last executing test programs: 5.121018548s ago: executing program 0 (id=236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000019580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x7}]}}]}, 0x40}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@gettfilter={0x3c, 0x2e, 0x210, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {0xfff1}, {0xe, 0xa}}, [{0x8}, {0x8, 0xb, 0xfffffffa}, {0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000009c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x38, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000013c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x14) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r10 = accept$alg(r9, 0x0, 0x0) sendmsg$alg(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r10, &(0x7f0000000600), 0xfec8) recvmmsg(r10, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r8], 0x20) r11 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r7, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r11}, 0x20) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 4.929476068s ago: executing program 0 (id=242): clock_gettime(0xfffffff2, &(0x7f0000000000)) r0 = syz_init_net_socket$llc(0x1a, 0x7, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x82}], 0x1, &(0x7f00000000c0)={r1, r2+60000000}, &(0x7f0000000100)={[0xbedb]}, 0x8) 4.055591266s ago: executing program 0 (id=257): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001500010028bd3000fcdbdf30e0000001000000000000000000000000ac1414bb0000000000000000000000004e2300004e210009020020a06c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b56b6e000000000008001f0002000000"], 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x80000001, 0x4, 0x6}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000097"], 0x50) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@buf="182e8f8cbdaa2d9b862abdde44df7531fe253932ed1d1b8b36543831060b1c38168967a608e641fca8f59e167a5e8af0ce86e79769dbca57849ba37d83e75e60eed08e826bdb41cb6425454139452fb2a1bbaff18818ca5afcf6d70cacc7927081cae83c0dd36106d9d1f8b9336312"}, 0x3a) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r4, &(0x7f0000000000), &(0x7f0000000780)=@udp6=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r4, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x12, 0xb05, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) listen(r8, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r10) getsockopt$netrom_NETROM_N2(r10, 0x103, 0x3, &(0x7f0000000080)=0x82a, &(0x7f0000000140)=0x4) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000200)=0xc0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x1, 0x3, [0x3]}}) 3.900108623s ago: executing program 0 (id=258): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="122110fe010000402505a1a4400102030d090200"], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) request_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffb) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) preadv(r2, &(0x7f0000000880)=[{&(0x7f0000000080)=""/202, 0xca}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000000200)=""/192, 0xc0}, {&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000540)=""/225, 0xe1}, {&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f0000000780)=""/220, 0xdc}], 0x9, 0xc, 0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={r4, @in={{0x2, 0x4e23, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) syz_usb_disconnect(r1) 2.940438084s ago: executing program 2 (id=261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r7 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r8}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r8, 0x0, 0x0, 0xce2c, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010055, 0x0, 0x4}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNAPSHOT_CREATE_IMAGE(r8, 0x40043311, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) 2.91752761s ago: executing program 2 (id=270): r0 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x5}, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1040, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, &(0x7f00000005c0)="d6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@tipc=@name, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000400)=""/135, 0x87}], 0x2, &(0x7f0000000280)=""/20, 0x14}, 0x7}, {{&(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000700)=""/109, 0x6d}], 0x2, &(0x7f0000000780)=""/204, 0xcc}, 0x3ff}, {{&(0x7f0000000880)=@ax25={{0x3, @rose}, [@netrom, @bcast, @netrom, @rose, @bcast, @default, @null, @netrom]}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/245, 0xf5}, {&(0x7f0000000580)=""/14, 0xe}, {&(0x7f0000000a00)=""/182, 0xb6}, {&(0x7f0000000ac0)=""/101, 0x65}, {&(0x7f00000012c0)=""/245, 0xf5}], 0x5, &(0x7f0000000cc0)=""/255, 0xff}, 0x10000}, {{&(0x7f0000000dc0)=@tipc=@id, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e40)=""/125, 0x7d}, {&(0x7f0000000ec0)=""/188, 0xbc}, {&(0x7f0000000f80)=""/81, 0x51}, {&(0x7f0000001b80)=""/4096, 0x1000}, {0xfffffffffffffffd}], 0x5}, 0x1ff}, {{&(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001100)}, 0x1}], 0x6, 0x40010041, 0x0) ioctl$VT_OPENQRY(r2, 0x4bfb, &(0x7f00000002c0)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0xaad, 0xc7, 0x71d, 0x1, 0x5, "6e33559fca222b8528d1db6332fead865fb043"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) 1.899978526s ago: executing program 2 (id=280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)={0x1318, 0x2f, 0x10, 0x70bd2c, 0x25dfdbfd, {0x3}, [@generic="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", @generic="43287cafe474f8acfce38261e4ce31bf734a95422b7bf3c9e9b059332b7e6225e80e8ece7e920ebdf99f1633cecd94e32c953814320d42c6f1756ca36bd595f5e7d67ebbb152fb7c1cfc012a20b09c483557ff32182aaf3abcd7d3565fd4ba541a0d5fc7da8ae464a43b5bda39ed4ef3688cc8e1497e4c625eeca7ae9184c3a3a4ad38e3bc568b5d1e5c2401d87945f35cf3ab6497fdfd22361c06b2052df179958bd3ff632aec9a9ee92e84eba22d4369825e76cdd48722849c1d512886917b55", @nested={0xf5, 0x4b, 0x0, 0x1, [@generic="bb1bb36df6398cbea6c0bd291c32806c921465a8f681efc03d4a2b7f7ce1ec2788a76df62e93691b2162c9f7ddd1a46897ca805687d540493d0cd702592bd9a6b51518cf9089d1e83027c21fffd215d26cb34584e0f7b45cde75e7b593d482f40c436dadf663481f3eadd0dd0eedcfab9bd36fc1f5598d14127cdc629666cb933b1f63b59425de206604e7cb83d1758f64e5e3a55ca4f2189b7e10fd05887c0bdfc4b0629b29a17cccfbc933ffcd46b6556ac99abfc2df8ec1375a49", @generic="4919a9d792d724414e584dd086774811d00db4ea267e4a7030bdcceb6f6e3ae3c1947303dcdef2a7e1181454cbac34a914", @nested={0x4, 0xe5}]}, @generic="db33c6b7a296547ee134b2991bae2521dec19f5de472e7c2401bb8f98157381af833f30e249dc43f93179016da88353fd804baa7c62c14d0cf49318bf4b98ca6d18da9c3b78145ce029d271eb45fe0283397413b85db9e1632d53f10a8f6b3ef05bfea4e697d84010bbc008065a929ab8737db4ef069c688dd26ba4f5abd7f83438e6ad38698d4474f5f7bdc38c5fa38547f48e065799ad6cd62e8692d689fa74ed73079e78820e6e1852f69303107de30c8d33f311abbb039c69bdf66ce9bdb9981ff02aff2d02255b2adc7edcf8fc63f0180564d8876", @generic="4ad2b097f8ae19430ce95896741f6b79a4bec5ce0f9e15ae8062a4b87d8c45bd4fafa6e521f7070a3e5a6fd2d9fc733152f9134068f27b7fe0fe9b5eecdfdb0091d79bf4286b143ab44bc17b70e5e47638beab87852a938dbec60d87c7b1d93101bf9ac52b63824187181e93009cf353e54edd1d"]}, 0x1318}}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) 1.788829306s ago: executing program 2 (id=284): socket$nl_generic(0x10, 0x3, 0x10) rt_sigaction(0x15, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000740)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x101202, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r2, 0x7) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x1) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0xfffffffe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000080)=0x80000001, 0x4) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x3c}}, 0x0) sendmmsg$inet(r3, &(0x7f0000002b00)=[{{&(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @private=0xa010100}}}], 0x20}}], 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 891.070405ms ago: executing program 2 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_setup(0x640b, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x20000000, 0x2}, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000640)=""/147, 0x93}], 0x1, 0xfffe, 0xfff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYRESOCT=r1], 0x14}}, 0x0) 890.511459ms ago: executing program 0 (id=296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) connect$pppl2tp(r1, &(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x0, 0x3, {0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}}, 0x3a) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340), &(0x7f0000000400)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r3 = socket(0x23, 0x80805, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000840)) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x0, {0xfffffffc, 0x7, 0xa, 0x8000}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x2f4, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x38, 0x8}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x7f}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x29f, 0x2a, [@fast_bss_trans={0x37, 0x78, {0x6, 0x2, "56537e47353ebe6f37ff2dc7e16fd695", "cd56f0a294b612b874e9d7bf136f63457a8c560772710924c9840f226412d9bc", "275f67baea8de45ac2bdd4b2e5d434d46df79687d6195ed4007b7b5314a4ba73", [{0x2, 0x13, "1211936b22c72a7f6ed3c2045f939c9732de75"}, {0x1, 0xf, "f508cc70b4e00235cec088dd409be1"}]}}, @mesh_chsw={0x76, 0x6, {0x3, 0x4, 0x10, 0x3}}, @gcr_ga={0xbd, 0x6}, @random={0x2, 0x60, "fd01f92cf030aa16c1af5a112f14b7a0b62d0fb048e1852de9d343f929f1565f3d584cadd9003e90ce3fd3bdd700e9b799cb5234ff55fc31e233c39c41c68123bc38d2673ee19ee10697aba236dbe61a3708c2190bc96b2c92ac393f33b7806b"}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @measure_req={0x26, 0x4c, {0x7, 0x0, 0x0, "a1da3111cf7654087dafccc515bb44df0fd75c416fdd4ae0282b54e2f9fb5bec111c4ba77d78fb8828342ff6f4964bdfb3ed927004b1757e86ed6cf719931d3d25f3972e15131a335e"}}, @perr={0x84, 0xd5, {0x8, 0xd, [{{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x15}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x21}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x3e}, {{}, @device_a, 0x6, @void, 0x18}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x19}, {{}, @broadcast, 0x1, @void, 0xf}, {{0x0, 0x1}, @device_b, 0xc9, @value=@broadcast, 0x11}, {{0x0, 0x1}, @device_b, 0x62b, @value=@broadcast, 0x21}, {{}, @broadcast, 0x9, @void, 0x30}, {{}, @device_a, 0xd458, @void, 0x20}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x3f}, {{}, @device_a, 0x7, @void, 0x11}, {{}, @device_b, 0x5, @void, 0x3c}]}}, @cf={0x4, 0x6, {0x2d, 0x4, 0xc, 0x7}}, @preq={0x82, 0x7d, {{0x0, 0x0, 0x1}, 0x9, 0x0, 0x2, @device_a, 0x4a13, @void, 0x1, 0x0, 0x9, [{{0x0, 0x0, 0x1}, @device_a, 0x10}, {{0x0, 0x0, 0x1}, @broadcast}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{}, @device_b}, {{}, @device_a, 0xd58}, {{0x0, 0x0, 0x1}, @device_b, 0x1}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0xb4}]}}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x3c}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x34}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) listen(r3, 0x0) socket$alg(0x26, 0x5, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x0, 0x0) accept$ax25(r3, 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat(0xffffffffffffffff, 0x0, 0x105000, 0x6) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000f00)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_ev_le_phy_update_complete={{}, {0x0, 0xc8, 0x6, 0xeb}}}}, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000005c0)={'gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0x5c, 0x3, {{0x2b, 0x4, 0x3, 0x4, 0xac, 0x65, 0x0, 0x6, 0x29, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0x2c, 0x24, 0x1, 0x9, [{@multicast1, 0x8}, {@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x7}, {@local, 0x6}]}, @lsrr={0x83, 0x1f, 0xe5, [@multicast1, @multicast2, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @rr={0x7, 0x3, 0xe7}, @rr={0x7, 0x23, 0xf9, [@local, @private=0xa010101, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, @rand_addr=0x64010101, @loopback]}, @timestamp_prespec={0x44, 0x24, 0x4c, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xd7f5}, {@empty, 0x8}, {@local, 0xd}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {0x8, 0x6}, {0xe, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendto(r2, &(0x7f0000000700)="4135d62174741bd347028fdef99a6ede0b1360aa85ec52c521e8bd3ee8969ee4885b751c1331d0aa77de56588a88f68b6bc667954d73369cc7dd2f9949260bfe58d598ddf4e76dc376dcbdf3c97633cb44c810bb350e35ab01e4cca649a5e91e2b873c79a4abfce7380f3d09f1461a1a39e5033b5f0a0b90e62bc446114df8b6a23621f9e21c06340d766fe3de404509c500", 0x92, 0x80, &(0x7f00000007c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) 840.927069ms ago: executing program 2 (id=297): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1ffc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') linkat(r3, &(0x7f0000000380)='./file1\x00', r3, &(0x7f00000003c0)='./bus\x00', 0x400) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) 840.282919ms ago: executing program 0 (id=298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc02063a1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x12ed, &(0x7f0000005f40)=ANY=[@ANYBLOB="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"], &(0x7f0000002200)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x201, 0x1, 0x81, 0x1, 0x20, 0x2c}, 0x4d, &(0x7f0000002340)=ANY=[@ANYBLOB="050f4d0003141004065fd4a28758ccb16501074f074465a752a8b220100a7f6500000000f00000ff000000c03f00003000ff0000c0000000c000001410043c4153720a5aab2c2c7a3677fdeb2ea8f8"]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) recvmmsg(r7, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) sendto$inet6(r3, &(0x7f0000002240)="e72ea4c1f0a1a7cae882e33ae67d40ae9654f0097a7ffdfffe4a2cc4db88255809688720f31ae3d543fc74919ca56613b8c822edbeba9f966a968b8b5d021b3824fb74c2ff0e001e0148ba1251ccc01e82f76475f7f51a99a6ee4acca20b63dca719ec6cdffe5400494f4f104657109f88cc98e5bc0d8262a8888cb34671beda4eb1eefb7529df2f0ab46e37c8238bd1d925b6bd679ab943c2", 0x99, 0x24008800, &(0x7f0000002300)={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x5}, 0x1c) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000039c0)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/158, 0x9e}], 0x1, &(0x7f0000000400)=""/232, 0xe8}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000500)=""/60, 0x3c}, {&(0x7f0000000540)=""/68, 0x44}, {&(0x7f00000005c0)=""/240, 0xf0}], 0x4}, 0x400}, {{&(0x7f0000000700)=@nl, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/144, 0x90}, {&(0x7f0000000840)=""/124, 0x7c}, {&(0x7f00000008c0)=""/154, 0x9a}, {&(0x7f0000000980)=""/93, 0x5d}], 0x4}, 0x5}, {{&(0x7f0000000a40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000ac0)=""/127, 0x7f}, {&(0x7f0000000b40)=""/61, 0x3d}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000002180)=""/101, 0x65}, {&(0x7f0000000d00)}], 0x5, &(0x7f0000000dc0)=""/120, 0x78}, 0x5}, {{&(0x7f0000000e40)=@generic, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000ec0)=""/116, 0x74}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000f80)=""/168, 0xa8}, {&(0x7f0000001040)=""/2, 0x2}, {&(0x7f0000001080)=""/165, 0xa5}, {&(0x7f0000001140)=""/227, 0xe3}, {&(0x7f0000001340)=""/244, 0xf4}, {&(0x7f0000001240)=""/144, 0x90}], 0x6, &(0x7f0000001a80)=""/138, 0x8a}, 0x800}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b40)=""/64, 0x40}, {&(0x7f0000001b80)=""/213, 0xd5}, {&(0x7f0000001c80)=""/39, 0x27}], 0x3, &(0x7f0000001d00)=""/184, 0xb8}}, {{&(0x7f0000001dc0)=@ax25={{0x3, @bcast}, [@bcast, @default, @null, @default, @netrom, @bcast, @null, @netrom]}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001e40)=""/66, 0x42}, {&(0x7f0000001ec0)=""/122, 0x7a}, {&(0x7f0000001f40)=""/152, 0x98}, {&(0x7f0000002000)=""/165, 0xa5}], 0x4}, 0xffff}, {{&(0x7f0000002100)=@xdp, 0x80, &(0x7f0000003240)=[{&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000003180)=""/157, 0x9d}], 0x2, &(0x7f0000003280)=""/28, 0x1c}, 0x8}, {{&(0x7f00000032c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003340)=""/99, 0x63}, {&(0x7f00000033c0)=""/202, 0xca}, {&(0x7f00000034c0)=""/66, 0x42}, {&(0x7f0000003540)=""/3, 0x3}, {&(0x7f0000003580)=""/188, 0xbc}, {&(0x7f0000003640)=""/191, 0xbf}, {&(0x7f0000003700)=""/185, 0xb9}, {&(0x7f00000037c0)=""/108, 0x6c}], 0x8, &(0x7f00000038c0)=""/237, 0xed}, 0x1}], 0xa, 0x2, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) ioctl$SIOCAX25GETINFO(r8, 0x89ed, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000071120600000000009500008000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socket$kcm(0xa, 0x3, 0x3a) 568.948505ms ago: executing program 1 (id=301): r0 = socket(0xb, 0x803, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000003c0)=[@cpuid={0x2, 0x18, {0x6, 0x8c}}, @code={0x1, 0x51, {"c4e165dad6b9980000400f320f096465d1cfb9a20100000f3266bad104ec0f06660f3881990060000066baf80cb8ccc01687ef66bafc0cb002eec4a1d5dc0468"}}, @cpuid={0x2, 0x18, {0x0, 0x7fffffff}}, @uexit={0x0, 0x18, 0x100000000}, @code={0x1, 0x84, {"0fc774356466ba4200b829310000ef65f3460f70eb5766baf80cb882da158aef66bafc0c66b8b20f66efb9d4080000b844910000ba000000000f30440f20c03505000000440f22c0b9800000c00f3235000100000f3066ba4300b0b1ee490fc72cb4b981020000b800000000ba000000000f30"}}, @code={0x1, 0x87, {"0f08c744240000380000c74424022f000000c7442406000000000f011424c744240005000000c744240201000000c7442406000000000f011424360f01c566b8f2000f00d8656d66400f3880430066b810008ed0c74424000d000000c744240200000000c7442406000000000f0114248f0838cd3300"}}, @code={0x1, 0x51, {"0f01b9110000006436440f08440f086566400f350f0092ab9700000ff495959cb6e70f794a00460f01c9420f2e8a129f0000b9800000c00f3235000100000f30"}}, @code={0x1, 0x7e, {"0f20c035000004000f22c066470f3802196464660f2fcd66baf80cb8784c5988ef66bafc0cedb9800000c00f3235000800000f30672e66410f3a092f00c744240003000000c74424022b70f2afff1c24c4427dcf25060000000f20e035000002000f22e066460f62a208000000"}}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0x1000, 0x494d}}, @code={0x1, 0x52, {"470f01b30f000000410f21870f300f20e035020000000f22e026410f01c20f01ca8fcab012ce392a6167c4c1f5e32ab9800000c00f3235002000000f30640f01c3"}}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x2, 0x18, {0x7, 0x1}}, @uexit={0x0, 0x18, 0x800}, @cpuid={0x2, 0x18, {0xe59, 0x3}}], 0x385}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000100)={0x3, 0x0, [{0x40000000, 0x1, 0x2, 0x7fffffff, 0x6, 0x2, 0x10100}, {0x40000019, 0x6, 0x0, 0x9, 0x6, 0x1, 0xfff}, {0x80000008, 0x3, 0x2, 0x4042438f, 0x8, 0x1}]}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x0, 0x5}) 568.39289ms ago: executing program 1 (id=303): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000140)) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f00000029c0)=0x2, 0x4) 467.57527ms ago: executing program 1 (id=304): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) syz_clone(0x100, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0) (async) syz_clone(0x100, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x9}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090a000000000000000000000002001300030000002cbd700001350000030005000000000002000200ac1414030000000000000000030006000000000002"], 0x50}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090a000000000000000000000002001300030000002cbd700001350000030005000000000002000200ac1414030000000000000000030006000000000002"], 0x50}}, 0x0) dup3(r1, r0, 0x0) (async) dup3(r1, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r5, 0x4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$inet(r6, 0x0, 0x0, 0x0) (async) accept4$inet(r6, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 389.378323ms ago: executing program 1 (id=306): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0002000000800000140012800900010076657468000000000400028008001300", @ANYRES32=r3, @ANYBLOB="02db4e718e6fcaa837aaf1ed5b85d020bf947d0d34d716f8a21c496d379a5f8699d15748259e1763708283d8df7574359abb070ce2243bb2ef32f21494cbf97db7d275952a3589a92ea96602f0fa602fb32842a109276f0d42f03263919d29ab72a4f7a7417d19996fefb3ac79a160286b8f42430a7b86db60c8128dd900b836393cbcda6cf2a1683362"], 0x3c}}, 0x8000) 289.578046ms ago: executing program 3 (id=308): mkdir(&(0x7f0000000080)='./file1\x00', 0xe0) mkdir(&(0x7f0000000040)='./file1\x00', 0x18d) lstat(&(0x7f0000000840)='./file1\x00', &(0x7f0000000880)) r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ptrace$pokeuser(0x6, r3, 0x358, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 289.380531ms ago: executing program 1 (id=309): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x2, 0x8}, {0x6, 0x9}}, ["", "", ""]}, 0x24}}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x58, r1, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x55}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x137}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8804) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 221.047847ms ago: executing program 3 (id=310): utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) 220.803864ms ago: executing program 1 (id=311): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200480, 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 220.270189ms ago: executing program 3 (id=312): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 150.620704ms ago: executing program 3 (id=313): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000002c0)=0xa0000) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8995, &(0x7f00000001c0)={'bond0\x00', @ifru_names='veth0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffff08ff00000000000000000d0001a77564703a73797a3200000000"], 0x54}}, 0x8040) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x80}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ppoll(&(0x7f0000000440)=[{r1, 0xc209}, {r2, 0x74f0}, {r3, 0x400}, {r0, 0xc430}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x100}, {r3, 0x5004}, {r0, 0x10}], 0x8, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000ab45f8bf665eca2cad00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x24040814}, 0xc000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r8) sendmsg$alg(r8, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x340000c1) r9 = socket(0x10, 0x1, 0xfffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x2, 0x8, 0xdfe, 0xa4, 0x100, 0xebf, 0x2b1}}}}]}, 0x58}}, 0x4044880) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0xfffffffc, {0x60, 0x0, 0x0, r11, {0x0, 0x3}, {0xd, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}}, 0x800) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000040)="e65d6e6a413b", 0x6, 0x8090, 0x0, 0x0) 150.004795ms ago: executing program 3 (id=314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000080)={0x5, 0x0, 0x4, 0xfc6e, 0x0, "6a04023a0f3a5b349d3600", 0xffffff61}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x3) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r4 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x40050) (async) ioctl$RTC_WKALM_RD(r4, 0x40187013, &(0x7f0000000280)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', r3, 0x8, 0x10, 0xbb, 0x3, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x68, 0x0, 0x7, 0x2f, 0x0, @empty, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) times(0xfffffffffffffffe) (async, rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400635972478dbd903f7000fcdbdf251d01040008000a00", @ANYRES32=r8, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x40050) (async, rerun: 32) mknod$loop(&(0x7f0000000040)='./file0/file0\x00', 0x2000, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) (async, rerun: 32) r10 = userfaultfd(0x801) (rerun: 32) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1c0}) (async) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r10, 0xc028aa03, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000010003904fcffffff0000000000000000", @ANYRES64=r6, @ANYBLOB="00000000422200042c001280080001009e0065002000028008000500bb7e00000800040006a8cd38a21c7390918da9be061883ca91e9b7e9a51a4329de4df40b8b77e52b68ddf7e1e4a2a06d463b4a1ef15c7bee3e4252175b600bfb7346da226363ec1fbcdea17e0f3ce13e30b8606bbaede20fde1e77672dde112f6af10fd467d1ae1d544b74210c9032472e5671e286008afec4c197d0abbc9adbeec96622c3825e4f2613ff0a9419697daae80bd04ba524620825841ec57b413cb5eeafb4d87ad9a1253fb81cd89d80e4530c726348471ccb4fcf8fed0abb93b35c840da97ad580216a1110984aa85b9cd2cdac2aac2005f92ff472a32edbfb01ef8dc419977d9cfc402e60196b5c009e80bd", @ANYRESDEC=r4], 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x844) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) 0s ago: executing program 3 (id=315): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000040)='./control\x00') r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(&(0x7f0000000100)='./control\x00', 0x184) (fail_nth: 24) kernel console output (not intermixed with test programs): [ 43.642106][ T40] audit: type=1400 audit(1751162894.009:60): avc: denied { rlimitinh } for pid=5858 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.648515][ T40] audit: type=1400 audit(1751162894.009:61): avc: denied { siginh } for pid=5858 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 81.357413][ T1337] cfg80211: failed to load regulatory.db [ 362.687421][ T40] audit: type=1400 audit(1751163213.079:62): avc: denied { write } for pid=5975 comm="sftp-server" path="pipe:[4031]" dev="pipefs" ino=4031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Warning: Permanently added '[localhost]:48263' (ED25519) to the list of known hosts. [ 363.981521][ T40] audit: type=1400 audit(1751163214.369:63): avc: denied { name_bind } for pid=5978 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 364.031078][ T40] audit: type=1400 audit(1751163214.419:64): avc: denied { execute } for pid=5979 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 364.039766][ T40] audit: type=1400 audit(1751163214.419:65): avc: denied { execute_no_trans } for pid=5979 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 366.077996][ T40] audit: type=1400 audit(1751163216.469:66): avc: denied { mounton } for pid=5979 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 366.081114][ T5979] cgroup: Unknown subsys name 'net' [ 366.087122][ T40] audit: type=1400 audit(1751163216.469:67): avc: denied { mount } for pid=5979 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 366.097447][ T40] audit: type=1400 audit(1751163216.489:68): avc: denied { unmount } for pid=5979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 366.248738][ T5979] cgroup: Unknown subsys name 'cpuset' [ 366.254901][ T5979] cgroup: Unknown subsys name 'rlimit' [ 366.412257][ T40] audit: type=1400 audit(1751163216.799:69): avc: denied { setattr } for pid=5979 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.419398][ T40] audit: type=1400 audit(1751163216.799:70): avc: denied { create } for pid=5979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 366.426910][ T40] audit: type=1400 audit(1751163216.799:71): avc: denied { write } for pid=5979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 366.467278][ T5981] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 367.121301][ T5979] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 370.484565][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 370.484582][ T40] audit: type=1400 audit(1751163220.869:80): avc: denied { execmem } for pid=5985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 370.695583][ T40] audit: type=1400 audit(1751163221.079:81): avc: denied { create } for pid=5988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.701719][ T40] audit: type=1400 audit(1751163221.079:82): avc: denied { read write } for pid=5988 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 370.709170][ T40] audit: type=1400 audit(1751163221.079:83): avc: denied { open } for pid=5988 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 370.719558][ T40] audit: type=1400 audit(1751163221.099:84): avc: denied { ioctl } for pid=5988 comm="syz-executor" path="socket:[6479]" dev="sockfs" ino=6479 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.768604][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.779088][ T5999] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.779403][ T6002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.781887][ T5999] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.783947][ T5994] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.784813][ T6002] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.785225][ T5994] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.785796][ T5994] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.786477][ T5994] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.786797][ T5994] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.787231][ T5999] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.788278][ T6000] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.788902][ T6000] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.790104][ T6000] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.793135][ T5999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.794961][ T6000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.795591][ T40] audit: type=1400 audit(1751163221.179:85): avc: denied { read } for pid=5992 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 370.795628][ T40] audit: type=1400 audit(1751163221.179:86): avc: denied { open } for pid=5992 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 370.795662][ T40] audit: type=1400 audit(1751163221.179:87): avc: denied { mounton } for pid=5992 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 370.798979][ T5999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.813138][ T6002] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.814735][ T5999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.820313][ T6002] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.024677][ T40] audit: type=1400 audit(1751163221.409:88): avc: denied { module_request } for pid=5997 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 371.063253][ T5997] chnl_net:caif_netlink_parms(): no params data found [ 371.167328][ T5988] chnl_net:caif_netlink_parms(): no params data found [ 371.208141][ T5992] chnl_net:caif_netlink_parms(): no params data found [ 371.288673][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.291463][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.293720][ T5997] bridge_slave_0: entered allmulticast mode [ 371.297373][ T5997] bridge_slave_0: entered promiscuous mode [ 371.301082][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.303316][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.305463][ T5997] bridge_slave_1: entered allmulticast mode [ 371.308417][ T5997] bridge_slave_1: entered promiscuous mode [ 371.385871][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.388064][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.390248][ T5992] bridge_slave_0: entered allmulticast mode [ 371.392749][ T5992] bridge_slave_0: entered promiscuous mode [ 371.416663][ T5997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.452673][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.455070][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.457829][ T5988] bridge_slave_0: entered allmulticast mode [ 371.460707][ T5988] bridge_slave_0: entered promiscuous mode [ 371.463670][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.466091][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.468400][ T5992] bridge_slave_1: entered allmulticast mode [ 371.470892][ T5992] bridge_slave_1: entered promiscuous mode [ 371.489566][ T5997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.509670][ T5995] chnl_net:caif_netlink_parms(): no params data found [ 371.514126][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.517138][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.519386][ T5988] bridge_slave_1: entered allmulticast mode [ 371.521936][ T5988] bridge_slave_1: entered promiscuous mode [ 371.556230][ T5992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.564826][ T5992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.587443][ T5997] team0: Port device team_slave_0 added [ 371.632581][ T5988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.660129][ T5997] team0: Port device team_slave_1 added [ 371.681304][ T5988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.742212][ T5992] team0: Port device team_slave_0 added [ 371.799018][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.801842][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.813430][ T5997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.820127][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.822948][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.833755][ T5997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.840571][ T5992] team0: Port device team_slave_1 added [ 371.846304][ T5988] team0: Port device team_slave_0 added [ 371.897764][ T5988] team0: Port device team_slave_1 added [ 371.951778][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.954917][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.960475][ T5995] bridge_slave_0: entered allmulticast mode [ 371.964420][ T5995] bridge_slave_0: entered promiscuous mode [ 371.970012][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.972664][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.981019][ T5992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.013941][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.016416][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.018684][ T5995] bridge_slave_1: entered allmulticast mode [ 372.021282][ T5995] bridge_slave_1: entered promiscuous mode [ 372.023956][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.026345][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.034343][ T5992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.069455][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.071662][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.080156][ T5988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.153540][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.157615][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.166235][ T5988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.175238][ T5995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.183591][ T5997] hsr_slave_0: entered promiscuous mode [ 372.186230][ T5997] hsr_slave_1: entered promiscuous mode [ 372.237767][ T5992] hsr_slave_0: entered promiscuous mode [ 372.240942][ T5992] hsr_slave_1: entered promiscuous mode [ 372.243833][ T5992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.247085][ T5992] Cannot create hsr debugfs directory [ 372.250811][ T5995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.335117][ T5995] team0: Port device team_slave_0 added [ 372.358321][ T5988] hsr_slave_0: entered promiscuous mode [ 372.361423][ T5988] hsr_slave_1: entered promiscuous mode [ 372.364348][ T5988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.367553][ T5988] Cannot create hsr debugfs directory [ 372.386123][ T5995] team0: Port device team_slave_1 added [ 372.459741][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.462596][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.471938][ T5995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.480048][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.482919][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.492983][ T5995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.645136][ T5995] hsr_slave_0: entered promiscuous mode [ 372.649498][ T5995] hsr_slave_1: entered promiscuous mode [ 372.651536][ T5995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.653879][ T5995] Cannot create hsr debugfs directory [ 372.806672][ T6002] Bluetooth: hci1: command tx timeout [ 372.827886][ T5992] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 372.840211][ T5992] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 372.850089][ T5992] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 372.861935][ T5992] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 372.875765][ T6002] Bluetooth: hci0: command tx timeout [ 372.876145][ T5298] Bluetooth: hci3: command tx timeout [ 372.876186][ T5999] Bluetooth: hci2: command tx timeout [ 372.891134][ T5997] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.897330][ T5997] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 372.902178][ T5997] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 372.906994][ T5997] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 372.953311][ T5988] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.960941][ T5988] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.965106][ T5988] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 372.969509][ T5988] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.036496][ T5995] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 373.040748][ T5995] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 373.050319][ T5995] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 373.065204][ T5995] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 373.089351][ T5992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.118517][ T5997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.138816][ T5992] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.154170][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.157423][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.184225][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.187377][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.202992][ T5997] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.217796][ T5988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.223190][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.226284][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.246836][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.249900][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.286906][ T5988] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.313362][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.316495][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.337605][ T40] audit: type=1400 audit(1751163223.729:89): avc: denied { sys_module } for pid=5992 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 373.341115][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.346769][ T6062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.352249][ T5995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.372010][ T5995] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.395115][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.398247][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.414348][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.417296][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.478582][ T5992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.515370][ T5997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.530968][ T5992] veth0_vlan: entered promiscuous mode [ 373.545038][ T5992] veth1_vlan: entered promiscuous mode [ 373.569927][ T5997] veth0_vlan: entered promiscuous mode [ 373.582081][ T5988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.585475][ T5997] veth1_vlan: entered promiscuous mode [ 373.600988][ T5992] veth0_macvtap: entered promiscuous mode [ 373.609830][ T5992] veth1_macvtap: entered promiscuous mode [ 373.614711][ T5995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.633063][ T5997] veth0_macvtap: entered promiscuous mode [ 373.647062][ T5997] veth1_macvtap: entered promiscuous mode [ 373.652883][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.669946][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.673073][ T5988] veth0_vlan: entered promiscuous mode [ 373.680494][ T5992] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.684168][ T5992] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.688583][ T5992] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.692120][ T5992] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.701721][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.709484][ T5988] veth1_vlan: entered promiscuous mode [ 373.717835][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.733461][ T5995] veth0_vlan: entered promiscuous mode [ 373.737335][ T5997] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.740114][ T5997] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.742830][ T5997] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.746360][ T5997] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.760874][ T5995] veth1_vlan: entered promiscuous mode [ 373.779631][ T5988] veth0_macvtap: entered promiscuous mode [ 373.801216][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.804010][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.809796][ T5988] veth1_macvtap: entered promiscuous mode [ 373.838374][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.840956][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.859243][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.863916][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.866014][ T5995] veth0_macvtap: entered promiscuous mode [ 373.867941][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.882997][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.889037][ T5988] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.892492][ T5988] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.895486][ T5988] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.898583][ T5988] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.901618][ T5992] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 373.909442][ T5995] veth1_macvtap: entered promiscuous mode [ 373.921791][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.924951][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.943611][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.951490][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.969645][ T5995] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.973237][ T5995] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.977552][ T5995] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.981205][ T5995] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.019233][ T6084] capability: warning: `syz.0.5' uses deprecated v2 capabilities in a way that may be insecure [ 374.029289][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.032657][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.072970][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.078769][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.089757][ T6091] tmpfs: Unknown parameter 'usáŸD“ðáû¥rqk_hardmf¬žñw¯' [ 374.094892][ T6062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.103128][ T6062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.128090][ T6062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.131188][ T6062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.168494][ T6093] FAULT_INJECTION: forcing a failure. [ 374.168494][ T6093] name failslab, interval 1, probability 0, space 0, times 1 [ 374.174307][ T6093] CPU: 2 UID: 0 PID: 6093 Comm: syz.1.2 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 374.174330][ T6093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 374.174341][ T6093] Call Trace: [ 374.174348][ T6093] [ 374.174355][ T6093] dump_stack_lvl+0x16c/0x1f0 [ 374.174383][ T6093] should_fail_ex+0x512/0x640 [ 374.174404][ T6093] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 374.174429][ T6093] should_failslab+0xc2/0x120 [ 374.174452][ T6093] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 374.174483][ T6093] ? __kernfs_new_node+0xd2/0x8e0 [ 374.174513][ T6093] __kernfs_new_node+0xd2/0x8e0 [ 374.174540][ T6093] ? __pfx___kernfs_new_node+0x10/0x10 [ 374.174569][ T6093] ? find_held_lock+0x2b/0x80 [ 374.174591][ T6093] ? kernfs_root+0xee/0x2a0 [ 374.174620][ T6093] kernfs_new_node+0x13c/0x1e0 [ 374.174653][ T6093] __kernfs_create_file+0x53/0x350 [ 374.174677][ T6093] cgroup_addrm_files+0x546/0xc20 [ 374.174715][ T6093] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 374.174743][ T6093] ? css_next_child+0xcf/0x2d0 [ 374.174762][ T6093] ? css_next_descendant_pre+0x58/0x1a0 [ 374.174782][ T6093] css_populate_dir+0x343/0x580 [ 374.174810][ T6093] cgroup_mkdir+0x5cb/0x11f0 [ 374.174834][ T6093] ? __pfx_cgroup_mkdir+0x10/0x10 [ 374.174854][ T6093] kernfs_iop_mkdir+0x10e/0x190 [ 374.174880][ T6093] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 374.174907][ T6093] vfs_mkdir+0x593/0x8c0 [ 374.174930][ T6093] do_mkdirat+0x304/0x3e0 [ 374.174957][ T6093] ? __pfx_do_mkdirat+0x10/0x10 [ 374.174984][ T6093] ? getname_flags.part.0+0x1c5/0x550 [ 374.175006][ T6093] __x64_sys_mkdir+0xef/0x140 [ 374.175031][ T6093] do_syscall_64+0xcd/0x4c0 [ 374.175059][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.175077][ T6093] RIP: 0033:0x7f6eec98e929 [ 374.175090][ T6093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.175105][ T6093] RSP: 002b:00007f6eed737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 374.175123][ T6093] RAX: ffffffffffffffda RBX: 00007f6eecbb5fa0 RCX: 00007f6eec98e929 [ 374.175134][ T6093] RDX: 0000000000000000 RSI: 0000000000000184 RDI: 0000200000000100 [ 374.175144][ T6093] RBP: 00007f6eed737090 R08: 0000000000000000 R09: 0000000000000000 [ 374.175154][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.175164][ T6093] R13: 0000000000000000 R14: 00007f6eecbb5fa0 R15: 00007ffe5507dff8 [ 374.175187][ T6093] [ 374.175211][ T6093] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 374.497271][ T6125] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET) [ 374.568947][ T6132] warning: `syz.1.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 374.575066][ T6132] hpfs: Bad magic ... probably not HPFS [ 374.664069][ T6130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.675432][ T6141] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 374.681099][ T6141] netlink: 'syz.2.20': attribute type 10 has an invalid length. [ 374.683549][ T6141] netlink: 2 bytes leftover after parsing attributes in process `syz.2.20'. [ 374.694099][ T6141] team0: entered promiscuous mode [ 374.697732][ T6141] team_slave_0: entered promiscuous mode [ 374.700272][ T6141] team_slave_1: entered promiscuous mode [ 374.703554][ T6141] bridge0: port 3(team0) entered blocking state [ 374.706805][ T6141] bridge0: port 3(team0) entered disabled state [ 374.709519][ T6141] team0: entered allmulticast mode [ 374.711635][ T6141] team_slave_0: entered allmulticast mode [ 374.714098][ T6141] team_slave_1: entered allmulticast mode [ 374.719493][ T6141] bridge0: port 3(team0) entered blocking state [ 374.721704][ T6141] bridge0: port 3(team0) entered forwarding state [ 374.746475][ T6146] FAULT_INJECTION: forcing a failure. [ 374.746475][ T6146] name failslab, interval 1, probability 0, space 0, times 0 [ 374.751693][ T6146] CPU: 0 UID: 0 PID: 6146 Comm: syz.0.21 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 374.751716][ T6146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 374.751726][ T6146] Call Trace: [ 374.751733][ T6146] [ 374.751740][ T6146] dump_stack_lvl+0x16c/0x1f0 [ 374.751771][ T6146] should_fail_ex+0x512/0x640 [ 374.751794][ T6146] ? __kmalloc_noprof+0xbf/0x510 [ 374.751818][ T6146] ? inotify_handle_inode_event+0x1cf/0x6f0 [ 374.751845][ T6146] should_failslab+0xc2/0x120 [ 374.751869][ T6146] __kmalloc_noprof+0xd2/0x510 [ 374.751891][ T6146] ? register_lock_class+0x41/0x4c0 [ 374.751923][ T6146] inotify_handle_inode_event+0x1cf/0x6f0 [ 374.751954][ T6146] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 374.751981][ T6146] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 374.752007][ T6146] fsnotify+0x132f/0x1dc0 [ 374.752035][ T6146] ? __pfx_fsnotify+0x10/0x10 [ 374.752067][ T6146] __fsnotify_parent+0x915/0xc40 [ 374.752087][ T6146] ? __pfx_selinux_file_open+0x10/0x10 [ 374.752115][ T6146] ? __pfx___fsnotify_parent+0x10/0x10 [ 374.752140][ T6146] ? do_dentry_open+0xcfa/0x1c10 [ 374.752174][ T6146] ? vfs_open+0x2e3/0x3f0 [ 374.752199][ T6146] vfs_open+0x2e3/0x3f0 [ 374.752228][ T6146] path_openat+0x1de4/0x2cb0 [ 374.752257][ T6146] ? __pfx___up_read+0x10/0x10 [ 374.752275][ T6146] ? __pfx_path_openat+0x10/0x10 [ 374.752303][ T6146] do_filp_open+0x20b/0x470 [ 374.752326][ T6146] ? __pfx_do_filp_open+0x10/0x10 [ 374.752348][ T6146] ? rcu_is_watching+0x12/0xc0 [ 374.752386][ T6146] ? _raw_spin_unlock+0x28/0x50 [ 374.752407][ T6146] ? alloc_fd+0x471/0x7d0 [ 374.752436][ T6146] do_sys_openat2+0x11b/0x1d0 [ 374.752452][ T6146] ? __pfx_do_sys_openat2+0x10/0x10 [ 374.752471][ T6146] ? __fget_files+0x20e/0x3c0 [ 374.752499][ T6146] __x64_sys_open+0x153/0x1e0 [ 374.752516][ T6146] ? __pfx___x64_sys_open+0x10/0x10 [ 374.752537][ T6146] ? rcu_is_watching+0x12/0xc0 [ 374.752560][ T6146] do_syscall_64+0xcd/0x4c0 [ 374.752587][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.752605][ T6146] RIP: 0033:0x7f334658e929 [ 374.752620][ T6146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.752636][ T6146] RSP: 002b:00007f3347398038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 374.752652][ T6146] RAX: ffffffffffffffda RBX: 00007f33467b5fa0 RCX: 00007f334658e929 [ 374.752663][ T6146] RDX: 0000000000000000 RSI: 0000000000050500 RDI: 0000200000022ff6 [ 374.752673][ T6146] RBP: 00007f3347398090 R08: 0000000000000000 R09: 0000000000000000 [ 374.752684][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.752693][ T6146] R13: 0000000000000000 R14: 00007f33467b5fa0 R15: 00007fff5d7f55e8 [ 374.752716][ T6146] [ 374.876782][ T5298] Bluetooth: hci1: command tx timeout [ 374.942086][ T6150] process 'syz.0.22' launched '/dev/fd/10' with NULL argv: empty string added [ 374.955797][ T5298] Bluetooth: hci2: command tx timeout [ 374.955827][ T6002] Bluetooth: hci3: command tx timeout [ 374.966169][ T6150] SELinux: ebitmap start bit (335544352) is not a multiple of the map unit size (64) [ 374.966182][ T6002] Bluetooth: hci0: command tx timeout [ 374.977865][ T6150] SELinux: failed to load policy [ 375.153410][ T6166] FAULT_INJECTION: forcing a failure. [ 375.153410][ T6166] name failslab, interval 1, probability 0, space 0, times 0 [ 375.157965][ T6166] CPU: 1 UID: 0 PID: 6166 Comm: syz.2.27 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 375.157990][ T6166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 375.158000][ T6166] Call Trace: [ 375.158007][ T6166] [ 375.158014][ T6166] dump_stack_lvl+0x16c/0x1f0 [ 375.158043][ T6166] should_fail_ex+0x512/0x640 [ 375.158066][ T6166] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 375.158091][ T6166] should_failslab+0xc2/0x120 [ 375.158117][ T6166] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 375.158139][ T6166] ? __kernfs_new_node+0xd2/0x8e0 [ 375.158175][ T6166] __kernfs_new_node+0xd2/0x8e0 [ 375.158205][ T6166] ? __pfx___kernfs_new_node+0x10/0x10 [ 375.158235][ T6166] ? find_held_lock+0x2b/0x80 [ 375.158258][ T6166] ? kernfs_root+0xee/0x2a0 [ 375.158288][ T6166] kernfs_new_node+0x13c/0x1e0 [ 375.158312][ T6166] __kernfs_create_file+0x53/0x350 [ 375.158326][ T6166] cgroup_addrm_files+0x546/0xc20 [ 375.158343][ T6166] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 375.158359][ T6166] ? css_next_child+0xcf/0x2d0 [ 375.158384][ T6166] ? css_next_descendant_pre+0x58/0x1a0 [ 375.158396][ T6166] css_populate_dir+0x343/0x580 [ 375.158412][ T6166] cgroup_mkdir+0x5cb/0x11f0 [ 375.158428][ T6166] ? __pfx_cgroup_mkdir+0x10/0x10 [ 375.158441][ T6166] kernfs_iop_mkdir+0x10e/0x190 [ 375.158457][ T6166] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 375.158473][ T6166] vfs_mkdir+0x593/0x8c0 [ 375.158487][ T6166] do_mkdirat+0x304/0x3e0 [ 375.158503][ T6166] ? __pfx_do_mkdirat+0x10/0x10 [ 375.158518][ T6166] ? getname_flags.part.0+0x1c5/0x550 [ 375.158531][ T6166] __x64_sys_mkdir+0xef/0x140 [ 375.158545][ T6166] do_syscall_64+0xcd/0x4c0 [ 375.158562][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.158574][ T6166] RIP: 0033:0x7f90a978e929 [ 375.158583][ T6166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.158594][ T6166] RSP: 002b:00007f90aa534038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 375.158604][ T6166] RAX: ffffffffffffffda RBX: 00007f90a99b5fa0 RCX: 00007f90a978e929 [ 375.158611][ T6166] RDX: 0000000000000000 RSI: 0000000000000184 RDI: 0000200000000100 [ 375.158617][ T6166] RBP: 00007f90aa534090 R08: 0000000000000000 R09: 0000000000000000 [ 375.158623][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.158629][ T6166] R13: 0000000000000000 R14: 00007f90a99b5fa0 R15: 00007fff4942ae18 [ 375.158642][ T6166] [ 375.159204][ T6166] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 375.386589][ T6181] pim6reg1: entered promiscuous mode [ 375.386723][ T6183] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 375.388302][ T6181] pim6reg1: entered allmulticast mode [ 375.432083][ T6187] Zero length message leads to an empty skb [ 375.498147][ T40] kauditd_printk_skb: 98 callbacks suppressed [ 375.498163][ T40] audit: type=1400 audit(1751163225.889:188): avc: denied { read } for pid=6193 comm="syz.0.36" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 375.624701][ T6202] sp0: Synchronizing with TNC [ 375.633001][ T40] audit: type=1400 audit(1751163226.019:189): avc: denied { search } for pid=5650 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.641217][ T40] audit: type=1400 audit(1751163226.019:190): avc: denied { search } for pid=5650 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.649807][ T40] audit: type=1400 audit(1751163226.019:191): avc: denied { search } for pid=5650 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.657792][ T40] audit: type=1400 audit(1751163226.019:192): avc: denied { read } for pid=5650 comm="dhcpcd" name="n103" dev="tmpfs" ino=2150 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.665144][ T40] audit: type=1400 audit(1751163226.019:193): avc: denied { open } for pid=5650 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2150 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.674447][ T40] audit: type=1400 audit(1751163226.019:194): avc: denied { getattr } for pid=5650 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2150 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.813289][ T40] audit: type=1400 audit(1751163226.199:195): avc: denied { watch } for pid=6209 comm="syz.2.41" path="/12" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 375.822534][ T40] audit: type=1400 audit(1751163226.199:196): avc: denied { watch_sb watch_reads } for pid=6209 comm="syz.2.41" path="/12" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 375.846724][ T40] audit: type=1400 audit(1751163226.239:197): avc: denied { read } for pid=6211 comm="syz.2.42" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 375.986849][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 376.138635][ T29] usb 6-1: config 1 interface 0 altsetting 138 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.142997][ T29] usb 6-1: config 1 interface 0 has no altsetting 0 [ 376.147135][ T29] usb 6-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.40 [ 376.150024][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.152551][ T29] usb 6-1: Product: syz [ 376.153975][ T29] usb 6-1: Manufacturer: syz [ 376.155648][ T29] usb 6-1: SerialNumber: syz [ 376.177304][ T6130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.344768][ T6229] SELinux: policydb version 130052898 does not match my version range 15-34 [ 376.348210][ T6229] SELinux: failed to load policy [ 376.372662][ T6231] can0: slcan on ptm0. [ 376.437974][ T6207] can0 (unregistered): slcan off ptm0. [ 376.438980][ T6237] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 376.452599][ T29] usbhid 6-1:1.0: can't add hid device: -71 [ 376.454689][ T29] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 376.461578][ T29] usb 6-1: USB disconnect, device number 2 [ 376.600200][ T6250] FAULT_INJECTION: forcing a failure. [ 376.600200][ T6250] name failslab, interval 1, probability 0, space 0, times 0 [ 376.604134][ T6250] CPU: 3 UID: 0 PID: 6250 Comm: syz.0.49 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 376.604148][ T6250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 376.604155][ T6250] Call Trace: [ 376.604159][ T6250] [ 376.604163][ T6250] dump_stack_lvl+0x16c/0x1f0 [ 376.604186][ T6250] should_fail_ex+0x512/0x640 [ 376.604201][ T6250] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 376.604218][ T6250] should_failslab+0xc2/0x120 [ 376.604233][ T6250] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 376.604249][ T6250] ? kstrdup_const+0x63/0x80 [ 376.604263][ T6250] ? __lock_acquire+0xb8a/0x1c90 [ 376.604280][ T6250] kstrdup+0x53/0x100 [ 376.604294][ T6250] kstrdup_const+0x63/0x80 [ 376.604307][ T6250] __kernfs_new_node+0x9b/0x8e0 [ 376.604325][ T6250] ? __pfx___kernfs_new_node+0x10/0x10 [ 376.604343][ T6250] ? find_held_lock+0x2b/0x80 [ 376.604356][ T6250] ? kernfs_root+0xee/0x2a0 [ 376.604373][ T6250] kernfs_new_node+0x13c/0x1e0 [ 376.604393][ T6250] __kernfs_create_file+0x53/0x350 [ 376.604407][ T6250] cgroup_addrm_files+0x546/0xc20 [ 376.604425][ T6250] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 376.604441][ T6250] ? css_next_child+0xcf/0x2d0 [ 376.604452][ T6250] ? css_next_descendant_pre+0x58/0x1a0 [ 376.604464][ T6250] css_populate_dir+0x343/0x580 [ 376.604481][ T6250] cgroup_mkdir+0x5cb/0x11f0 [ 376.604495][ T6250] ? __pfx_cgroup_mkdir+0x10/0x10 [ 376.604508][ T6250] kernfs_iop_mkdir+0x10e/0x190 [ 376.604523][ T6250] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 376.604540][ T6250] vfs_mkdir+0x593/0x8c0 [ 376.604554][ T6250] do_mkdirat+0x304/0x3e0 [ 376.604570][ T6250] ? __pfx_do_mkdirat+0x10/0x10 [ 376.604585][ T6250] ? getname_flags.part.0+0x1c5/0x550 [ 376.604598][ T6250] __x64_sys_mkdir+0xef/0x140 [ 376.604612][ T6250] do_syscall_64+0xcd/0x4c0 [ 376.604629][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.604640][ T6250] RIP: 0033:0x7f334658e929 [ 376.604648][ T6250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.604658][ T6250] RSP: 002b:00007f3347398038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 376.604669][ T6250] RAX: ffffffffffffffda RBX: 00007f33467b5fa0 RCX: 00007f334658e929 [ 376.604675][ T6250] RDX: 0000000000000000 RSI: 0000000000000184 RDI: 0000200000000100 [ 376.604681][ T6250] RBP: 00007f3347398090 R08: 0000000000000000 R09: 0000000000000000 [ 376.604687][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 376.604693][ T6250] R13: 0000000000000000 R14: 00007f33467b5fa0 R15: 00007fff5d7f55e8 [ 376.604706][ T6250] [ 376.604710][ T6250] cgroup: cgroup_addrm_files: failed to add tasks, err=-12 [ 376.955866][ T6002] Bluetooth: hci1: command tx timeout [ 377.036136][ T6002] Bluetooth: hci2: command tx timeout [ 377.036175][ T5298] Bluetooth: hci0: command tx timeout [ 377.036202][ T5999] Bluetooth: hci3: command tx timeout [ 377.061819][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 377.065309][ T6262] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 377.069277][ T6262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.074844][ T6262] SELinux: Context Ü is not valid (left unmapped). [ 377.077254][ T6262] SELinux: Context #ÿ is not valid (left unmapped). [ 377.125892][ T1346] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 377.129751][ T6265] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 377.132172][ T6265] netlink: 'syz.1.54': attribute type 4 has an invalid length. [ 377.134726][ T6265] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.54'. [ 377.174087][ T6267] xt_TCPMSS: Only works on TCP SYN packets [ 377.222003][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.58'. [ 377.264532][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6279 comm=syz.1.57 [ 377.278101][ T1346] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 377.281861][ T1346] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.286921][ T1346] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 377.290339][ T1346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.499166][ T1346] usb 5-1: usb_control_msg returned -32 [ 377.501031][ T1346] usbtmc 5-1:16.0: can't read capabilities [ 377.503062][ T6294] block nbd2: NBD_DISCONNECT [ 377.537261][ T6290] /dev/sr0: Can't open blockdev [ 377.841125][ T6305] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 377.851307][ T6130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.859646][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 377.862526][ T6305] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 377.918916][ T6130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.005189][ T6130] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.012868][ T6130] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.019615][ T6130] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.028370][ T6130] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.062452][ T6308] xt_bpf: check failed: parse error [ 378.311596][ T6328] netlink: 68 bytes leftover after parsing attributes in process `syz.3.73'. [ 378.319833][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.440345][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.73'. [ 378.585615][ T839] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 378.755630][ T839] usb 6-1: Using ep0 maxpacket: 8 [ 378.760400][ T839] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 378.763827][ T839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.771585][ T839] usb 6-1: config 0 has no interface number 0 [ 378.774186][ T839] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 378.781237][ T839] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.787001][ T839] usb 6-1: config 0 interface 52 has no altsetting 0 [ 378.790725][ T839] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 378.794421][ T839] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 378.798013][ T839] usb 6-1: Manufacturer: syz [ 378.802948][ T839] usb 6-1: config 0 descriptor?? [ 379.016882][ T839] input: syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.52/input/input5 [ 379.037526][ T5298] Bluetooth: hci1: command tx timeout [ 379.117130][ T5298] Bluetooth: hci2: command tx timeout [ 379.125849][ T5298] Bluetooth: hci0: command tx timeout [ 379.125878][ T6002] Bluetooth: hci3: command tx timeout [ 379.315393][ T6089] usb 6-1: USB disconnect, device number 3 [ 379.315668][ C0] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 379.399800][ T6373] netlink: 'syz.3.84': attribute type 1 has an invalid length. [ 379.403124][ T6373] netlink: 'syz.3.84': attribute type 2 has an invalid length. [ 379.411613][ T6373] tmpfs: Bad value for 'mpol' [ 379.505309][ T6384] capability: warning: `syz.3.89' uses 32-bit capabilities (legacy support in use) [ 379.801668][ T6399] dlm: no locking on control device [ 379.843358][ T6404] netlink: 'syz.3.95': attribute type 7 has an invalid length. [ 379.846773][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'. [ 379.871489][ T6404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.95'. [ 379.875220][ T6404] netlink: 'syz.3.95': attribute type 1 has an invalid length. [ 379.906375][ T6089] usb 5-1: USB disconnect, device number 2 [ 379.975684][ T6409] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 379.978715][ T6409] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 380.047062][ T6413] QAT: failed to copy from user. [ 380.098294][ T6415] IPv4: Oversized IP packet from 127.202.26.0 [ 380.457444][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.478118][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 380.736728][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 380.736740][ T40] audit: type=1400 audit(1751163231.129:301): avc: denied { ioctl } for pid=6440 comm="syz.1.108" path="socket:[12486]" dev="sockfs" ino=12486 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 380.793812][ T40] audit: type=1400 audit(1751163231.179:302): avc: denied { mount } for pid=6442 comm="syz.1.109" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 380.804844][ T40] audit: type=1400 audit(1751163231.189:303): avc: denied { unmount } for pid=5988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 380.813841][ T6425] geneve2: entered promiscuous mode [ 380.815736][ T6425] geneve2: entered allmulticast mode [ 380.947357][ T6452] netlink: 'syz.1.112': attribute type 27 has an invalid length. [ 380.978120][ T40] audit: type=1400 audit(1751163231.369:304): avc: denied { unmount } for pid=5997 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 381.018832][ T6450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 381.044371][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.047482][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.155243][ T6459] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 381.212161][ T40] audit: type=1400 audit(1751163231.599:305): avc: denied { name_bind } for pid=6460 comm="syz.0.114" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 381.220810][ T40] audit: type=1400 audit(1751163231.599:306): avc: denied { node_bind } for pid=6460 comm="syz.0.114" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 381.262927][ T6463] netlink: 'syz.0.115': attribute type 2 has an invalid length. [ 381.269077][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.275791][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.346459][ T6452] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.350025][ T6452] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.353567][ T6452] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.357626][ T6452] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.420976][ T6454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.425132][ T6454] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.434743][ T6454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.440752][ T6463] netem: incorrect gi model size [ 381.442395][ T6463] netem: change failed [ 381.478665][ T6466] netlink: 52 bytes leftover after parsing attributes in process `syz.0.116'. [ 381.521549][ T6406] Set syz1 is full, maxelem 65536 reached [ 381.527081][ T40] audit: type=1400 audit(1751163231.919:307): avc: denied { bind } for pid=6470 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 381.589702][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 381.670423][ T6493] syz.0.124: attempt to access beyond end of device [ 381.670423][ T6493] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 381.675725][ T6493] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 381.680166][ T40] audit: type=1400 audit(1751163232.069:308): avc: denied { map } for pid=6482 comm="syz.3.121" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 381.728618][ T6498] bridge_slave_0: left allmulticast mode [ 381.735913][ T6498] bridge_slave_0: left promiscuous mode [ 381.740523][ T40] audit: type=1400 audit(1751163232.129:309): avc: denied { create } for pid=6499 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 381.742255][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.748263][ T40] audit: type=1400 audit(1751163232.129:310): avc: denied { connect } for pid=6499 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 381.761348][ T6498] bridge_slave_1: left allmulticast mode [ 381.763849][ T6498] bridge_slave_1: left promiscuous mode [ 381.766841][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.776978][ T6498] bond0: (slave bond_slave_0): Releasing backup interface [ 381.783683][ T6498] bond0: (slave bond_slave_1): Releasing backup interface [ 381.798269][ T6498] team0: Port device team_slave_0 removed [ 381.804072][ T6498] team0: Port device team_slave_1 removed [ 381.807691][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.810170][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.813566][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.816550][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.870444][ T6515] omfs: Invalid superblock (0) [ 381.874575][ T6515] tipc: Can't bind to reserved service type 2 [ 381.913343][ T6517] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 382.009196][ T6532] netlink: 132 bytes leftover after parsing attributes in process `syz.3.136'. [ 382.069604][ T6537] netlink: 64 bytes leftover after parsing attributes in process `syz.3.138'. [ 382.180895][ T6544] ipt_REJECT: TCP_RESET invalid for non-tcp [ 382.289987][ T6558] netlink: 'syz.0.146': attribute type 10 has an invalid length. [ 382.292504][ T6558] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 382.296726][ T6558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.450149][ T6561] netlink: zone id is out of range [ 382.452490][ T6561] netlink: zone id is out of range [ 382.454127][ T6561] netlink: zone id is out of range [ 382.456847][ T6561] netlink: zone id is out of range [ 382.459411][ T6561] netlink: zone id is out of range [ 382.461613][ T6561] netlink: zone id is out of range [ 382.470956][ T6561] netlink: zone id is out of range [ 382.473823][ T6561] netlink: zone id is out of range [ 382.476134][ T6561] netlink: zone id is out of range [ 382.546014][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'. [ 382.608797][ T6579] ======================================================= [ 382.608797][ T6579] WARNING: The mand mount option has been deprecated and [ 382.608797][ T6579] and is ignored by this kernel. Remove the mand [ 382.608797][ T6579] option from the mount to silence this warning. [ 382.608797][ T6579] ======================================================= [ 382.629049][ T6581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6581 comm=syz.3.153 [ 382.693677][ T6590] netlink: 'syz.0.154': attribute type 2 has an invalid length. [ 382.858603][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 382.926929][ T6002] Bluetooth: hci1: failed to read key size for handle 201 [ 383.116588][ T6642] gtp0: entered promiscuous mode [ 383.143332][ T6644] SELinux: Context system_u:object_r:lastlog_t:s0 is not valid (left unmapped). [ 383.187397][ T6646] block nbd2: NBD_DISCONNECT [ 383.190356][ T6646] block nbd2: Send disconnect failed -22 [ 383.210533][ T6646] block nbd2: Disconnected due to user request. [ 383.213281][ T6646] block nbd2: shutting down sockets [ 383.293155][ T6669] cgroup: Need name or subsystem set [ 383.399786][ T6692] sp0: Synchronizing with TNC [ 383.404372][ T6691] [U] è [ 383.582712][ T6706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'. [ 383.635820][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 383.805651][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 383.813242][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 383.818936][ T29] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 383.821901][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.824599][ T29] usb 5-1: Product: syz [ 383.826419][ T29] usb 5-1: Manufacturer: syz [ 383.827974][ T29] usb 5-1: SerialNumber: syz [ 383.831055][ T29] usb 5-1: config 0 descriptor?? [ 383.835970][ T29] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 383.839817][ T29] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 384.019832][ T6735] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 384.022883][ T6737] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 384.096029][ T29] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 384.174231][ T29] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 384.177217][ T29] em28xx 5-1:0.0: board has no eeprom [ 384.235685][ T29] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 384.238836][ T29] em28xx 5-1:0.0: dvb set to bulk mode. [ 384.241817][ T6029] em28xx 5-1:0.0: Binding DVB extension [ 384.243098][ T6690] em28xx 5-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 384.247814][ T29] usb 5-1: USB disconnect, device number 3 [ 384.250239][ T29] em28xx 5-1:0.0: Disconnecting em28xx [ 384.269583][ T6029] em28xx 5-1:0.0: Registering input extension [ 384.271968][ T29] em28xx 5-1:0.0: Closing input extension [ 384.281321][ T29] em28xx 5-1:0.0: Freeing device [ 384.476143][ T6068] wlan1: Trigger new scan to find an IBSS to join [ 384.582550][ T6725] syz.1.198 (6725) used greatest stack depth: 17976 bytes left [ 384.802073][ T6758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.038622][ T6771] netlink: 'syz.1.212': attribute type 3 has an invalid length. [ 385.041511][ T6771] netlink: 'syz.1.212': attribute type 1 has an invalid length. [ 385.044499][ T6771] __nla_validate_parse: 4 callbacks suppressed [ 385.044509][ T6771] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.212'. [ 385.077582][ T6745] 9pnet_fd: p9_fd_create_tcp (6745): problem connecting socket to 127.0.0.1 [ 385.095409][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.097966][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.100310][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.102344][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.105192][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.107232][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.109542][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.111431][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.112963][ T6794] bridge0: port 3(veth0_to_bridge) entered blocking state [ 385.114731][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.116686][ T6794] bridge0: port 3(veth0_to_bridge) entered disabled state [ 385.116769][ T6794] veth0_to_bridge: entered allmulticast mode [ 385.117532][ T6794] veth0_to_bridge: entered promiscuous mode [ 385.122357][ T6797] netlink: 'syz.2.219': attribute type 11 has an invalid length. [ 385.123072][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.123140][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.123145][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.123187][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.123192][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.123236][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.123240][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.123279][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.123283][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.123322][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.123326][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.123365][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.123370][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.123410][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.123415][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.123452][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.123457][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.123495][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.123499][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.123538][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.123542][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.123581][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 385.131141][ T6793] 9p: Unknown uid 00000000004294967295 [ 385.133103][ T6790] binder: 6789:6790 ioctl 4018620d 2000000000c0 returned -16 [ 385.136143][ T6795] binder: BINDER_SET_CONTEXT_MGR already set [ 385.182478][ T6795] binder: 6789:6795 ioctl 4018620d 200000000040 returned -16 [ 385.243504][ T6810] fuse: Bad value for 'fd' [ 385.268417][ T6816] netlink: 'syz.1.226': attribute type 3 has an invalid length. [ 385.491713][ T6841] batadv0: entered promiscuous mode [ 385.493454][ T6841] batadv0: entered allmulticast mode [ 385.518791][ T6845] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 4, id = 0 [ 385.519223][ T6841] tmpfs: Bad value for 'mpol' [ 385.625054][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'. [ 385.637391][ T6847] netlink: 72 bytes leftover after parsing attributes in process `syz.0.236'. [ 385.654674][ T6847] trusted_key: syz.0.236 sent an empty control message without MSG_MORE. [ 385.663115][ T6854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.238'. [ 385.696534][ T839] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 385.747590][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 385.747601][ T40] audit: type=1400 audit(1751163236.139:382): avc: denied { create } for pid=6864 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 385.757238][ T40] audit: type=1400 audit(1751163236.139:383): avc: denied { setopt } for pid=6864 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 385.829284][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 385.832045][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 385.856923][ T839] usb 7-1: Using ep0 maxpacket: 32 [ 385.862628][ T839] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 385.865247][ T839] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.868696][ T839] usb 7-1: config 0 has no interface number 0 [ 385.870658][ T839] usb 7-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 385.873755][ T839] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 385.879206][ T6880] syz.3.247 (6880): attempted to duplicate a private mapping with mremap. This is not supported. [ 385.897276][ T839] usb 7-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 385.900097][ T839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.902562][ T839] usb 7-1: Product: syz [ 385.903995][ T839] usb 7-1: Manufacturer: syz [ 385.905483][ T839] usb 7-1: SerialNumber: syz [ 385.916774][ T839] usb 7-1: config 0 descriptor?? [ 385.918860][ T6827] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 385.922065][ T839] usb-storage 7-1:0.231: USB Mass Storage device detected [ 385.948151][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 385.951932][ T40] audit: type=1400 audit(1751163236.339:384): avc: denied { bind } for pid=6889 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 386.075125][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 386.092631][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 386.115591][ T6894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.252'. [ 386.150045][ T6321] usb 7-1: USB disconnect, device number 2 [ 386.526748][ T6033] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 386.612568][ T40] audit: type=1400 audit(1751163236.999:385): avc: denied { nlmsg_read } for pid=6906 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 386.637438][ T5298] Bluetooth: hci1: command 0x0406 tx timeout [ 386.656237][ T6907] mkiss: ax0: crc mode is auto. [ 386.677564][ T6033] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.682125][ T6033] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.686805][ T6033] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 386.692013][ T6033] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 386.695854][ T6033] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.701069][ T6033] usb 8-1: config 0 descriptor?? [ 386.758035][ T40] audit: type=1400 audit(1751163237.149:386): avc: denied { unmount } for pid=5997 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 386.894030][ T6002] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 386.922768][ T6033] usbhid 8-1:0.0: can't add hid device: -71 [ 386.925118][ T6033] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 386.936496][ T6033] usb 8-1: USB disconnect, device number 2 [ 387.016795][ T6080] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 387.047696][ T40] audit: type=1400 audit(1751163237.439:387): avc: denied { create } for pid=6933 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 387.055848][ T6934] bridge0: entered promiscuous mode [ 387.057816][ T6934] macvlan2: entered promiscuous mode [ 387.127969][ T6938] program syz.3.267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 387.155611][ T6080] usb 5-1: device descriptor read/64, error -71 [ 387.395587][ T6080] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 387.535657][ T6080] usb 5-1: device descriptor read/64, error -71 [ 387.595979][ T6148] wlan1: Trigger new scan to find an IBSS to join [ 387.656554][ T6080] usb usb5-port1: attempt power cycle [ 387.788931][ T40] audit: type=1400 audit(1751163238.179:388): avc: denied { create } for pid=6942 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.846829][ T40] audit: type=1400 audit(1751163238.239:389): avc: denied { write } for pid=6942 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.849748][ T6002] Bluetooth: hci2: unexpected event 0x3e length: 262 > 260 [ 387.852744][ T6002] Bluetooth: hci2: unexpected subevent 0x0d length: 261 > 260 [ 387.859121][ T6002] Bluetooth: hci2: adv larger than maximum supported [ 387.859166][ T6002] Bluetooth: hci2: adv larger than maximum supported [ 388.005768][ T6080] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 388.036427][ T6080] usb 5-1: device descriptor read/8, error -71 [ 388.192007][ T40] audit: type=1400 audit(1751163238.579:390): avc: denied { write } for pid=6969 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 388.198240][ T40] audit: type=1400 audit(1751163238.579:391): avc: denied { create } for pid=6969 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 388.275799][ T6080] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 388.296222][ T6080] usb 5-1: device descriptor read/8, error -71 [ 388.384382][ T6974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6974 comm=syz.3.277 [ 388.415954][ T6080] usb usb5-port1: unable to enumerate USB device [ 388.769683][ T6981] netlink: 'syz.1.279': attribute type 2 has an invalid length. [ 388.792747][ T6983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=6983 comm=syz.2.280 [ 388.965761][ T6002] Bluetooth: hci3: command tx timeout [ 389.272107][ T7013] syz_tun: entered allmulticast mode [ 389.289230][ T7015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 389.293170][ T7015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 389.296919][ T7015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 389.300752][ T7015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 389.308168][ T7012] syz_tun: left allmulticast mode [ 389.873374][ T7031] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 390.032978][ T7034] xt_hashlimit: size too large, truncated to 1048576 [ 390.254688][ T7058] __nla_validate_parse: 6 callbacks suppressed [ 390.254705][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 390.404165][ T7066] net_ratelimit: 10 callbacks suppressed [ 390.404183][ T7066] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 390.472123][ T7073] SELinux: policydb version 0 does not match my version range 15-34 [ 390.476115][ T7073] SELinux: failed to load policy [ 390.518157][ T7075] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 390.522777][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 390.556851][ T6148] wlan1: Trigger new scan to find an IBSS to join [ 390.564418][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 390.577140][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 390.634494][ T7082] FAULT_INJECTION: forcing a failure. [ 390.634494][ T7082] name failslab, interval 1, probability 0, space 0, times 0 [ 390.640366][ T7082] CPU: 0 UID: 0 PID: 7082 Comm: syz.3.315 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 390.640391][ T7082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 390.640401][ T7082] Call Trace: [ 390.640407][ T7082] [ 390.640415][ T7082] dump_stack_lvl+0x16c/0x1f0 [ 390.640468][ T7082] should_fail_ex+0x512/0x640 [ 390.640498][ T7082] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 390.640522][ T7082] should_failslab+0xc2/0x120 [ 390.640549][ T7082] __kmalloc_cache_noprof+0x6a/0x3e0 [ 390.640570][ T7082] ? percpu_ref_init+0xec/0x410 [ 390.640594][ T7082] ? __pfx_css_release+0x10/0x10 [ 390.640614][ T7082] percpu_ref_init+0xec/0x410 [ 390.640632][ T7082] ? init_and_link_css+0x32c/0x700 [ 390.640660][ T7082] cgroup_apply_control_enable+0x50b/0xbb0 [ 390.640684][ T7082] ? css_populate_dir+0x254/0x580 [ 390.640713][ T7082] cgroup_mkdir+0x5e7/0x11f0 [ 390.640740][ T7082] ? __pfx_cgroup_mkdir+0x10/0x10 [ 390.640763][ T7082] kernfs_iop_mkdir+0x10e/0x190 [ 390.640790][ T7082] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 390.640817][ T7082] vfs_mkdir+0x593/0x8c0 [ 390.640841][ T7082] do_mkdirat+0x304/0x3e0 [ 390.640868][ T7082] ? __pfx_do_mkdirat+0x10/0x10 [ 390.640896][ T7082] ? getname_flags.part.0+0x1c5/0x550 [ 390.640917][ T7082] __x64_sys_mkdir+0xef/0x140 [ 390.640941][ T7082] do_syscall_64+0xcd/0x4c0 [ 390.640969][ T7082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.640988][ T7082] RIP: 0033:0x7f632918e929 [ 390.641002][ T7082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.641019][ T7082] RSP: 002b:00007f632a069038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 390.641037][ T7082] RAX: ffffffffffffffda RBX: 00007f63293b5fa0 RCX: 00007f632918e929 [ 390.641049][ T7082] RDX: 0000000000000000 RSI: 0000000000000184 RDI: 0000200000000100 [ 390.641060][ T7082] RBP: 00007f632a069090 R08: 0000000000000000 R09: 0000000000000000 [ 390.641070][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.641081][ T7082] R13: 0000000000000000 R14: 00007f63293b5fa0 R15: 00007ffd13d50898 [ 390.641119][ T7082] [ 390.695599][ T1337] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 390.747476][ T6080] BUG: unable to handle page fault for address: ffffed101acea401 [ 390.750790][ T6080] #PF: supervisor read access in kernel mode [ 390.753681][ T6080] #PF: error_code(0x0000) - not-present page [ 390.756323][ T7084] x_tables: duplicate underflow at hook 2 [ 390.758076][ T6080] PGD 17ffee067 P4D 17ffee067 PUD 7ffd3067 PMD 0 [ 390.762667][ T6080] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 390.765050][ T6080] CPU: 0 UID: 0 PID: 6080 Comm: kworker/0:4 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 390.770168][ T6080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 390.774698][ T6080] Workqueue: cgroup_destroy css_free_rwork_fn [ 390.777440][ T6080] RIP: 0010:css_rstat_flush+0x372/0x23f0 [ 390.779913][ T6080] Code: 92 c3 31 ff 89 de e8 fd 2d 07 00 84 db 0f 85 01 11 00 00 e8 10 33 07 00 48 8b 44 24 08 48 83 c0 08 48 89 44 24 10 48 c1 e8 03 <42> 80 3c 38 00 0f 85 b8 15 00 00 48 8b 44 24 08 48 8b 58 08 48 85 [ 390.788138][ T6080] RSP: 0018:ffffc90004adfb18 EFLAGS: 00010802 [ 390.790727][ T6080] RAX: 1ffff1101acea401 RBX: 0000000000000001 RCX: ffffffff81b4fe71 [ 390.794048][ T6080] RDX: ffff88802671a440 RSI: ffffffff81b4ed60 RDI: 0000000000000001 [ 390.797390][ T6080] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 390.800768][ T6080] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888055d02800 [ 390.804144][ T6080] R13: ffff888032a9e000 R14: 0000000000000001 R15: dffffc0000000000 [ 390.807491][ T6080] FS: 0000000000000000(0000) GS:ffff8880d6752000(0000) knlGS:0000000000000000 [ 390.811205][ T6080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.813994][ T6080] CR2: ffffed101acea401 CR3: 0000000025104000 CR4: 0000000000352ef0 [ 390.817309][ T6080] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.820635][ T6080] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 390.823975][ T6080] Call Trace: [ 390.825420][ T6080] [ 390.826704][ T6080] ? __lock_acquire+0x1053/0x1c90 [ 390.828855][ T6080] ? debug_object_deactivate+0x1ec/0x3a0 [ 390.831228][ T6080] css_rstat_exit+0xa2/0x470 [ 390.833200][ T6080] css_free_rwork_fn+0x80/0x12e0 [ 390.835341][ T6080] ? rcu_is_watching+0x12/0xc0 [ 390.837364][ T6080] process_one_work+0x9cc/0x1b70 [ 390.839488][ T6080] ? __pfx_css_killed_work_fn+0x10/0x10 [ 390.841861][ T6080] ? __pfx_process_one_work+0x10/0x10 [ 390.844150][ T6080] ? assign_work+0x1a0/0x250 [ 390.846060][ T6080] worker_thread+0x6c8/0xf10 [ 390.847799][ T6080] ? __kthread_parkme+0x19e/0x250 [ 390.849674][ T6080] ? __pfx_worker_thread+0x10/0x10 [ 390.851848][ T6080] kthread+0x3c2/0x780 [ 390.853572][ T6080] ? __pfx_kthread+0x10/0x10 [ 390.855541][ T6080] ? rcu_is_watching+0x12/0xc0 [ 390.857572][ T6080] ? __pfx_kthread+0x10/0x10 [ 390.859549][ T6080] ret_from_fork+0x5d4/0x6f0 [ 390.861534][ T6080] ? __pfx_kthread+0x10/0x10 [ 390.863559][ T6080] ret_from_fork_asm+0x1a/0x30 [ 390.865632][ T6080] [ 390.867036][ T6080] Modules linked in: [ 390.868755][ T6080] CR2: ffffed101acea401 [ 390.870632][ T6080] ---[ end trace 0000000000000000 ]--- [ 390.872962][ T6080] RIP: 0010:css_rstat_flush+0x372/0x23f0 [ 390.875412][ T6080] Code: 92 c3 31 ff 89 de e8 fd 2d 07 00 84 db 0f 85 01 11 00 00 e8 10 33 07 00 48 8b 44 24 08 48 83 c0 08 48 89 44 24 10 48 c1 e8 03 <42> 80 3c 38 00 0f 85 b8 15 00 00 48 8b 44 24 08 48 8b 58 08 48 85 [ 390.883571][ T6080] RSP: 0018:ffffc90004adfb18 EFLAGS: 00010802 [ 390.886150][ T6080] RAX: 1ffff1101acea401 RBX: 0000000000000001 RCX: ffffffff81b4fe71 [ 390.886726][ T1337] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 390.889547][ T6080] RDX: ffff88802671a440 RSI: ffffffff81b4ed60 RDI: 0000000000000001 [ 390.889567][ T6080] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 390.889579][ T6080] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888055d02800 [ 390.892649][ T1337] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 390.895954][ T6080] R13: ffff888032a9e000 R14: 0000000000000001 R15: dffffc0000000000 [ 390.895971][ T6080] FS: 0000000000000000(0000) GS:ffff8880d6752000(0000) knlGS:0000000000000000 [ 390.896015][ T6080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.896027][ T6080] CR2: ffffed101acea401 CR3: 0000000025104000 CR4: 0000000000352ef0 [ 390.896037][ T6080] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.902737][ T1337] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.905986][ T6080] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 390.906005][ T6080] Kernel panic - not syncing: Fatal exception [ 390.909104][ T6080] Kernel Offset: disabled VM DIAGNOSIS: 02:14:01 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff855bfbb0 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc90004adf348 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff36110b6 R15=dffffc0000000000 RIP=ffffffff855bfbd7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffed101acea401 CR3=0000000025104000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3346611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3346611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3346611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3346611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3346611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3346611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3346784488 00007f3346784480 00007f3346784478 00007f3346784450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33472ed100 00007f3346784440 00007f3346780004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3346784498 00007f3346784490 00007f3346784488 00007f3346784480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88801eaaa440 RCX=ffffc9000e380001 RDX=0000000000000000 RSI=ffffffff8c157c20 RDI=ffff88801eaaa884 RBP=ffff88801eaaa440 RSP=ffffc9000e37f878 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc9000e37f918 R11=0000000000013ba2 R12=ffff88801eaaa440 R13=ffffc9000e37f918 R14=ffffc9000e37fd58 R15=ffffc9000e37f94c RIP=ffffffff81a22c9e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f632a0696c0 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31f5ffff CR3=00000000303f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6329211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6329211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6329211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6329211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6329211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6329211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6329384488 00007f6329384480 00007f6329384478 00007f6329384450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6329eed100 00007f6329384440 00007f6329384458 00007f63293844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6329384498 00007f6329384490 00007f6329384488 00007f6329384480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806461c000 RCX=0000000000001000 RDX=fffffbfff1be3c8a RSI=fffffbfff1be3c88 RDI=ffff88806461c000 RBP=ffffea0001918700 RSP=ffffc9000df6e8c8 R8 =0000000000001000 R9 =0000000000000000 R10=ffffed100c8c3800 R11=dffffc0000000000 R12=0000000000140cca R13=ffffea0001918740 R14=0000000000000000 R15=ffffea0001918700 RIP=ffffffff8b7fa4db RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f6eed7166c0 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31f5ffff CR3=000000003c64b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000290410 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbf89c418 00007ffdbf89c418 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbf89c5f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d58e8777f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ec2df1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ec2df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00000000ff 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737302 7373737373737273 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373734216000673 431e161e035c1810 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 317570632f302f71 6d2f33706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003175 70632f302f716d2f 33706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0bc92b4b4c490a80 000055d0d3dd5c94 0000000000000251 0000000000000031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c1 6c2f0073656c7572 000055d58e863800 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffffff8df29138 RCX=ffffffff848e17e2 RDX=ffff88805af82440 RSI=ffffffff848e183a RDI=0000000000000120 RBP=00000000000000a0 RSP=ffffc9000d2d6cd0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000015710 R12=dffffc0000000000 R13=ffff8880371e5600 R14=0000000000000001 R15=ffff8880266fe378 RIP=ffffffff848e184d RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f6eed7376c0 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f632a047f98 CR3=000000002a1a5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5507e380 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6eeca11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6eeca11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6eeca11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6eeca11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6eeca11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6eeca11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000048 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000