 72.264038][ T6822] ? d_absolute_path+0x136/0x1a0 [ 72.264089][ T6822] tomoyo_encode2+0x100/0x3e0 [ 72.264116][ T6822] tomoyo_encode+0x29/0x50 [ 72.264136][ T6822] tomoyo_realpath_from_path+0x18f/0x6e0 [ 72.264165][ T6822] tomoyo_path_number_perm+0x245/0x580 [ 72.264183][ T6822] ? tomoyo_path_number_perm+0x237/0x580 [ 72.264204][ T6822] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 72.264244][ T6822] ? find_held_lock+0x2b/0x80 [ 72.264288][ T6822] ? find_held_lock+0x2b/0x80 [ 72.264306][ T6822] ? hook_file_ioctl_common+0x145/0x410 [ 72.264327][ T6822] ? __fget_files+0x20e/0x3c0 [ 72.264355][ T6822] security_file_ioctl+0x9b/0x240 [ 72.264378][ T6822] __x64_sys_ioctl+0xb7/0x200 [ 72.264400][ T6822] do_syscall_64+0xcd/0x260 [ 72.264422][ T6822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.264438][ T6822] RIP: 0033:0x7f2f1498e969 [ 72.264451][ T6822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.264466][ T6822] RSP: 002b:00007f2f157a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.264482][ T6822] RAX: ffffffffffffffda RBX: 00007f2f14bb5fa0 RCX: 00007f2f1498e969 [ 72.264491][ T6822] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000003 [ 72.264500][ T6822] RBP: 00007f2f157a3090 R08: 0000000000000000 R09: 0000000000000000 [ 72.264510][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.264519][ T6822] R13: 0000000000000000 R14: 00007f2f14bb5fa0 R15: 00007ffd87769328 [ 72.264540][ T6822] [ 72.264599][ T6822] ERROR: Out of memory at tomoyo_realpath_from_path. [ 72.323640][ T5927] Bluetooth: hci0: command tx timeout [ 72.389170][ T6829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10768 sclass=netlink_route_socket pid=6829 comm=syz.0.264 [ 72.418546][ T6833] netlink: 448 bytes leftover after parsing attributes in process `syz.2.265'. [ 72.505861][ T6845] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 72.509998][ T6845] overlayfs: failed to set xattr on upper [ 72.513629][ T6845] overlayfs: ...falling back to redirect_dir=nofollow. [ 72.516914][ T6845] overlayfs: ...falling back to index=off. [ 72.519534][ T6845] overlayfs: ...falling back to uuid=null. [ 72.522055][ T6845] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 72.646529][ T6868] tipc: Started in network mode [ 72.649154][ T6868] tipc: Node identity d1, cluster identity 4711 [ 72.651769][ T6868] tipc: Node number set to 209 [ 72.656507][ T6868] tipc: Cannot configure node identity twice [ 72.857052][ T6879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.283'. [ 72.967336][ T6891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.288'. [ 72.970980][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 73.135492][ T6899] binfmt_misc: register: failed to install interpreter file ./file0 [ 73.211799][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 73.211818][ T40] audit: type=1400 audit(1746376008.460:367): avc: denied { mount } for pid=6905 comm="syz.2.294" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.266974][ T6912] program syz.2.296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.352397][ T6919] futex_wake_op: syz.2.298 tries to shift op by -1; fix this program [ 73.362284][ T6918] usb 1-1: USB disconnect, device number 2 [ 73.512786][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'. [ 73.518655][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 73.544208][ T40] audit: type=1400 audit(1746376008.800:368): avc: denied { name_connect } for pid=6939 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 73.838966][ T6970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'. [ 73.842680][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 73.877105][ T40] audit: type=1400 audit(1746376009.130:369): avc: denied { create } for pid=6973 comm="syz.0.318" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 73.886409][ T40] audit: type=1400 audit(1746376009.130:370): avc: denied { link } for pid=6973 comm="syz.0.318" name="file1" dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 73.917092][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 73.971783][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.321'. [ 73.976143][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 74.016638][ T6990] FAULT_INJECTION: forcing a failure. [ 74.016638][ T6990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.021315][ T6990] CPU: 2 UID: 0 PID: 6990 Comm: syz.3.323 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 74.021330][ T6990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.021336][ T6990] Call Trace: [ 74.021348][ T6990] [ 74.021353][ T6990] dump_stack_lvl+0x16c/0x1f0 [ 74.021383][ T6990] should_fail_ex+0x512/0x640 [ 74.021404][ T6990] _copy_to_user+0x32/0xd0 [ 74.021425][ T6990] simple_read_from_buffer+0xcb/0x170 [ 74.021442][ T6990] proc_fail_nth_read+0x197/0x270 [ 74.021459][ T6990] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.021475][ T6990] ? rw_verify_area+0xcf/0x680 [ 74.021489][ T6990] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.021504][ T6990] vfs_read+0x1de/0xc70 [ 74.021522][ T6990] ? __pfx___mutex_lock+0x10/0x10 [ 74.021536][ T6990] ? __pfx_vfs_read+0x10/0x10 [ 74.021555][ T6990] ? __fget_files+0x20e/0x3c0 [ 74.021576][ T6990] ksys_read+0x12a/0x240 [ 74.021591][ T6990] ? __pfx_ksys_read+0x10/0x10 [ 74.021611][ T6990] do_syscall_64+0xcd/0x260 [ 74.021626][ T6990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.021638][ T6990] RIP: 0033:0x7f2f1498d37c [ 74.021647][ T6990] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 74.021656][ T6990] RSP: 002b:00007f2f157a3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.021666][ T6990] RAX: ffffffffffffffda RBX: 00007f2f14bb5fa0 RCX: 00007f2f1498d37c [ 74.021673][ T6990] RDX: 000000000000000f RSI: 00007f2f157a30a0 RDI: 0000000000000004 [ 74.021679][ T6990] RBP: 00007f2f157a3090 R08: 0000000000000000 R09: 0000000000000000 [ 74.021685][ T6990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.021691][ T6990] R13: 0000000000000000 R14: 00007f2f14bb5fa0 R15: 00007ffd87769328 [ 74.021704][ T6990] [ 74.039411][ T6992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10768 sclass=netlink_route_socket pid=6992 comm=syz.0.324 [ 74.166753][ T6995] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 74.169556][ T6995] UDF-fs: Scanning with blocksize 2048 failed [ 74.174716][ T6995] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 74.177130][ T6995] UDF-fs: Scanning with blocksize 4096 failed [ 74.229462][ T40] audit: type=1400 audit(1746376009.480:371): avc: denied { read } for pid=7002 comm="syz.2.328" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.230226][ T7005] netlink: 448 bytes leftover after parsing attributes in process `syz.2.328'. [ 74.240224][ T40] audit: type=1400 audit(1746376009.480:372): avc: denied { open } for pid=7002 comm="syz.2.328" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.290029][ T7012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.331'. [ 74.293105][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 74.350348][ T40] audit: type=1400 audit(1746376009.600:373): avc: denied { append } for pid=7017 comm="syz.4.334" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.393107][ T5927] Bluetooth: hci0: command tx timeout [ 74.402102][ T7023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.334'. [ 74.408404][ T40] audit: type=1400 audit(1746376009.660:374): avc: denied { write } for pid=7017 comm="syz.4.334" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.446794][ T7028] futex_wake_op: syz.3.336 tries to shift op by -1; fix this program [ 74.611290][ T40] audit: type=1400 audit(1746376009.860:375): avc: denied { read write } for pid=7017 comm="syz.4.334" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.622332][ T40] audit: type=1400 audit(1746376009.860:376): avc: denied { open } for pid=7017 comm="syz.4.334" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.625119][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'. [ 74.932624][ T7060] deleting an unspecified loop device is not supported. [ 75.034260][ T7067] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.036505][ T7067] overlayfs: failed to set xattr on upper [ 75.038315][ T7067] overlayfs: ...falling back to redirect_dir=nofollow. [ 75.040463][ T7067] overlayfs: ...falling back to index=off. [ 75.042345][ T7067] overlayfs: ...falling back to uuid=null. [ 75.336408][ T7096] netlink: 'syz.2.360': attribute type 10 has an invalid length. [ 75.517099][ T7104] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 75.519145][ T7104] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 75.521581][ T7104] vhci_hcd vhci_hcd.0: Device attached [ 75.528924][ T7104] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 75.534874][ T7104] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 75.537000][ T7104] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.539461][ T7104] vhci_hcd vhci_hcd.0: Device attached [ 75.542440][ T7104] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(19) [ 75.545204][ T7104] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 75.548262][ T7104] vhci_hcd vhci_hcd.0: Device attached [ 75.563312][ T7104] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 75.566063][ T7104] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 75.569421][ T7104] vhci_hcd vhci_hcd.0: Device attached [ 75.572375][ T7104] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 75.575436][ T7104] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 75.578380][ T7104] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 75.583055][ T7104] vhci_hcd vhci_hcd.0: port 0 already used [ 75.595837][ T7112] vhci_hcd: connection closed [ 75.598412][ T103] vhci_hcd: stop threads [ 75.601923][ T7108] vhci_hcd: connection closed [ 75.602584][ T7110] vhci_hcd: connection closed [ 75.604755][ T7105] vhci_hcd: connection closed [ 75.606538][ T103] vhci_hcd: release socket [ 75.609783][ T103] vhci_hcd: disconnect device [ 75.612677][ T103] vhci_hcd: stop threads [ 75.614256][ T103] vhci_hcd: release socket [ 75.615772][ T103] vhci_hcd: disconnect device [ 75.617619][ T103] vhci_hcd: stop threads [ 75.619107][ T103] vhci_hcd: release socket [ 75.620734][ T103] vhci_hcd: disconnect device [ 75.622585][ T103] vhci_hcd: stop threads [ 75.625175][ T103] vhci_hcd: release socket [ 75.626875][ T103] vhci_hcd: disconnect device [ 76.390298][ T7136] capability: warning: `syz.4.369' uses deprecated v2 capabilities in a way that may be insecure [ 76.816562][ T7169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26896 sclass=netlink_route_socket pid=7169 comm=syz.0.380 [ 77.377151][ T7193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10768 sclass=netlink_route_socket pid=7193 comm=syz.4.390 [ 77.641330][ T7209] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 77.644009][ T7209] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 77.649033][ T7209] vhci_hcd vhci_hcd.0: Device attached [ 77.651527][ T7209] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.654132][ T7210] futex_wake_op: syz.3.395 tries to shift op by -1; fix this program [ 77.659639][ T7209] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17) [ 77.662189][ T7209] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 77.665298][ T7209] vhci_hcd vhci_hcd.0: Device attached [ 77.669057][ T7209] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(19) [ 77.671575][ T7209] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 77.674418][ T7209] vhci_hcd vhci_hcd.0: Device attached [ 77.677282][ T7209] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(21) [ 77.679161][ T7209] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 77.681308][ T7209] vhci_hcd vhci_hcd.0: Device attached [ 77.683443][ T7209] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.686310][ T7209] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.689160][ T7209] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.694589][ T7209] vhci_hcd vhci_hcd.0: port 0 already used [ 77.705266][ T7217] vhci_hcd: connection closed [ 77.705416][ T7215] vhci_hcd: connection closed [ 77.705459][ T7213] vhci_hcd: connection closed [ 77.708926][ T1141] vhci_hcd: stop threads [ 77.711762][ T1141] vhci_hcd: release socket [ 77.713095][ T7211] vhci_hcd: connection closed [ 77.713947][ T1141] vhci_hcd: disconnect device [ 77.717289][ T1141] vhci_hcd: stop threads [ 77.719190][ T1141] vhci_hcd: release socket [ 77.720995][ T1141] vhci_hcd: disconnect device [ 77.723267][ T1141] vhci_hcd: stop threads [ 77.725120][ T1141] vhci_hcd: release socket [ 77.727174][ T1141] vhci_hcd: disconnect device [ 77.729512][ T1141] vhci_hcd: stop threads [ 77.731275][ T1141] vhci_hcd: release socket [ 77.733315][ T1141] vhci_hcd: disconnect device [ 77.959208][ T7226] mmap: syz.0.398 (7226) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.249927][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 78.249939][ T40] audit: type=1400 audit(1746376013.500:386): avc: denied { setopt } for pid=7234 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.250715][ T7235] netlink: 'syz.4.402': attribute type 4 has an invalid length. [ 78.272755][ T7235] netlink: 'syz.4.402': attribute type 4 has an invalid length. [ 78.541685][ T7254] ISOFS: Unable to identify CD-ROM format. [ 78.548192][ T7252] ptrace attach of "/syz-executor exec"[6549] was attempted by "/syz-executor exec"[7252] [ 78.555475][ T40] audit: type=1400 audit(1746376013.810:387): avc: denied { listen } for pid=7251 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.574028][ T40] audit: type=1400 audit(1746376013.830:388): avc: denied { getopt } for pid=7251 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.773583][ T7271] futex_wake_op: syz.3.415 tries to shift op by -1; fix this program [ 78.829574][ T40] audit: type=1400 audit(1746376014.080:389): avc: denied { load_policy } for pid=7274 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 78.829749][ T7275] SELinux: policydb version -74705376 does not match my version range 15-34 [ 78.839704][ T7275] SELinux: failed to load policy [ 78.854239][ T40] audit: type=1400 audit(1746376014.110:390): avc: denied { map } for pid=7274 comm="syz.2.418" path="socket:[16286]" dev="sockfs" ino=16286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 78.854470][ T7275] binfmt_misc: register: failed to install interpreter file ./file0 [ 78.964560][ T40] audit: type=1400 audit(1746376014.220:391): avc: denied { ioctl } for pid=7277 comm="syz.2.419" path="socket:[15358]" dev="sockfs" ino=15358 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.972939][ T40] audit: type=1400 audit(1746376014.220:392): avc: denied { shutdown } for pid=7277 comm="syz.2.419" lport=38434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.018980][ T7285] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.021464][ T7285] overlayfs: failed to set xattr on upper [ 79.024614][ T7285] overlayfs: ...falling back to redirect_dir=nofollow. [ 79.024950][ T7289] __nla_validate_parse: 11 callbacks suppressed [ 79.024965][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.423'. [ 79.026802][ T7285] overlayfs: ...falling back to index=off. [ 79.029343][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 79.040917][ T7285] overlayfs: ...falling back to uuid=null. [ 79.177131][ T40] audit: type=1400 audit(1746376014.430:393): avc: denied { create } for pid=7297 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.183812][ T40] audit: type=1400 audit(1746376014.430:394): avc: denied { create } for pid=7297 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 79.190364][ T40] audit: type=1400 audit(1746376014.430:395): avc: denied { write } for pid=7297 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 79.239756][ T7300] ALSA: mixer_oss: invalid index 100000 [ 79.245317][ T7300] netlink: 68 bytes leftover after parsing attributes in process `syz.0.427'. [ 79.343736][ T1342] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 79.363926][ T7309] binfmt_misc: register: failed to install interpreter file ./file0 [ 79.441603][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.433'. [ 79.446301][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 79.505049][ T1342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.509421][ T1342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.513841][ T1342] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.519384][ T1342] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.523325][ T1342] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.529491][ T1342] usb 7-1: config 0 descriptor?? [ 79.939505][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.942756][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.948584][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.951837][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.955792][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.959275][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.962411][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.965706][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.968816][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.972311][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.975811][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.980094][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.983282][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.986330][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.989453][ T1342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 79.995071][ T1342] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 80.004117][ T1342] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 80.030188][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.445'. [ 80.034382][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 80.179255][ T7351] futex_wake_op: syz.4.446 tries to shift op by -1; fix this program [ 80.313932][ T7293] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 80.369392][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 80.372540][ T7362] netlink: 'syz.0.447': attribute type 30 has an invalid length. [ 80.384608][ T7362] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.388767][ T7362] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.392786][ T7362] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.395988][ T7362] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.401421][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 80.405318][ T7362] netlink: 'syz.0.447': attribute type 30 has an invalid length. [ 80.794082][ T7387] fuse: Unknown parameter 'ù´0x0000000000000003' [ 81.017958][ T7402] ALSA: mixer_oss: invalid index 100000 [ 81.022216][ T7402] netlink: 68 bytes leftover after parsing attributes in process `syz.4.454'. [ 81.256327][ T7356] usb 7-1: string descriptor 0 read error: -71 [ 81.282470][ T7424] syz.4.463 uses obsolete (PF_INET,SOCK_PACKET) [ 81.291310][ T7424] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 81.357733][ T836] cfg80211: failed to load regulatory.db [ 81.385348][ T5971] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 81.606274][ T7435] binder: 7434:7435 ioctl c0306201 200000000480 returned -14 [ 81.613143][ T7448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.857173][ T7466] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 81.859420][ T7466] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.861835][ T7466] vhci_hcd vhci_hcd.0: Device attached [ 81.865878][ T7466] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.871680][ T7466] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 81.874655][ T7466] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.877444][ T7466] vhci_hcd vhci_hcd.0: Device attached [ 81.880480][ T7466] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(19) [ 81.883048][ T7466] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.886731][ T7466] vhci_hcd vhci_hcd.0: Device attached [ 81.890087][ T7466] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 81.892488][ T7466] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.895562][ T7466] vhci_hcd vhci_hcd.0: Device attached [ 81.898126][ T7466] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.901468][ T7466] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.905182][ T7466] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.910114][ T7466] vhci_hcd vhci_hcd.0: port 0 already used [ 81.920392][ T7473] vhci_hcd: connection closed [ 81.920529][ T7471] vhci_hcd: connection closed [ 81.920792][ T103] vhci_hcd: stop threads [ 81.920882][ T7475] vhci_hcd: connection closed [ 81.922610][ T7468] vhci_hcd: connection closed [ 81.925267][ T103] vhci_hcd: release socket [ 81.932957][ T103] vhci_hcd: disconnect device [ 81.934724][ T103] vhci_hcd: stop threads [ 81.936223][ T103] vhci_hcd: release socket [ 81.937658][ T103] vhci_hcd: disconnect device [ 81.940088][ T103] vhci_hcd: stop threads [ 81.941895][ T103] vhci_hcd: release socket [ 81.944487][ T103] vhci_hcd: disconnect device [ 81.946215][ T103] vhci_hcd: stop threads [ 81.947882][ T103] vhci_hcd: release socket [ 81.949627][ T103] vhci_hcd: disconnect device [ 82.169840][ T6588] usb 7-1: USB disconnect, device number 11 [ 82.230756][ T7503] binfmt_misc: register: failed to install interpreter file ./file0 [ 82.502995][ T7536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10768 sclass=netlink_route_socket pid=7536 comm=syz.4.496 [ 82.505487][ T7537] program syz.0.495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.576902][ T7547] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 82.579148][ T7547] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 82.582162][ T7547] vhci_hcd vhci_hcd.0: Device attached [ 82.585533][ T7547] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 82.589516][ T7547] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 82.591704][ T7547] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 82.595845][ T7547] vhci_hcd vhci_hcd.0: Device attached [ 82.598666][ T7547] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19) [ 82.600742][ T7547] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 82.603805][ T7547] vhci_hcd vhci_hcd.0: Device attached [ 82.608442][ T7555] netlink: 'syz.4.498': attribute type 238 has an invalid length. [ 82.611767][ T7547] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 82.614821][ T7547] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 82.618383][ T7547] vhci_hcd vhci_hcd.0: Device attached [ 82.621017][ T7547] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 82.624360][ T7547] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 82.627708][ T7547] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 82.629809][ T7559] binder: 7558:7559 ioctl 5381 0 returned -22 [ 82.631880][ T7547] vhci_hcd vhci_hcd.0: port 0 already used [ 82.644652][ T7556] vhci_hcd: connection closed [ 82.645377][ T7552] vhci_hcd: connection closed [ 82.645625][ T7550] vhci_hcd: connection closed [ 82.647101][ T1189] vhci_hcd: stop threads [ 82.649328][ T7548] vhci_hcd: connection closed [ 82.650481][ T1189] vhci_hcd: release socket [ 82.650498][ T1189] vhci_hcd: disconnect device [ 82.661238][ T1189] vhci_hcd: stop threads [ 82.662645][ T1189] vhci_hcd: release socket [ 82.664486][ T1189] vhci_hcd: disconnect device [ 82.666566][ T1189] vhci_hcd: stop threads [ 82.668499][ T1189] vhci_hcd: release socket [ 82.670167][ T1189] vhci_hcd: disconnect device [ 82.672084][ T1189] vhci_hcd: stop threads [ 82.673780][ T1189] vhci_hcd: release socket [ 82.675493][ T1189] vhci_hcd: disconnect device [ 83.189834][ T7593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10768 sclass=netlink_route_socket pid=7593 comm=syz.0.515 [ 83.208106][ T7595] input: syz1 as /devices/virtual/input/input6 [ 83.543476][ T7621] overlayfs: failed to resolve './file1': -2 [ 83.578934][ T7619] binder: 7618:7619 ioctl c0306201 2000000003c0 returned -22 [ 83.704344][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 83.704354][ T40] audit: type=1400 audit(1746376018.960:417): avc: denied { unmount } for pid=6549 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.934243][ T7642] warning: `syz.4.533' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.107648][ T40] audit: type=1400 audit(1746376019.360:418): avc: denied { watch } for pid=7651 comm="syz.4.538" path=2F6D656D66643A2D42D54E49C56A9A08202864656C6574656429 dev="tmpfs" ino=3072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.258087][ T7658] futex_wake_op: syz.4.539 tries to shift op by -1; fix this program [ 84.367982][ T7664] __nla_validate_parse: 14 callbacks suppressed [ 84.367994][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 84.399325][ T7671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.545'. [ 84.402394][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 84.430402][ T7673] FAULT_INJECTION: forcing a failure. [ 84.430402][ T7673] name failslab, interval 1, probability 0, space 0, times 0 [ 84.437740][ T7673] CPU: 1 UID: 0 PID: 7673 Comm: syz.3.546 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 84.437757][ T7673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.437764][ T7673] Call Trace: [ 84.437768][ T7673] [ 84.437772][ T7673] dump_stack_lvl+0x16c/0x1f0 [ 84.437807][ T7673] should_fail_ex+0x512/0x640 [ 84.437827][ T7673] ? fs_reclaim_acquire+0xae/0x150 [ 84.437842][ T7673] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 84.437858][ T7673] should_failslab+0xc2/0x120 [ 84.437870][ T7673] __kmalloc_noprof+0xd2/0x510 [ 84.437890][ T7673] tomoyo_realpath_from_path+0xc2/0x6e0 [ 84.437907][ T7673] ? tomoyo_profile+0x47/0x60 [ 84.437926][ T7673] tomoyo_path_number_perm+0x245/0x580 [ 84.437938][ T7673] ? tomoyo_path_number_perm+0x237/0x580 [ 84.437952][ T7673] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 84.437966][ T7673] ? find_held_lock+0x2b/0x80 [ 84.437991][ T7673] ? find_held_lock+0x2b/0x80 [ 84.438003][ T7673] ? hook_file_ioctl_common+0x145/0x410 [ 84.438016][ T7673] ? __fget_files+0x20e/0x3c0 [ 84.438035][ T7673] security_file_ioctl+0x9b/0x240 [ 84.438051][ T7673] __x64_sys_ioctl+0xb7/0x200 [ 84.438066][ T7673] do_syscall_64+0xcd/0x260 [ 84.438082][ T7673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.438093][ T7673] RIP: 0033:0x7f2f1498e969 [ 84.438102][ T7673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.438113][ T7673] RSP: 002b:00007f2f157a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.438123][ T7673] RAX: ffffffffffffffda RBX: 00007f2f14bb5fa0 RCX: 00007f2f1498e969 [ 84.438130][ T7673] RDX: 00002000000000c0 RSI: 0000000000004b72 RDI: 0000000000000003 [ 84.438136][ T7673] RBP: 00007f2f157a3090 R08: 0000000000000000 R09: 0000000000000000 [ 84.438142][ T7673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.438148][ T7673] R13: 0000000000000000 R14: 00007f2f14bb5fa0 R15: 00007ffd87769328 [ 84.438162][ T7673] [ 84.438166][ T7673] ERROR: Out of memory at tomoyo_realpath_from_path. [ 84.591857][ T40] audit: type=1400 audit(1746376019.840:419): avc: denied { connect } for pid=7680 comm="syz.0.550" lport=56 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.687861][ T40] audit: type=1400 audit(1746376019.940:420): avc: denied { setopt } for pid=7686 comm="syz.0.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.807637][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 84.891001][ T7699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.556'. [ 84.896444][ T7701] binfmt_misc: register: failed to install interpreter file ./file0 [ 85.027060][ T7713] fuse: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ0x00000000000000040xffffffffffffffffÿÿÿÿ' [ 85.031857][ T7715] fuse: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ0x00000000000000040xffffffffffffffffÿÿÿÿ' [ 85.113743][ T7715] syz.0.562 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 85.355585][ T7733] overlayfs: failed to resolve './file1': -2 [ 85.360062][ T7733] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.569'. [ 85.569516][ T7747] futex_wake_op: syz.0.574 tries to shift op by -1; fix this program [ 85.618735][ T7753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10768 sclass=netlink_route_socket pid=7753 comm=syz.3.577 [ 85.620459][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.575'. [ 85.633015][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 85.782099][ T40] audit: type=1400 audit(1746376021.030:421): avc: denied { setopt } for pid=7767 comm="syz.0.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.810517][ T7768] netlink: 32 bytes leftover after parsing attributes in process `syz.0.583'. [ 86.224979][ T40] audit: type=1400 audit(1746376021.480:422): avc: denied { write } for pid=7781 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.509254][ T7798] binder: binder_mmap: 7797 200000ffd000-200001000000 bad vm_flags failed -1 [ 86.582501][ T7806] futex_wake_op: syz.0.594 tries to shift op by -1; fix this program [ 86.711729][ T7818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.601'. [ 86.835409][ T7833] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.837704][ T7833] overlayfs: failed to set xattr on upper [ 86.839984][ T7833] overlayfs: ...falling back to redirect_dir=nofollow. [ 86.842169][ T7833] overlayfs: ...falling back to index=off. [ 86.845812][ T7833] overlayfs: ...falling back to uuid=null. [ 87.451195][ T7862] FAULT_INJECTION: forcing a failure. [ 87.451195][ T7862] name failslab, interval 1, probability 0, space 0, times 0 [ 87.455086][ T7862] CPU: 3 UID: 0 PID: 7862 Comm: syz.2.618 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 87.455100][ T7862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.455107][ T7862] Call Trace: [ 87.455111][ T7862] [ 87.455115][ T7862] dump_stack_lvl+0x16c/0x1f0 [ 87.455146][ T7862] should_fail_ex+0x512/0x640 [ 87.455163][ T7862] ? fs_reclaim_acquire+0xae/0x150 [ 87.455177][ T7862] ? tomoyo_encode2+0x100/0x3e0 [ 87.455191][ T7862] should_failslab+0xc2/0x120 [ 87.455203][ T7862] __kmalloc_noprof+0xd2/0x510 [ 87.455219][ T7862] ? d_absolute_path+0x136/0x1a0 [ 87.455234][ T7862] tomoyo_encode2+0x100/0x3e0 [ 87.455250][ T7862] tomoyo_encode+0x29/0x50 [ 87.455285][ T7862] tomoyo_realpath_from_path+0x18f/0x6e0 [ 87.455304][ T7862] tomoyo_path_number_perm+0x245/0x580 [ 87.455316][ T7862] ? tomoyo_path_number_perm+0x237/0x580 [ 87.455329][ T7862] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 87.455342][ T7862] ? find_held_lock+0x2b/0x80 [ 87.455370][ T7862] ? find_held_lock+0x2b/0x80 [ 87.455381][ T7862] ? hook_file_ioctl_common+0x145/0x410 [ 87.455394][ T7862] ? __fget_files+0x20e/0x3c0 [ 87.455413][ T7862] security_file_ioctl+0x9b/0x240 [ 87.455428][ T7862] __x64_sys_ioctl+0xb7/0x200 [ 87.455442][ T7862] do_syscall_64+0xcd/0x260 [ 87.455457][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.455468][ T7862] RIP: 0033:0x7f9b4638e969 [ 87.455477][ T7862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.455487][ T7862] RSP: 002b:00007f9b47142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.455497][ T7862] RAX: ffffffffffffffda RBX: 00007f9b465b5fa0 RCX: 00007f9b4638e969 [ 87.455503][ T7862] RDX: 00002000000000c0 RSI: 0000000000004b72 RDI: 0000000000000003 [ 87.455509][ T7862] RBP: 00007f9b47142090 R08: 0000000000000000 R09: 0000000000000000 [ 87.455516][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.455522][ T7862] R13: 0000000000000000 R14: 00007f9b465b5fa0 R15: 00007ffec27cef88 [ 87.455534][ T7862] [ 87.455545][ T7862] ERROR: Out of memory at tomoyo_realpath_from_path. [ 87.781108][ T7875] binfmt_misc: register: failed to install interpreter file ./file0 [ 87.909561][ T7887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.912168][ T7887] IPv6: NLM_F_CREATE should be set when creating new route [ 87.965623][ T7894] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 87.968442][ T7894] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 87.972373][ T7894] vhci_hcd vhci_hcd.0: Device attached [ 87.976890][ T7894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.984358][ T7894] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 87.987042][ T7894] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 87.990562][ T7894] vhci_hcd vhci_hcd.0: Device attached [ 87.998991][ T7894] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(19) [ 88.001622][ T7894] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 88.004280][ T7894] vhci_hcd vhci_hcd.0: Device attached [ 88.007355][ T7894] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 88.009784][ T7894] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 88.012598][ T7894] vhci_hcd vhci_hcd.0: Device attached [ 88.015060][ T7894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 88.018423][ T7894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 88.021584][ T7894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 88.025677][ T7894] vhci_hcd vhci_hcd.0: port 0 already used [ 88.038071][ T7905] vhci_hcd: connection closed [ 88.038079][ T7901] vhci_hcd: connection closed [ 88.038556][ T7895] vhci_hcd: connection closed [ 88.039973][ T7899] vhci_hcd: connection closed [ 88.042965][ T66] vhci_hcd: stop threads [ 88.047026][ T66] vhci_hcd: release socket [ 88.048658][ T66] vhci_hcd: disconnect device [ 88.051179][ T66] vhci_hcd: stop threads [ 88.052571][ T66] vhci_hcd: release socket [ 88.054105][ T66] vhci_hcd: disconnect device [ 88.056538][ T66] vhci_hcd: stop threads [ 88.058263][ T66] vhci_hcd: release socket [ 88.059992][ T66] vhci_hcd: disconnect device [ 88.062728][ T66] vhci_hcd: stop threads [ 88.066119][ T66] vhci_hcd: release socket [ 88.068187][ T66] vhci_hcd: disconnect device [ 88.216072][ T40] audit: type=1400 audit(1746376023.470:423): avc: denied { execute } for pid=7915 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 88.225617][ T40] audit: type=1400 audit(1746376023.470:424): avc: denied { execute_no_trans } for pid=7915 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 88.226406][ T103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.294990][ T7922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7922 comm=syz.3.642 [ 88.305105][ T7922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7922 comm=syz.3.642 [ 88.312590][ T103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.315146][ T7922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7922 comm=syz.3.642 [ 88.325092][ T7922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7922 comm=syz.3.642 [ 88.335162][ T7922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7922 comm=syz.3.642 [ 88.344889][ T5927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.345055][ T7922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7922 comm=syz.3.642 [ 88.348857][ T5927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.349590][ T40] audit: type=1400 audit(1746376023.600:425): avc: denied { wake_alarm } for pid=7921 comm="syz.3.642" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.366440][ T5927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.370867][ T5927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.376637][ T5927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.422651][ T103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.460957][ T7932] futex_wake_op: syz.4.645 tries to shift op by -1; fix this program [ 88.496982][ T103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.567915][ T7923] chnl_net:caif_netlink_parms(): no params data found [ 88.735441][ T103] bridge_slave_1: left allmulticast mode [ 88.737535][ T103] bridge_slave_1: left promiscuous mode [ 88.740118][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.744449][ T103] bridge_slave_0: left allmulticast mode [ 88.746453][ T103] bridge_slave_0: left promiscuous mode [ 88.748371][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.038712][ T5927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.042799][ T5927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.046314][ T5927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.051307][ T5927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.055728][ T5927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.117842][ T103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.121961][ T103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.127541][ T103] bond0 (unregistering): Released all slaves [ 89.136761][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.139084][ T7923] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.141365][ T7923] bridge_slave_0: entered allmulticast mode [ 89.144208][ T7923] bridge_slave_0: entered promiscuous mode [ 89.149267][ T7923] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.151574][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.154216][ T7923] bridge_slave_1: entered allmulticast mode [ 89.156836][ T7923] bridge_slave_1: entered promiscuous mode [ 89.202148][ T7923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.206669][ T7923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.295625][ T7923] team0: Port device team_slave_0 added [ 89.307684][ T7923] team0: Port device team_slave_1 added [ 89.360522][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.363674][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.375957][ T7923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.382123][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.384634][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.392809][ T7923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.462371][ T7923] hsr_slave_0: entered promiscuous mode [ 89.465546][ T7923] hsr_slave_1: entered promiscuous mode [ 89.468437][ T7923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.470970][ T7923] Cannot create hsr debugfs directory [ 89.499591][ T103] hsr_slave_0: left promiscuous mode [ 89.503906][ T103] hsr_slave_1: left promiscuous mode [ 89.506337][ T103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.509220][ T103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.512530][ T103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.516707][ T103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.544667][ T103] veth1_macvtap: left promiscuous mode [ 89.546558][ T103] veth0_macvtap: left promiscuous mode [ 89.548385][ T103] veth1_vlan: left promiscuous mode [ 89.550528][ T103] veth0_vlan: left promiscuous mode [ 90.050122][ T103] team0 (unregistering): Port device team_slave_1 removed [ 90.107503][ T103] team0 (unregistering): Port device team_slave_0 removed [ 90.405957][ T5930] Bluetooth: hci3: command tx timeout [ 90.561167][ T7968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.564387][ T7968] IPv6: NLM_F_CREATE should be set when creating new route [ 90.667034][ T7985] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 90.670867][ T7985] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 90.698822][ T7950] chnl_net:caif_netlink_parms(): no params data found [ 90.718300][ T40] audit: type=1400 audit(1746376025.970:426): avc: denied { ioctl } for pid=7984 comm="syz.3.662" path="socket:[22913]" dev="sockfs" ino=22913 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.727495][ T40] audit: type=1400 audit(1746376025.980:427): avc: denied { bind } for pid=7984 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.862454][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.866074][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.868095][ T7950] bridge_slave_0: entered allmulticast mode [ 90.870464][ T7950] bridge_slave_0: entered promiscuous mode [ 90.872910][ T7923] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.876941][ T7923] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.882551][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.885005][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.887352][ T7950] bridge_slave_1: entered allmulticast mode [ 90.890134][ T7950] bridge_slave_1: entered promiscuous mode [ 90.893838][ T7923] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.897993][ T7923] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.936844][ T7950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.949102][ T7950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.998374][ T7950] team0: Port device team_slave_0 added [ 91.006845][ T7950] team0: Port device team_slave_1 added [ 91.056224][ T7950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.058815][ T7950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.069377][ T7950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.083919][ T7950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.086187][ T7950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.094737][ T7950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.113015][ T5930] Bluetooth: hci0: command tx timeout [ 91.157832][ T7950] hsr_slave_0: entered promiscuous mode [ 91.160485][ T7950] hsr_slave_1: entered promiscuous mode [ 91.223633][ T66] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.255316][ T7923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.262934][ T8019] __nla_validate_parse: 6 callbacks suppressed [ 91.262944][ T8019] netlink: 168 bytes leftover after parsing attributes in process `syz.0.667'. [ 91.321555][ T66] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.346530][ T8019] kvm: emulating exchange as write [ 91.369321][ T40] audit: type=1400 audit(1746376026.620:428): avc: denied { write } for pid=8018 comm="syz.0.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.376940][ T7923] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.383934][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.386661][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.395296][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.398346][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.410975][ T66] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.432455][ T7950] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 91.438842][ T7950] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 91.446100][ T7950] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 91.456042][ T7950] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 91.519669][ T66] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.568422][ T7950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.588724][ T7950] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.594357][ T7923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.600607][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.602184][ T40] audit: type=1400 audit(1746376026.850:429): avc: denied { getopt } for pid=8042 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.603792][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.617690][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.620077][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.676176][ T7950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.681993][ T66] bridge_slave_1: left allmulticast mode [ 91.686247][ T66] bridge_slave_1: left promiscuous mode [ 91.688147][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.695036][ T66] bridge_slave_0: left allmulticast mode [ 91.697101][ T66] bridge_slave_0: left promiscuous mode [ 91.699153][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.767172][ T8061] futex_wake_op: syz.0.674 tries to shift op by -1; fix this program [ 91.911290][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.916872][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.922050][ T66] bond0 (unregistering): Released all slaves [ 91.967690][ T7923] veth0_vlan: entered promiscuous mode [ 91.972514][ T7923] veth1_vlan: entered promiscuous mode [ 91.988392][ T7923] veth0_macvtap: entered promiscuous mode [ 91.996810][ T7923] veth1_macvtap: entered promiscuous mode [ 92.014455][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.019060][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.024397][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.028750][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.033523][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.037921][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.043950][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.049424][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.052670][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.056387][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.059995][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.063140][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.066273][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.070013][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.078222][ T7923] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.082454][ T7923] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.088862][ T7923] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.092611][ T7923] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.123566][ T7950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.158588][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.161078][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.176030][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.178527][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.277082][ T66] hsr_slave_0: left promiscuous mode [ 92.280483][ T66] hsr_slave_1: left promiscuous mode [ 92.284113][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.287318][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.291249][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.294943][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.333804][ T66] veth1_macvtap: left promiscuous mode [ 92.335759][ T66] veth0_macvtap: left promiscuous mode [ 92.337632][ T66] veth1_vlan: left promiscuous mode [ 92.339426][ T66] veth0_vlan: left promiscuous mode [ 92.353529][ T8088] process 'syz.3.676' launched './file0' with NULL argv: empty string added [ 92.359628][ T40] audit: type=1400 audit(1746376027.610:430): avc: denied { execute_no_trans } for pid=8087 comm="syz.3.676" path="/157/file0" dev="tmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.787722][ T40] audit: type=1400 audit(1746376028.040:431): avc: denied { ioctl } for pid=8101 comm="syz.0.682" path="socket:[22400]" dev="sockfs" ino=22400 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 92.882152][ T66] team0 (unregistering): Port device team_slave_1 removed [ 92.936625][ T66] team0 (unregistering): Port device team_slave_0 removed [ 93.193183][ T5930] Bluetooth: hci0: command tx timeout [ 93.369032][ T40] audit: type=1400 audit(1746376028.620:432): avc: denied { execute } for pid=8106 comm="syz.3.683" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.375775][ T7950] veth0_vlan: entered promiscuous mode [ 93.390362][ T8107] : entered promiscuous mode [ 93.397247][ T40] audit: type=1400 audit(1746376028.650:433): avc: denied { view } for pid=8106 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 93.399331][ T7950] veth1_vlan: entered promiscuous mode [ 93.441690][ T7950] veth0_macvtap: entered promiscuous mode [ 93.450677][ T7950] veth1_macvtap: entered promiscuous mode [ 93.462250][ T40] audit: type=1400 audit(1746376028.710:434): avc: denied { mount } for pid=8108 comm="syz.0.684" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 93.468724][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.474017][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.478773][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.482665][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.488100][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.494694][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.496555][ T8114] overlayfs: failed to resolve './file0': -2 [ 93.500028][ T7950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.506937][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.510324][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.510736][ T8114] overlayfs: failed to resolve './file0': -2 [ 93.514790][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.519878][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.524080][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.527443][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.535332][ T7950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.541141][ T7950] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.544457][ T7950] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.547308][ T7950] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.550687][ T7950] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.611725][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.614892][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.630759][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.633518][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.755698][ T8148] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 93.808741][ T66] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.836082][ T5927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.839690][ T5927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.845226][ T5927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.850083][ T5927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.853097][ T5927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.979170][ T40] audit: type=1400 audit(1746376029.230:435): avc: denied { setopt } for pid=8159 comm="syz.6.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 93.985783][ T8153] chnl_net:caif_netlink_parms(): no params data found [ 94.090324][ T8181] : entered promiscuous mode [ 94.092572][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.101180][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.106556][ T8153] bridge_slave_0: entered allmulticast mode [ 94.108489][ T8181] xt_cgroup: path and classid specified [ 94.112599][ T8153] bridge_slave_0: entered promiscuous mode [ 94.126234][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.128590][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.131856][ T8153] bridge_slave_1: entered allmulticast mode [ 94.135481][ T8153] bridge_slave_1: entered promiscuous mode [ 94.177069][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.187288][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.239038][ T8153] team0: Port device team_slave_0 added [ 94.243515][ T8153] team0: Port device team_slave_1 added [ 94.286173][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.292504][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.301966][ T8153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.306348][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.308734][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.319251][ T8153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.366423][ T8153] hsr_slave_0: entered promiscuous mode [ 94.368631][ T8153] hsr_slave_1: entered promiscuous mode [ 94.370728][ T8153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.374638][ T8153] Cannot create hsr debugfs directory [ 94.575027][ T8153] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 94.591456][ T8153] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 94.603347][ T8153] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 94.607955][ T8153] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 94.660908][ T8153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.675894][ T8153] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.687832][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.690592][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.700241][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.702540][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.826673][ T8153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.843466][ T66] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.964214][ T8153] veth0_vlan: entered promiscuous mode [ 94.970053][ T8153] veth1_vlan: entered promiscuous mode [ 94.979426][ T8249] tmpfs: Unknown parameter 'usrquota0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.979426][ T8249] 0 [ 94.987637][ T8153] veth0_macvtap: entered promiscuous mode [ 95.034569][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.045724][ T8153] veth1_macvtap: entered promiscuous mode [ 95.058742][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.062126][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.068624][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.071992][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.075213][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.078494][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.081492][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.084941][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.088900][ T8153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.099574][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.102342][ T8262] xt_cgroup: path and classid specified [ 95.102793][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.107559][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.110771][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.114175][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.117432][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.120633][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.124218][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.128755][ T8153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.140513][ T8153] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.143691][ T8153] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.146404][ T8153] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.149199][ T8153] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.234340][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.236983][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.250105][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.252627][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.272973][ T5930] Bluetooth: hci0: command tx timeout [ 95.355921][ T8283] xt_l2tp: v2 tid > 0xffff: 150994944 [ 95.359692][ T66] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.412595][ T66] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.501794][ T8308] hpfs: Bad magic ... probably not HPFS [ 95.620273][ T66] bridge_slave_1: left allmulticast mode [ 95.622121][ T66] bridge_slave_1: left promiscuous mode [ 95.625342][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.629281][ T66] bridge_slave_0: left allmulticast mode [ 95.631119][ T66] bridge_slave_0: left promiscuous mode [ 95.633219][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.752778][ T8331] binfmt_misc: register: failed to install interpreter file ./file0 [ 95.913206][ T5930] Bluetooth: hci3: command tx timeout [ 95.928345][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.936681][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.945315][ T66] bond0 (unregistering): Released all slaves [ 96.284100][ T66] hsr_slave_0: left promiscuous mode [ 96.287753][ T66] hsr_slave_1: left promiscuous mode [ 96.289981][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.299392][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.304591][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.307946][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.330650][ T66] veth1_macvtap: left promiscuous mode [ 96.333561][ T66] veth0_macvtap: left promiscuous mode [ 96.335796][ T66] veth1_vlan: left promiscuous mode [ 96.337900][ T66] veth0_vlan: left promiscuous mode [ 96.371777][ T5927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.377102][ T5927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.380635][ T5927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.388656][ T5927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.391502][ T5927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.904366][ T66] team0 (unregistering): Port device team_slave_1 removed [ 96.976771][ T66] team0 (unregistering): Port device team_slave_0 removed [ 97.587873][ T8363] chnl_net:caif_netlink_parms(): no params data found [ 97.672739][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.675581][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.677847][ T8363] bridge_slave_0: entered allmulticast mode [ 97.681000][ T8363] bridge_slave_0: entered promiscuous mode [ 97.692982][ T8363] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.697412][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.699827][ T8363] bridge_slave_1: entered allmulticast mode [ 97.705142][ T8363] bridge_slave_1: entered promiscuous mode [ 97.747183][ T8363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.753659][ T8363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.787949][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 97.787960][ T40] audit: type=1400 audit(1746376033.040:442): avc: denied { mount } for pid=8418 comm="syz.7.755" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 97.788466][ T8419] overlayfs: failed to resolve 'xino=auto': -2 [ 97.790070][ T40] audit: type=1400 audit(1746376033.040:443): avc: denied { mounton } for pid=8418 comm="syz.7.755" path="/5/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 97.790369][ T8363] team0: Port device team_slave_0 added [ 97.792557][ T8363] team0: Port device team_slave_1 added [ 97.833253][ T8363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.835893][ T8363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.845769][ T8363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.849410][ T40] audit: type=1400 audit(1746376033.100:444): avc: denied { unmount } for pid=8153 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 97.853986][ T8363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.857837][ T8363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.867768][ T8363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.912786][ T40] audit: type=1400 audit(1746376033.160:445): avc: denied { create } for pid=8424 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.927138][ T40] audit: type=1400 audit(1746376033.170:446): avc: denied { setopt } for pid=8424 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.934266][ T40] audit: type=1400 audit(1746376033.170:447): avc: denied { bind } for pid=8424 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.956287][ T8363] hsr_slave_0: entered promiscuous mode [ 97.958530][ T8363] hsr_slave_1: entered promiscuous mode [ 97.960586][ T8363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.963248][ T8363] Cannot create hsr debugfs directory [ 97.993019][ T5930] Bluetooth: hci3: command tx timeout [ 98.098432][ T8446] FAULT_INJECTION: forcing a failure. [ 98.098432][ T8446] name failslab, interval 1, probability 0, space 0, times 0 [ 98.104334][ T8446] CPU: 3 UID: 0 PID: 8446 Comm: syz.7.764 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 98.104349][ T8446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.104356][ T8446] Call Trace: [ 98.104359][ T8446] [ 98.104363][ T8446] dump_stack_lvl+0x16c/0x1f0 [ 98.104395][ T8446] should_fail_ex+0x512/0x640 [ 98.104412][ T8446] ? __kvmalloc_node_noprof+0x122/0x600 [ 98.104430][ T8446] should_failslab+0xc2/0x120 [ 98.104441][ T8446] __kvmalloc_node_noprof+0x135/0x600 [ 98.104457][ T8446] ? _kstrtoull+0x145/0x200 [ 98.104466][ T8446] ? seq_read_iter+0x826/0x12c0 [ 98.104482][ T8446] ? seq_read_iter+0x826/0x12c0 [ 98.104496][ T8446] seq_read_iter+0x826/0x12c0 [ 98.104510][ T8446] ? find_held_lock+0x2b/0x80 [ 98.104528][ T8446] seq_read+0x39e/0x4e0 [ 98.104542][ T8446] ? __pfx_seq_read+0x10/0x10 [ 98.104566][ T8446] full_proxy_read+0x13c/0x200 [ 98.104578][ T8446] ? __pfx_full_proxy_read+0x10/0x10 [ 98.104591][ T8446] vfs_read+0x1de/0xc70 [ 98.104608][ T8446] ? __pfx___mutex_lock+0x10/0x10 [ 98.104626][ T8446] ? __pfx_vfs_read+0x10/0x10 [ 98.104647][ T8446] ? __fget_files+0x20e/0x3c0 [ 98.104667][ T8446] ksys_read+0x12a/0x240 [ 98.104681][ T8446] ? __pfx_ksys_read+0x10/0x10 [ 98.104695][ T8446] ? rcu_is_watching+0x12/0xc0 [ 98.104711][ T8446] do_syscall_64+0xcd/0x260 [ 98.104726][ T8446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.104737][ T8446] RIP: 0033:0x7f159998e969 [ 98.104746][ T8446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.104756][ T8446] RSP: 002b:00007f159a7dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.104766][ T8446] RAX: ffffffffffffffda RBX: 00007f1599bb5fa0 RCX: 00007f159998e969 [ 98.104772][ T8446] RDX: 0000000000002020 RSI: 0000200000006380 RDI: 0000000000000003 [ 98.104778][ T8446] RBP: 00007f159a7dc090 R08: 0000000000000000 R09: 0000000000000000 [ 98.104787][ T8446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.104793][ T8446] R13: 0000000000000000 R14: 00007f1599bb5fa0 R15: 00007ffdb4a6ae08 [ 98.104805][ T8446] [ 98.209817][ T1141] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.250749][ T8363] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 98.257807][ T8363] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 98.274724][ T1141] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.281282][ T8363] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 98.288850][ T8363] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 98.312677][ T8363] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.315177][ T8363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.318373][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.320782][ T8363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.338075][ T1141] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.354792][ T40] audit: type=1400 audit(1746376033.610:448): avc: denied { ioctl } for pid=8463 comm="syz.0.772" path="socket:[28863]" dev="sockfs" ino=28863 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.381493][ T8363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.399532][ T1141] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.417375][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.433148][ T8476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.435136][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.441248][ T40] audit: type=1400 audit(1746376033.690:449): avc: denied { create } for pid=8477 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 98.452395][ T40] audit: type=1400 audit(1746376033.700:450): avc: denied { setopt } for pid=8477 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 98.473151][ T5930] Bluetooth: hci0: command tx timeout [ 98.484783][ T8363] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.494797][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.497527][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.500756][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.502962][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.563833][ T1141] bridge_slave_1: left allmulticast mode [ 98.566773][ T1141] bridge_slave_1: left promiscuous mode [ 98.568885][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.573355][ T1141] bridge_slave_0: left allmulticast mode [ 98.575960][ T1141] bridge_slave_0: left promiscuous mode [ 98.578317][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.802944][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.806994][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.810688][ T1141] bond0 (unregistering): Released all slaves [ 98.867968][ T8363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.894515][ T1141] : left promiscuous mode [ 99.065400][ T8363] veth0_vlan: entered promiscuous mode [ 99.071828][ T8363] veth1_vlan: entered promiscuous mode [ 99.086323][ T8363] veth0_macvtap: entered promiscuous mode [ 99.094394][ T8363] veth1_macvtap: entered promiscuous mode [ 99.111955][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.117480][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.121497][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.125452][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.128682][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.132083][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.135521][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.139159][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.144962][ T8363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.172995][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.176168][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.179332][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.182483][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.186550][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.189780][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.192771][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.197332][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.201837][ T8363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.217884][ T1141] hsr_slave_0: left promiscuous mode [ 99.220944][ T1141] hsr_slave_1: left promiscuous mode [ 99.224784][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.228097][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.232636][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.235934][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.260178][ T1141] veth1_macvtap: left promiscuous mode [ 99.262007][ T1141] veth0_macvtap: left promiscuous mode [ 99.265705][ T1141] veth1_vlan: left promiscuous mode [ 99.268312][ T1141] veth0_vlan: left promiscuous mode [ 99.290664][ T8537] xt_cgroup: path and classid specified [ 99.708339][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d386c00: rx timeout, send abort [ 99.711541][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802d386c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.800221][ T8544] overlayfs: failed to clone upperpath [ 99.853204][ C1] ================================================================== [ 99.855767][ C1] BUG: KASAN: global-out-of-bounds in ref_tracker_free+0x562/0x830 [ 99.858252][ C1] Read of size 1 at addr ffffffff9af9a490 by task swapper/1/0 [ 99.862553][ C1] [ 99.863879][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 99.863894][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.863901][ C1] Call Trace: [ 99.863906][ C1] [ 99.863910][ C1] dump_stack_lvl+0x116/0x1f0 [ 99.863928][ C1] print_report+0xc3/0x670 [ 99.863939][ C1] ? __virt_addr_valid+0x5e/0x590 [ 99.863953][ C1] ? __phys_addr+0xc6/0x150 [ 99.863966][ C1] ? ref_tracker_free+0x562/0x830 [ 99.864008][ C1] kasan_report+0xe0/0x110 [ 99.864019][ C1] ? ref_tracker_free+0x562/0x830 [ 99.864033][ C1] ref_tracker_free+0x562/0x830 [ 99.864046][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 99.864058][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 99.864073][ C1] ? in_dev_finish_destroy+0xae/0x1d0 [ 99.864084][ C1] ? inet_rcu_free_ifa+0x93/0xb0 [ 99.864093][ C1] ? rcu_core+0x799/0x14e0 [ 99.864103][ C1] ? handle_softirqs+0x216/0x8e0 [ 99.864115][ C1] ? __irq_exit_rcu+0x109/0x170 [ 99.864126][ C1] ? irq_exit_rcu+0x9/0x30 [ 99.864138][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 99.864150][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.864161][ C1] ? pv_native_safe_halt+0xf/0x20 [ 99.864173][ C1] ? default_idle+0x13/0x20 [ 99.864187][ C1] ? default_idle_call+0x6d/0xb0 [ 99.864200][ C1] ? do_idle+0x391/0x510 [ 99.864211][ C1] ? cpu_startup_entry+0x4f/0x60 [ 99.864223][ C1] ? start_secondary+0x21d/0x2b0 [ 99.864238][ C1] ? common_startup_64+0x13e/0x148 [ 99.864251][ C1] ? lock_acquire+0x179/0x350 [ 99.864273][ C1] in_dev_finish_destroy+0xae/0x1d0 [ 99.864283][ C1] inet_rcu_free_ifa+0x93/0xb0 [ 99.864293][ C1] ? rcu_core+0x797/0x14e0 [ 99.864303][ C1] rcu_core+0x799/0x14e0 [ 99.864314][ C1] ? __pfx_rcu_core+0x10/0x10 [ 99.864325][ C1] handle_softirqs+0x216/0x8e0 [ 99.864338][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 99.864351][ C1] __irq_exit_rcu+0x109/0x170 [ 99.864363][ C1] irq_exit_rcu+0x9/0x30 [ 99.864374][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 99.864386][ C1] [ 99.864390][ C1] [ 99.864394][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.864405][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 99.864418][ C1] Code: 15 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 1a 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 99.864428][ C1] RSP: 0018:ffffc90000177df8 EFLAGS: 00000286 [ 99.864437][ C1] RAX: 00000000000e197b RBX: 0000000000000001 RCX: ffffffff8b6cd419 [ 99.864444][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe1261 RDI: ffffffff8bf482e0 [ 99.864450][ C1] RBP: ffffed1003ad1488 R08: 0000000000000001 R09: ffffed100d4a65bd [ 99.864457][ C1] R10: ffff88806a532deb R11: 0000000000000000 R12: 0000000000000001 [ 99.864463][ C1] R13: ffff88801d68a440 R14: ffffffff90850510 R15: 0000000000000000 [ 99.864471][ C1] ? ct_kernel_exit+0x139/0x190 [ 99.864486][ C1] default_idle+0x13/0x20 [ 99.864499][ C1] default_idle_call+0x6d/0xb0 [ 99.864513][ C1] do_idle+0x391/0x510 [ 99.864525][ C1] ? __pfx_do_idle+0x10/0x10 [ 99.864536][ C1] ? rcu_is_watching+0x12/0xc0 [ 99.864547][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 99.864559][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.864572][ C1] cpu_startup_entry+0x4f/0x60 [ 99.864583][ C1] start_secondary+0x21d/0x2b0 [ 99.864599][ C1] ? __pfx_start_secondary+0x10/0x10 [ 99.864615][ C1] common_startup_64+0x13e/0x148 [ 99.864629][ C1] [ 99.864633][ C1] [ 99.974540][ C1] The buggy address belongs to the variable: [ 99.976433][ C1] binder_devices+0x10/0x40 [ 99.977864][ C1] [ 99.978656][ C1] The buggy address belongs to the physical page: [ 99.980677][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af9a [ 99.983418][ C1] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 99.985843][ C1] raw: 00fff00000002000 ffffea00006be688 ffffea00006be688 0000000000000000 [ 99.988558][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 99.991239][ C1] page dumped because: kasan: bad access detected [ 99.993251][ C1] page_owner info is not present (never set?) [ 99.995128][ C1] [ 99.995892][ C1] Memory state around the buggy address: [ 99.997653][ C1] ffffffff9af9a380: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 100.000214][ C1] ffffffff9af9a400: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 100.002747][ C1] >ffffffff9af9a480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 100.005255][ C1] ^ [ 100.006693][ C1] ffffffff9af9a500: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 100.009224][ C1] ffffffff9af9a580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 [ 100.011685][ C1] ================================================================== [ 100.014168][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 100.016447][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 100.020614][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.024813][ C1] Call Trace: [ 100.026133][ C1] [ 100.027297][ C1] dump_stack_lvl+0x3d/0x1f0 [ 100.029176][ C1] panic+0x71c/0x800 [ 100.030663][ C1] ? __pfx_panic+0x10/0x10 [ 100.032520][ C1] ? __pfx__printk+0x10/0x10 [ 100.034424][ C1] ? end_report+0x4c/0x170 [ 100.036216][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 100.038237][ C1] ? ref_tracker_free+0x562/0x830 [ 100.040231][ C1] check_panic_on_warn+0xab/0xb0 [ 100.042187][ C1] end_report+0x107/0x170 [ 100.043896][ C1] kasan_report+0xee/0x110 [ 100.045726][ C1] ? ref_tracker_free+0x562/0x830 [ 100.047762][ C1] ref_tracker_free+0x562/0x830 [ 100.049727][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 100.051800][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 100.053669][ C1] ? in_dev_finish_destroy+0xae/0x1d0 [ 100.055785][ C1] ? inet_rcu_free_ifa+0x93/0xb0 [ 100.057770][ C1] ? rcu_core+0x799/0x14e0 [ 100.059602][ C1] ? handle_softirqs+0x216/0x8e0 [ 100.061694][ C1] ? __irq_exit_rcu+0x109/0x170 [ 100.063652][ C1] ? irq_exit_rcu+0x9/0x30 [ 100.065432][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 100.067396][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.069364][ C1] ? pv_native_safe_halt+0xf/0x20 [ 100.070895][ C1] ? default_idle+0x13/0x20 [ 100.072319][ C1] ? default_idle_call+0x6d/0xb0 [ 100.073878][ C1] ? do_idle+0x391/0x510 [ 100.075212][ C1] ? cpu_startup_entry+0x4f/0x60 [ 100.076780][ C1] ? start_secondary+0x21d/0x2b0 [ 100.078336][ C1] ? common_startup_64+0x13e/0x148 [ 100.079966][ C1] ? lock_acquire+0x179/0x350 [ 100.081527][ C1] in_dev_finish_destroy+0xae/0x1d0 [ 100.083240][ C1] inet_rcu_free_ifa+0x93/0xb0 [ 100.084879][ C1] ? rcu_core+0x797/0x14e0 [ 100.086319][ C1] rcu_core+0x799/0x14e0 [ 100.087652][ C1] ? __pfx_rcu_core+0x10/0x10 [ 100.089148][ C1] handle_softirqs+0x216/0x8e0 [ 100.090656][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 100.092317][ C1] __irq_exit_rcu+0x109/0x170 [ 100.093787][ C1] irq_exit_rcu+0x9/0x30 [ 100.095162][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 100.096921][ C1] [ 100.097872][ C1] [ 100.098863][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.100731][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 100.102549][ C1] Code: 15 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 1a 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 100.108535][ C1] RSP: 0018:ffffc90000177df8 EFLAGS: 00000286 [ 100.110403][ C1] RAX: 00000000000e197b RBX: 0000000000000001 RCX: ffffffff8b6cd419 [ 100.112868][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe1261 RDI: ffffffff8bf482e0 [ 100.115304][ C1] RBP: ffffed1003ad1488 R08: 0000000000000001 R09: ffffed100d4a65bd [ 100.117745][ C1] R10: ffff88806a532deb R11: 0000000000000000 R12: 0000000000000001 [ 100.120214][ C1] R13: ffff88801d68a440 R14: ffffffff90850510 R15: 0000000000000000 [ 100.122669][ C1] ? ct_kernel_exit+0x139/0x190 [ 100.124224][ C1] default_idle+0x13/0x20 [ 100.125636][ C1] default_idle_call+0x6d/0xb0 [ 100.127183][ C1] do_idle+0x391/0x510 [ 100.128488][ C1] ? __pfx_do_idle+0x10/0x10 [ 100.129953][ C1] ? rcu_is_watching+0x12/0xc0 [ 100.131441][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 100.133312][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.134987][ C1] cpu_startup_entry+0x4f/0x60 [ 100.136563][ C1] start_secondary+0x21d/0x2b0 [ 100.138073][ C1] ? __pfx_start_secondary+0x10/0x10 [ 100.139714][ C1] common_startup_64+0x13e/0x148 [ 100.141225][ C1] [ 100.142959][ C1] Kernel Offset: disabled [ 100.144298][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:27:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000127927 RBX=0000000000000000 RCX=ffffffff8b6cd419 RDX=0000000000000000 RSI=ffffffff8dbe1261 RDI=ffffffff8bf482e0 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90850510 R15=0000000000000000 RIP=ffffffff8b6cbcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f159a7baf98 CR3=00000000382b1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb252811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb252811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb252811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb252811aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb252811b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb252811c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb252983488 00007fb252983480 00007fb252983478 00007fb252983450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2534ed100 00007fb252983440 00007fb252980004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb252983498 00007fb252983490 00007fb252983488 00007fb252983480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f56b5 RDI=ffffffff9adf94e0 RBP=ffffffff9adf94a0 RSP=ffffc900006a0710 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9adf94a0 R15=ffffffff854f5650 RIP=ffffffff854f56df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6adf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c37043d CR3=00000000282c6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599b83488 00007f1599b83480 00007f1599b83478 00007f1599b83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f159a6ed100 00007f1599b83440 00007f1599b80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599b83498 00007f1599b83490 00007f1599b83488 00007f1599b83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000bac53 RBX=0000000000000002 RCX=ffffffff8b6cd419 RDX=0000000000000000 RSI=ffffffff8dbe1261 RDI=ffffffff8bf482e0 RBP=ffffed1003ad1910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d68c880 R14=ffffffff90850510 R15=0000000000000000 RIP=ffffffff8b6cbcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556ea8d808 CR3=000000005a245000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb4a6b190 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010002 RBX=ffff88806a7278c0 RCX=ffffffff81a85ee8 RDX=ffff88801dea0000 RSI=ffffffff81a85ef6 RDI=0000000000000006 RBP=0000001738f851e7 RSP=ffffc900006f8e38 R8 =0000000000000006 R9 =0000001738f79f00 R10=0000001738f851e7 R11=0000000000000000 R12=ffff88806a727840 R13=0000001738f79f00 R14=ffff88806a7281b8 R15=ffff88806a727840 RIP=ffffffff81bb32f8 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f159a7dbf98 CR3=00000000282c6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599a11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599b83488 00007f1599b83480 00007f1599b83478 00007f1599b83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f159a6ed100 00007f1599b83440 00007f1599b83458 00007f1599b834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1599b83498 00007f1599b83490 00007f1599b83488 00007f1599b83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000