last executing test programs: 20.572134045s ago: executing program 0 (id=88): unshare(0x36040800) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async) userfaultfd(0x801) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 64) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) ioctl(r1, 0xc4c85513, &(0x7f0000000200)) 20.012855051s ago: executing program 0 (id=90): openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f00000000c0)='-1\x00', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x22843, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x22843, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) (async) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) read(r1, &(0x7f0000000100)=""/208, 0xd0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/fs/cifs/Stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000d00)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 19.114837824s ago: executing program 0 (id=99): ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000000)) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000040)) (async) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000040)) r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0xfd78, 0x0, 0x201a, 0x4, 0x4bdd, 0x81, 0x9}) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f0000000140)={'system_u:object_r:auditd_etc_t:s0', 0x20, 'system_u:object_r:smartcard_device_t:s0', 0x20, 0xca, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x7d) (async) write$selinux_validatetrans(r1, &(0x7f0000000140)={'system_u:object_r:auditd_etc_t:s0', 0x20, 'system_u:object_r:smartcard_device_t:s0', 0x20, 0xca, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x7d) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x2ee) fsmount(0xffffffffffffffff, 0x0, 0x4) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000001c0)=0x81) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000000200)=0xffffffffffffffff) r3 = syz_io_uring_setup(0x50f4, &(0x7f0000000240)={0x0, 0xa30a, 0x4, 0x3, 0x168}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/23, 0x17}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/23, 0x17}], 0x1) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000400)=0xf) syz_clone(0x10000000, &(0x7f0000000440)="80c9d0497d0ca7eaa80d2eb06a9b55eea35c1133035f3d", 0x17, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="27915e96ade39bcea9d88acbefd048d1dbd6c928f8e06aa7e40e6ba5bd7ebe3c3b244ea14f3b23f1475276531ff36312453c7dd635574e224031b77b4e0a072c901f0ac7340a508bc2a2813d1f71e08c32be025918ff1df12a4b08b038c578323a2212590a9872ab3cfee8742c79") (async) syz_clone(0x10000000, &(0x7f0000000440)="80c9d0497d0ca7eaa80d2eb06a9b55eea35c1133035f3d", 0x17, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="27915e96ade39bcea9d88acbefd048d1dbd6c928f8e06aa7e40e6ba5bd7ebe3c3b244ea14f3b23f1475276531ff36312453c7dd635574e224031b77b4e0a072c901f0ac7340a508bc2a2813d1f71e08c32be025918ff1df12a4b08b038c578323a2212590a9872ab3cfee8742c79") getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfff7, 0x438}, &(0x7f0000000640)=0x90) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfff7, 0x438}, &(0x7f0000000640)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000680)={r4, 0x5, "aa3a297918"}, &(0x7f00000006c0)=0xd) r5 = socket$inet(0x2, 0x6, 0x7fffffff) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000700)={0x5, 0x1, 0x1, 0xde, 0xf4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000740)) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000840)={0xa, 0x16, 0x10, 0x15, 0x7, 0x6, 0x6, 0xf8, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000880)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000940)={{r1}, r9, 0x18, @inherit={0x68, &(0x7f00000008c0)={0x1, 0x4, 0xffff, 0xd45, {0x0, 0x6, 0x3ff, 0x4, 0x5}, [0x1000, 0x200, 0x40, 0x7c]}}, @name="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"}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000940)={{r1}, r9, 0x18, @inherit={0x68, &(0x7f00000008c0)={0x1, 0x4, 0xffff, 0xd45, {0x0, 0x6, 0x3ff, 0x4, 0x5}, [0x1000, 0x200, 0x40, 0x7c]}}, @name="34f6d97e27a7732c45729e2a91ed87900156667f21455e7abb68cd61b11c569fd0f239b4d0db8d342076eae04f0c27a1ec0214dd55d63b530968a7b79f453905ab382d246a1ba8ac9b2b3ae0357cc129c70965907ded70d69d3ad205afbf63288f6c4b72a5113cb7e6cfa98fdb807745bf1d77a88feeac667d360093e64128499cbd0e3053841a5f6d60d92791502aeea49b4e1087049fc0ea00d8433948e92f71c5f56a8e1d5db4efa7e859c225123b2e4b11753fdcb620beeae8696c8c92e573cab7ac71e1ce34dfbbce94600d9ea2da339a1722a45a3819f4e1dc6eef123f30d693baa5dc5720deb8f2cf150830812b098455ef2a559fb8b3174d24a3411c3be7c3009915d1eaa9de4ebeeb602dd1cf66b26ee52f83e8d27780db6a2e151b6706f4505c1927fd183a6eebfba01e38f0d78cd30730f3a78afe5ee6c7add41ba6963d3d576e4c011aa766e052a2d6e0c1ab08fe5db47b3d204e44fcf9188db3ca4719a76420f8f5c039de79da56b404b1446dfb25c76b0dc5ff573ae28a1da3808546a4b274f722f0b86037ffb233981897e48dd6bd9756d4a75f100d8e00561872e8fd6a4b4b10e8e1627e172599bacc7ce3e3563a94f065c8c33bb8871c5f6959ce5738fd4dbe6fe835d3a213cd3fc1a0beff062a4e1c9fdfbbc128a2ce9e2241e114ebf3be123e8156619ea6816c8db65746719c4c40cdfc57c94001fb58a159f6eab9f0f6dc76dce42709d5c0bdb1a727ec537fe9858bad205096593110e024e6d58bfed7973e7c286e959160cebcf660c8f6453267bdad2d64c27333b61209c8ceb37b6f260025dfbe2984d38a3920ff43adec9a8b68fd134fb147db0ad79a2a30a5d1e1c1b0be79d5ea81a88f0a30c63bedc39ab35e8e9b8f9531f685f6eaf93ed7b3fb8c83b0e0a7470a2b09a695639c7aedc8018b9770ff7c38b7ded045bc4ea87f6a32810e88948cceb8c75f7d0365eada22e84abbe7123e7b4d282618ef89f492f17bc00f579ebb2fccdc7ce1025d45e563cbf56f7c1c15cb5d6afdcfd111832189bb7d78074c125290723a705169198ab3a91216c48fa987d6f3328221e564cf513be7b55619ef533c29a4b3cf36c66f10b5c65e4551b49cbb3488695398ce21b4c8405941805d35fc0c447a3b0879e536f18c2059975ea7d190a450b105a44e661020b07d426cf2f45fc0965fb7f9091b28da177304626aa00f72fc2198587ed64369b7bbfeb0df18ab718909105f29bab338309ae304009c0f96fe81225415c1b2eecd79972fb46ae65c82bd006eca5b868ae297a7541b26d29fe3d3ba0ac6eee2a9f178c2a15219788ad9441a0324bc8a81c50b81ad1a82820f79256885e3d0e3222834c268f27ffe6d9413155060a0b77a184a3a28d8d34d61c385b4d23c07548356a77bce48637501e25ca7cf1b775d63dc8814db12a8a9e5226ebcb4649a9c8b7595dcb54342a36f1666771ff8bfb704aaf10ea00bb2a583720a0833142e809efc32e86581db7cd447685ac31c3e54a8fc1b69232bd41f4e268e26fb38f87573e381f73edf145e47fb9622a2f18e330c777abe43674b96b9b78018a8f0e69104be3f7cda222852b699e97518420462f089075258e1eff9cf575e940e37c1f82f619f2f7465ce5906f6c67867877c7f601b313c0a626a7cf02551717cddf05bac6aa1c02c27a55ff39f2780a6a45157e0bc412a097d5df013b50ae9ebe4e56d49fa9bf60355aa8cb3d5b5132b1f972f72beb8caf35f7876e866d2ebc84cec23675abf914554e179e3c45fffa19a3e92ebf35524b3862734bbbe310526394df96ceb7115e393da0826e8885996d74de5577387d357026b69bb5e9f5a0a117380c75c49ad3e6de72f8686d050ed97df24f01a1847b3c2ebd94ca559ec7b4cd8bbcdaf482dbbb49e0e909f8fa8b0afe10b8c37732b7f14d347e068e1faf2f32c76e8639169117f91ef4988ed4788b8a6acef4910f3199556b0bb0a32b797cd0b45bc310a658754ed34730a5fd87a45294d1888f9fed745f573a9b7fb6bc6cd979d30dd5e9e2effc12b124fdd4b7a9705ca731f6f032bcc36175b153880ff7de7bb0e9cbbf1092228ce791cc66a13a6971e9de3dda0f6a065408a34f80a28edd285fcec55e77f5d45d5f9a56740b624d27706fe0213ad6b27815db67e69c68f7de78464b5f777ccffb20effd83429e3c3cebf786d1e306516e9824c510d3c67ba700d8c35f0c6d600d9fdce74f0bbaac9ee981197718612ba48f20c3aa38df5eb637a9795e78f1637edbba94d2807f3aa3b9856c42340635d8431fe5b440c4a4b6d802113286ec1b7425d46e001f3b2ab3121da713275c32415625491205bb63944a922317674f5122bf82465f5d4d521b341d79a2d915b743b5a02305b1072bb9c319a8037deeca43d6f40da9e5c5501a414aa9ba1067a967ae29267853b60280a89b29c4925531eedb1458b50c204dfd84516ee13d2f91bf825d8b1d4a1d59ec7803d135205c4f96c3651ad6091a46d32a12e28604aeada36fa4b17e31ea77f7ee2a7be2e3b52ca1b218437250e18e65da3c58ebe74d4bd126718e9c4190e500dc95a6e7074daf1c9bf375f7d2dd3962c2ec657294f3f4de840cfba3c3ca8ce304957a2dcc6688b9d0d520cdb3dcb88d756d0bc496db74af3abecae746155ec1726096ba8b71a6c836db957f21b5a2fa3e008f56b2ada2b72a1fda1ea136732728e6a88b09f5cf3ab9b32a57eb83bdb2a5ec169e53860ce5ed15110e142ac91ee638a0456e12f6a04dbe9aae10af17d47d4a4c5ff4cb13384a5503acc9289cbea07a514ac219769df03cfdaef3ee10d18539aa5b5df7c04daf7e3fc221ece499b09507b7568c02d8e0385b02b1acb22b750793beb98fb38a32432bc732e28419d1000cd575f0c15ec85d896917a2472f29d51aaeafb726a2630590437a2f5d3f5f95eb698e19da3362f2d82fc6ab12deef0a7fb6410da1a7cfeb742876a0059931883add6879514468ea71070610e20d42f4c6b4f47edeae8548cbbd26bbbb20d3c0cc733166c6958f28421d8582524ab9093289b0dcd04eed0bec7935ad6ca3d3015f8bc422ab4284115ed5d94dc55ca8325dc0ec359a5e6b7d5d63274a49e55c1f4a8f9fb704d8a081f7917d4ece8294528ae44ba3fb49b02372db72b565ffe69e8cc34c103f490cb85522d7f3dbbecc479d7897046adcb3494f036a67726b63a85101aaaf1a7fcfe5dd9d0f840818b73a47e0dd1dcfb879133e0c09ed5675351d0b119d83c38a7e3fed019c82fcd5648aba1d3d1f587f77fed5dd2f2a32efba4399bd03d1a5f1b6cbbaac73c82ce190be8728991fc96c90fe00224d20978ad2c04f901290a4751cdab18d32cd732fbc241e3f7c061cb0f92a68b2e17e08d027cee7aa7a212090b6d8cb2c9eb521956d2cacb3c08d47fd171dc483ae7a932ed06fe049d76ff97c4262f3bf467f102f803873e47fb8f13f4f8fb522a05620d9f222601a2764ef7b238c3b114fefc7bf5267e3e15b04663f876b793db6dc1040e32b0d0665f26c22155592a48115bfa3f065e53f60eec76958d6c6f6594b1af49574c2a77e563f148fed913a87181a18478a36a497a7950784d0e3e1b7d892fe51578fa603d3be1d7703c15ebb21c1d3bf817d0fdcb0bc1def81ecb62a39419d4fc5c58c36b3bd58ac659dd9bb400bb82964aef7a4d42f457ff68dec895861ed769875edb49be8b994ebf0c1deff4c0c82667f092fc61ae6b838a1e46fc6e7543fb8f984303d54e50e72837065289d32a5427d876190d39396472c455bfbe4713b48962acdaab0aaffff3d9b3eb1498239402631578907c957c69b7a6f5c1841b7bb15dc6dd0fd6a29c086cb33826373ceb8d76499060374c3ff3961dcfb10ab702edb15482199f567c978fec00916d94a25b4cde33641593df1ced841edb992a55fe1a9521c315b7ab7bca0342ea7c336e335bedd18b49a91ed40c874c0fd76378209c66b9c8035997c726130865b2740dc4bcb49ff1d7e30e9ef34142111a8624c44b9100bf9c8c634a4c4aa05e80dd4dd4e6c90918070a1fb78f8413dab7f507a7659a6cf43ef3b5d839d6081711927be7952fb845461ccd2f80abf256481299d781c8cf3509926a54a4e775c9c4bdee9d6369398acccd3e45fb2aa980857864eff715907929a5f50e3900d78dd753fb2713f4a871741a900117abbc64c1c4288e038d1fbfe14941943ce37d27bc475c5fa91d27a81e684827378394c528b32a6634195c996ba4d8f1bd816fe807dc82ce2ab92802eb1032c5d27695337e7392a6f9c2decb283cc21a11557521d39db19446162535b70eb3fea5d06650899e5970d6d13bc83d816dd0e80b84c805fde1b7364dac1dc07a102ba293d40c74e524de2a1cda62122c3d39e6059c3c5020e577bb5a7d77552af9d3b0e0fc4fa7d72a784bcc2cfb6105e3325f0105b55f2f9872f0df13bd6d8c02f3f4b75f37fc270a7547d26b991db758e21b32c70f92402969d54dd3901301b035b7477b8e9ec11a4760cea40e1593271be0b02b65021cc2536a455785d0290ed3d7cf87f66541db59025cb3330ac3d99c1f079f7c2ce72c182000eece2a65d460da3851f36bb8d7f5a3acf275f90691802e890d67f07dda02dc4e2695d3d0169d467d40b7fbbc66e57a056433b1ea040b78bd8b2d561276f6bc71525a60a4a57ac00616fa3d4f4e0e5a2425fbd853161fb1def69d8c752cd0ba663272147c7504edb8bc8e8007eb930cb9674b743d129f18a32441a0164171bc5d80f0f5f2492bbd05e03666a61fff0ddd1d932e00a6c3d7f3cb7883160b85651c5776a480daf0baac11dd18d85035d8aaa7161605542906fc1c12ab0aebc72ae7c3427d2b554c235d44e196b60575fad60c701d764bfd8057a6fc6ceb9501106ae7ac18354ab79ff38ae25a0ac327edd7399679850247aae0e69888e1287089baa2f950d7f35947125de88ec6bfaee0ef35f86094ba79474f0216b15a563a5edc37bf43384b8cabd70a92df556dd2186dc7503ac9df509e1d0b180af7e379d92376d94e41ec1cb634214cf27ea07a83dc3034a3a138e15d3e2ed3419aaff72b81cd4463217b4da346a41e50b7db61e916009e17ed6e33855da0c36b03d5164c35bb525ca703e416add6a3b533bd3a339a28a82cb80d5b803227b4d3173a65163212d5a1e2fe4b933d435517dc87e157a1e595f81250c3fb3f7516dbfa8f878385c868912631f6bcdb0891f8d0e815e30449d66fbb653c51c09a94027b2ec0d0784d619b164afcde7da74ed49664e1cd3d6548b2fc68aab9a5a8ea12f37db4070194a7237b79f6ff0a17e3bf92577042f454bfb0a9ba0e8c0e22f029b82f94fbb47f49f911ca72c1c3dda0d7cba1b60903eb4c526b532c3dd63d0daea1a9d81770f29879499cb61f25147059e650e6d68d57809c28dd0b2356b14e341f96c17b72aa5b9a7802131aaf32998b188f53a41ef7c64bf5a1a9d7b1ad959c2abab7af10acd46e2e8bb4b0c6149c7fd2e8501bb1696c3c60b37ba2a1db2cb52b2979ab86f4894dd232ce62962c6404222694893b2eea28b802b02a8adbd0ca43ac41488a14fa126e163e7cb7cdf61ec78d9b40ead13da6a3c64999e11ca8a83941a57364f53ec8b8e6224132f7003a217b3c9ded0c7c6241da21efa9f62a65df1cc9fd25b40ac88ced2257ca83c1c262"}) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f0000001940)={'xfrm0\x00', {0x2, 0x0, @multicast2}}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000001980)=0x8, 0x4) read$FUSE(r6, &(0x7f00000019c0)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f00000019c0)={0x2020}, 0x2020) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 18.244749532s ago: executing program 0 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0x300}, 0x8) (async) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0x300}, 0x8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 18.243785234s ago: executing program 0 (id=107): unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f00000000c0)={0xffffffffffffffff}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x3c57, 0x200, 0x0, 0x361}, &(0x7f0000000180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf3b1, 0x4000, 0x2, 0x341}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe19d, 0x80000, 0x1, 0x219}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xea76, 0x100, 0x3, 0x2ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfb4, 0x4000, 0x3, 0x5c}, 0xffffffffffffffff}], 0x4, &(0x7f0000001400)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x4, 0x1c4, 0x0, &(0x7f0000000400)=@buf_512="6ea19ee3b0cd99b7ff3c17cdd953f54071c4cd6aadecf67a67bf75b13e0bdca5b5c79f4078c99a87cadf254baaaadd1a47450a94fe3e09f5a8acf6de04cebaca4b0679f4aa8b458ce6f3bcbbd8290c59ce8ae6ac758dcfac7f49731531b71c9f64d8f8c0caa0d40aff7d2c7eb2783b9d537906dcd7644fd0a264ea89315ebec91592e41d08d79e5ca4d39129cea390dc267d106b39a3cf53d95699e6e123e60028af1040ce055deff650b517b14e99e3b4e5cd3907f360a900048d4470e3583a050021c65c3e10763d05d40638f1f481b98923ccf71109d81d15aabda17e8b317b3f246ac9eeffd6a2a783c5d52394669367230ee2e2bf11bc397191e0a9e319e92dac9103fb9b7051d2e00ca3afed197989a5184ae76a1eca79b82cb6d15e433e6551dabb1686957501f580936228df51b00b111cdd6e5f05a3716b99a4a8c5f8911e656de7bafe72e36ed6bd251babe13d18c4e910594524e3744fdde8521a2bc1d3e2a8b441926e54021b588a65cff867d40dea0bdce6dee8c37d5cbfecbe2e977598759c6e58b47a916b6fc47429e5db232a43449e77d69de49ec7e9100f7ce27eaf49da13f14c004908bca87f9a1c0cd967d3cd608046eaaa54318c801159a95d2d2b58b51347ff5dfe987bd8916662bdea203936d6659036e01579a97edff682a4657f730314a4b5fb5c23704faf2f22f5e97329b9b8877264b2a16200"}}, &(0x7f0000001480)) syz_io_uring_setup(0x5080, &(0x7f00000014c0)={0x0, 0x74e4, 0x8000, 0x2, 0x29f, 0x0, r2}, &(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000001600), 0x101000, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000001640)=0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001680)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001740)={0x1c, 0x0, &(0x7f00000016c0)=[@increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x2}, @exit_looper, @increfs={0x40046304, 0x2}], 0x1b, 0x0, &(0x7f0000001700)="b4bbd70d968a4c8021c99182c859823cb04ea2d229c3def92c81cf"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x5, &(0x7f0000001780)) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000017c0)='./binderfs/custom0\x00') setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000001800)={0xe, 0x8}, 0x2) syz_open_dev$mtd(&(0x7f0000001840), 0x1, 0x301200) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001880), 0x800, 0x0) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f00000018c0)={0x7, 0x3fc, 0x2, 0x3}) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000001900)='./binderfs/custom0\x00') r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001940)='./binderfs2/binder0\x00', 0x2, 0x0) chdir(&(0x7f0000001980)='./file0\x00') ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f00000019c0)={0x0, 0x0, '\x00', @raw_data=[0x5, 0x8d, 0x0, 0x1, 0x3, 0xfcfd, 0x8000, 0x10000, 0x8, 0xf75, 0xb4, 0x2, 0x1, 0x7fffffff, 0xfffffff9, 0x4, 0x5, 0xa, 0x0, 0x5, 0x3, 0x4, 0x1, 0x8, 0x1, 0x6, 0x80000001, 0x9, 0x681, 0x5, 0x3, 0xfffffffd]}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0xfffffffffffff162) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000001a80)={0x1, 0x8}) r8 = dup(r4) ioctl$FE_GET_EVENT(r8, 0x80286f4e, &(0x7f0000001ac0)={0x0, {0x0, 0x0, @ofdm}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r9, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x28, r10, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x2, 0x12}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048004}, 0x10000800) socket$inet_sctp(0x2, 0x5, 0x84) 17.932757103s ago: executing program 0 (id=110): io_setup(0x6, &(0x7f0000000680)) r0 = syz_io_uring_setup(0x7606, &(0x7f0000000040)={0x0, 0x74d3, 0x8, 0x2, 0x24b}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0xf2, 0x1, 0x0, 0x0, &(0x7f0000000200)}, 0x20) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @ldst={0x3, 0x1, 0x3, 0x4, 0x5, 0x4, 0x1}, @call={0x85, 0x0, 0x0, 0x5e}], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="030000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), &(0x7f0000000380)='\x00', 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r6, &(0x7f0000000400)=""/1, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000400)) 17.891691551s ago: executing program 32 (id=110): io_setup(0x6, &(0x7f0000000680)) r0 = syz_io_uring_setup(0x7606, &(0x7f0000000040)={0x0, 0x74d3, 0x8, 0x2, 0x24b}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0xf2, 0x1, 0x0, 0x0, &(0x7f0000000200)}, 0x20) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @ldst={0x3, 0x1, 0x3, 0x4, 0x5, 0x4, 0x1}, @call={0x85, 0x0, 0x0, 0x5e}], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="030000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), &(0x7f0000000380)='\x00', 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r6, &(0x7f0000000400)=""/1, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000400)) 15.662947024s ago: executing program 4 (id=118): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0x906, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x44c, 0x2c, 0xf1f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x420, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5f, 0x3, 0x401, 0x622e, 0x4, 0x3, 0x8, 0x7, 0x3, 0xa83, 0x3, 0x9, 0x3, 0x8, 0x1c, 0x9, 0x7, 0x1, 0x8, 0x1, 0x9, 0x9c, 0x5, 0x1, 0x6, 0x1, 0x4, 0x5bec, 0x0, 0xd5, 0x1, 0x71, 0x2, 0x7, 0x4, 0x8, 0x0, 0x5, 0x3, 0x51800000, 0x5, 0x6, 0xd, 0x2, 0x6, 0x0, 0x8001, 0x3ff, 0x2, 0x100, 0x3, 0x9, 0x7, 0x200, 0x3, 0x9, 0x8, 0xbfdb, 0x2, 0x7, 0x2, 0x5, 0x8, 0x71, 0xf, 0x3, 0x1, 0x0, 0x7, 0x4, 0xffff08e6, 0xffffffff, 0x8, 0x6, 0x8, 0xffffffc2, 0x2, 0x4, 0x8, 0x4, 0x800, 0x30, 0x9, 0x1, 0xfffffffd, 0x5, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0xffffffff, 0x9, 0x8, 0xb, 0x956, 0x7, 0x6, 0x9, 0xe3, 0x86, 0x4, 0x6, 0xc, 0x40, 0x6, 0x5, 0xf, 0xe50, 0x1000, 0x4, 0x81, 0x9, 0xa, 0x8, 0x40, 0x401, 0x400, 0x2ae, 0x0, 0x73, 0xff, 0x9, 0x3, 0x4, 0x6, 0x5, 0x80000000, 0x3, 0x0, 0x10000, 0xc39, 0x10000, 0xe1, 0xff, 0x44, 0x3, 0xfffffffb, 0x3, 0x425, 0x38, 0xe6, 0x220b, 0x4, 0x9, 0x1, 0x1, 0x5, 0x6, 0x20000, 0xfffffffb, 0x9, 0x10001, 0xf, 0x7, 0x6a3, 0x800, 0x6fe, 0x8, 0x3, 0x4, 0xfff, 0xfffffff9, 0xf, 0x48, 0x0, 0x8, 0x9, 0x8, 0xb0000, 0x10, 0x3, 0x81, 0x8, 0x2, 0x8, 0x6, 0x800, 0x7fffffff, 0x800, 0x8001, 0x10000, 0x8, 0x4, 0xe7ff, 0x4, 0x660, 0x6, 0x2, 0x0, 0x3, 0x75, 0xff, 0x5, 0x7, 0x10, 0x2, 0xe, 0x23111adc, 0x4, 0x6000000, 0xffffffff, 0xffff, 0x1000, 0x80000001, 0x6, 0x0, 0x1ff, 0x80, 0x8, 0x5, 0x0, 0x7dfb, 0x2, 0x9, 0x2, 0x9, 0x14fa28ee, 0x4a2a, 0x5, 0xffff, 0xfffffffc, 0x8000, 0x5, 0x91, 0x4, 0x1000, 0x2b804b06, 0x3, 0x4, 0x400, 0x8, 0x8, 0x0, 0x23c, 0x9, 0x6, 0x1, 0x6, 0xe7e2, 0x401, 0x2, 0xa4ab, 0x8, 0x5, 0x0, 0x80, 0x6, 0xfffffffc, 0x200, 0x0, 0x2, 0xa, 0x0, 0x4, 0x5]}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_vlan\x00'}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}) chdir(&(0x7f0000000000)='./bus\x00') linkat(r10, &(0x7f0000000100)='./file1\x00', r10, &(0x7f0000000180)='./file0\x00', 0x1000) link(&(0x7f00000001c0)='./file0\x00', 0x0) unlink(&(0x7f00000004c0)='./file1\x00') 15.355012427s ago: executing program 4 (id=125): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="cc00000021000100000000000400000000000000000000000000000000000000fc02000000000000000000000000000100000000000000000200000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b76b6e0000000000500011"], 0xcc}, 0x1, 0x0, 0x0, 0x450b4}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20400, 0x0) ioctl$COMEDI_UNLOCK(r1, 0x6406) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r2, &(0x7f0000001600), &(0x7f0000001700)=@udp=r3}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x74}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) 15.273819627s ago: executing program 4 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="66643d097c71ebdf36e80b977bd42592fc4db0fcbf78843c4d82c08518eb2857d6ec1e4b92b75e1ae7af3e9e76f5990c04d9e0c9ff083632ee21f566c5588128d3c0b5c4b03829f1ea6f168266b16477c3e5a0d40300a5fbb5c7eaa0255684b0c10a426aef087eec523b64ec1489207c510bd8e7e5e1fa7704c7ea37deb5143d9e64daf8d1e73a391a64ff7d20b1317f87b59e98ff78c553985d6e1715ff160f8d06fd1305be30fce6c48f9a996171f2819e1335c9244a56908f5dae58889e21d485be932b53bdfc16c643f90df711de0b113b634728e0f2ed6f2b", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000400)={0x33, 0x29, 0x4, {0x10001, [{{0x28, 0x2, 0x7}, 0x1, 0x80, 0x10, './file0/../file0'}]}}, 0x33) acct(&(0x7f00000005c0)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peekuser(0x3, r4, 0x8) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xffffffffffffffda, 0x4, {0x1fffffffffffff9, 0x2, 0x400000005, 0xfffffffffffffffe, 0xa003, 0x1ff, {0x8, 0x2, 0x6, 0x2, 0x2, 0x3f49, 0xc05, 0x9, 0xd, 0x2000, 0x0, 0x0, r2, 0x10000, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.174878098s ago: executing program 4 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 3.074753843s ago: executing program 3 (id=245): r0 = dup(0xffffffffffffffff) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000340)={{0x7fff}, 0x100, './file0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0xaf02, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000540)={0x0, @bt={0x10000, 0xfffffff8, 0x0, 0x2, 0x5, 0x7fffffff, 0x4, 0x7f43a0f7, 0x7, 0x8, 0x3, 0x3, 0xd, 0xb, 0x5, 0x1, {0x81, 0x7}, 0x2, 0x3}}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x4, r5, 0x1, 0x2, 0x6, @broadcast}, 0x14) 3.072441568s ago: executing program 3 (id=246): mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) syz_clone(0xc9901400, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000680000/0x4000)=nil, 0x4000, 0xa) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 2.942478949s ago: executing program 1 (id=247): socket$inet6(0xa, 0x5, 0x0) (async) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x10) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) unlink(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async) unlink(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sec/tomoyo/domain_policy\x00', 0x101001, 0x147) write(r1, &(0x7f0000000300)=' /new_!omain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain\n', 0x65) openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) getsockname$inet(r6, 0x0, 0x0) (async) getsockname$inet(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x200, 0xffffffff, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {0x2, 0x9}, {0xffff, 0x7}, {0xffff, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}}, 0x0) getpeername$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) (async) getpeername$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xb94}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x101}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xfe}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000010c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001080)={&(0x7f0000001300)=ANY=[@ANYBLOB="d8040000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="fc0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400020000000800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400fbffffff08000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000001000008000100a43897e991d45e1e87641ed8e7331f7a67f54d04d546fe99c08e7a70318ca3b8474b51636981e55255aa901897dac53a807b9564fb026337dcd74d82964acd747e8322d0a69a20db1718ea8a1edf6a35638d0d398e07c44eff0f5fe5e393cfe60bb500a096a2a65806c93f2dd248c20b19162ab2ef935f7a", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="b8000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000008000100", @ANYRES32=r7, @ANYBLOB="b40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004001975000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000044c60208000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040002000000"], 0x4d8}, 0x1, 0x0, 0x0, 0x200488c0}, 0x44411) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000010c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001080)={&(0x7f0000001300)=ANY=[@ANYBLOB="d8040000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="fc0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400020000000800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400fbffffff08000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000001000008000100a43897e991d45e1e87641ed8e7331f7a67f54d04d546fe99c08e7a70318ca3b8474b51636981e55255aa901897dac53a807b9564fb026337dcd74d82964acd747e8322d0a69a20db1718ea8a1edf6a35638d0d398e07c44eff0f5fe5e393cfe60bb500a096a2a65806c93f2dd248c20b19162ab2ef935f7a", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="b8000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000008000100", @ANYRES32=r7, @ANYBLOB="b40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004001975000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000044c60208000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040002000000"], 0x4d8}, 0x1, 0x0, 0x0, 0x200488c0}, 0x44411) r13 = eventfd(0xf9) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x803, 0x80a0000, 0x0, r13}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x10000, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x8b2b, &(0x7f00000000c0)={'bridge0\x00', @local}) 2.774632666s ago: executing program 3 (id=248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x401}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xa0100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0x27f, 0x2}) 2.774435257s ago: executing program 1 (id=249): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 2.68484759s ago: executing program 3 (id=250): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x40010) 2.684158413s ago: executing program 1 (id=251): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x608002, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r0, 0x4068aea3, &(0x7f0000000040)={0x9f, 0x0, 0x1}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000000c0)={0x127d, 0xf}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r0, 0x4068aea3, &(0x7f0000000100)={0xd5, 0x0, 0xac2}) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x62fa) personality(0x5000002) recvmmsg(r0, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/181, 0xb5}, {&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000000340)=""/235, 0xeb}], 0x3, &(0x7f0000000480)=""/95, 0x5f}, 0x1}, {{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000680)=""/186, 0xba}, {&(0x7f0000000740)=""/196, 0xc4}, {&(0x7f0000000840)=""/93, 0x5d}, {&(0x7f00000008c0)=""/219, 0xdb}], 0x5, &(0x7f0000000a40)=""/104, 0x68}, 0x10000}, {{&(0x7f0000000ac0)=@caif=@util, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000b40)=""/144, 0x90}, {&(0x7f0000000c00)=""/171, 0xab}, {&(0x7f0000000cc0)=""/215, 0xd7}, {&(0x7f0000000dc0)=""/197, 0xc5}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f40)=""/49, 0x31}, 0x15}, {{&(0x7f0000001f80)=@rc={0x1f, @none}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002000)=""/254, 0xfe}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/105, 0x69}, {&(0x7f0000003180)=""/227, 0xe3}], 0x4, &(0x7f00000032c0)=""/30, 0x1e}, 0x200000}, {{&(0x7f0000003300)=@ethernet={0x0, @random}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003380)=""/178, 0xb2}, {&(0x7f0000003440)=""/31, 0x1f}, {&(0x7f0000003480)=""/228, 0xe4}], 0x3, &(0x7f00000035c0)=""/80, 0x50}, 0x1}], 0x5, 0x21, &(0x7f0000003780)) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f00000037c0)={0xeeee0000, 0x14000}) uname(&(0x7f0000003800)=""/119) personality(0x4000006) ioctl$KVM_CAP_DIRTY_LOG_RING_WITH_BITMAP(r0, 0x4068aea3, &(0x7f0000003880)={0xe1, 0x0, 0x101000}) uname(&(0x7f0000003900)=""/213) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000003a00), 0x2, 0x0) r3 = dup2(r2, r0) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000003a80)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000003a40)=0x100000001}) r4 = openat(r0, &(0x7f0000003ac0)='./file0\x00', 0x103001, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000003b00)=0xfffffffd) uname(&(0x7f0000003b40)=""/218) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000003d00)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x2c, 0x0, 0x405, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x20060001) uname(&(0x7f0000003d40)=""/58) uname(&(0x7f0000003d80)) uname(&(0x7f0000003dc0)=""/35) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000003ec0)={0x80000000, &(0x7f0000003e00), &(0x7f0000003e40)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000004340)={0x0, 0x5, 0x0, &(0x7f0000003f00)=[{}, {}, {}, {0x80000000}, {}], 0x4, 0x0, &(0x7f0000004100)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f00000042c0)=[{}, {}], 0x1, 0x0, &(0x7f0000004300)=[{}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000004700)={0x0, 0x5, 0x0, &(0x7f00000043c0)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000045c0)=[{}], 0x2, 0x0, &(0x7f0000004640)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x2, 0x0, &(0x7f0000004680)=[{}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000004780)={{r5, 0x0, 0x0, [0x2, 0x9]}, {r6, r7, 0x0, [0x521f, 0x5]}, 0x4, [0x1b7, 0xe]}) uname(&(0x7f00000047c0)=""/4096) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000005940)={&(0x7f00000057c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005900)={&(0x7f0000005840)={0xb8, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x64b, 0x43}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x8, 0x6}, {0x18, 0x2}, {0x8, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x8, 0x2}, {0x40, 0x6}, {0x4, 0x4}, {0x5a}, {0x2, 0x1}, {0x8, 0x7}], "ba359245e7d9a179"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x9, 0x5}], "3c4ce72ab59d5d36"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x9}, {0x7, 0x3}, {0x5}, {0x1, 0x3}, {0x3, 0x2}, {0x4, 0x2}, {0xd2, 0x1}, {0x4, 0x7}, {0x8, 0x6}, {0x4, 0x7}, {0x4}, {0x5, 0x2}, {0xc, 0x6}, {0x73, 0x4}, {0x8, 0x2}, {0x9, 0x7}, {0xf9, 0x2}, {0x7f, 0x1}], "6ea82c6a5205d6bb"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x40, 0x3}, {0x18, 0x4}, {0x7f, 0x2}, {0x3}, {0x7, 0xc5}, {0x3, 0x7}, {0x81}, {0x9a, 0x6}, {0x9, 0x4}, {0xb}, {0xf}, {0x0, 0x3}, {0x1, 0x2}, {0x4}, {0x5}, {0x5, 0x5}, {0x7, 0x3}, {0x10, 0x6}, {0x7f, 0x4}, {0x2}], "96d86c9b07b33310"}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 2.623784068s ago: executing program 3 (id=252): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0x4008032, 0xffffffffffffffff, 0x97224000) mlockall(0x1) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) link(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2e}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x5}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x68}}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) unlink(&(0x7f00000004c0)='./file1\x00') 2.621193954s ago: executing program 1 (id=253): openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) write(r0, &(0x7f0000000300)='p:_est/_vent1 ./file0:0x0 _rg2=\\\"', 0x21) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_usb_control_io(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x20, 0xc6cdb91b1c448aed, 0xb, "2c33bb55b5878989fe6d97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0xfffffffffffffe74, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4048001}, 0x20008800) 2.195012932s ago: executing program 3 (id=258): syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) (async) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000200)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) (async) bind(r0, &(0x7f0000000100)=@generic={0x8, "0000ffff00006400"}, 0xc) ioctl(r0, 0x400261f2, &(0x7f0000000400)="0100000000000000") 1.264980351s ago: executing program 2 (id=264): r0 = syz_io_uring_setup(0x141f, &(0x7f00000003c0)={0x0, 0x2c8e, 0x40000, 0x1, 0x400139}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x4) io_uring_enter(r0, 0xcb, 0x1920, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f00000001c0), 0x190c, 0x0) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x8042) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, 0x0, 0x20) 1.183126553s ago: executing program 2 (id=265): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd27, 0x0, {}, [@IFLA_MTU={0xfef4, 0x4, 0x5e0}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x8000) 1.104836161s ago: executing program 2 (id=266): openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x840, 0x16f) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="1e", 0x1}], 0x1}}], 0x1, 0x9200000000000000) (async) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r5, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000080)=""/229, 0xe5}], 0x1, 0x100, 0x9) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r7) r9 = epoll_create1(0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl(r12, 0x4048aecb, &(0x7f0000001000)="070000000000000001000000ffffffff") (async) close_range(r9, 0xffffffffffffffff, 0x100000000000000) (async) syz_emit_ethernet(0x15, &(0x7f0000000300)={@broadcast, @random="748076b967f8", @val={@void, {0x8100, 0x6}}, {@x25={0x805, {0x1, 0x3, 0x5}}}}, 0x0) (async) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf250800"], 0x38}}, 0xd4) (async) r13 = syz_open_procfs(0x0, &(0x7f0000001ec0)='sessionid\x00') readv(r13, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000001480)={0x60, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfffc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x6008001}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) 894.923825ms ago: executing program 2 (id=267): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x161d43, 0x1a) fcntl$setlease(r0, 0x400, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000240)='./file1/file0\x00', 0x400, 0x2) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in6=@mcast1, 0x4e20, 0x4, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r3}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffff8}, {0x0, 0x1, 0xfffffffffffffffc, 0x200000000000ff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xa}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r4) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x60000, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1c, 0x1}, 0x8, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0}) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="130828bd705b0102be49b60994ed00ffdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000003c0)) chdir(&(0x7f0000000000)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000180)='./file0\x00', 0x1000) link(&(0x7f00000001c0)='./file0\x00', 0x0) unlink(&(0x7f00000004c0)='./file1\x00') 804.85057ms ago: executing program 2 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 804.189571ms ago: executing program 2 (id=269): mount(&(0x7f0000000040)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000780)='romfs\x00', 0x204001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x40000002, 0x0, 0xc}, {0x40000002, 0x0, 0x7}]}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) syz_usb_connect(0x4, 0x6d3, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x5e, 0xc7, 0xdb, 0x8, 0xbda, 0x179, 0x9a22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c1, 0x4, 0x9, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0xfa, 0x8e, 0x4, 0xff, 0xff, 0xff, 0x9, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "cd0c56acf1"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x23}}], [{{0x9, 0x5, 0xc, 0xc, 0x200, 0x35, 0x86, 0xff, [@generic={0x40, 0x29, "6872f65dc68b94f36a2fd37cbb9ffa516710a1c522e940584bc48d084ab3f9ae45c7ebcf7a941ae6fbc0a97c1c1f40e85b401536ed95ad34ce6079f1ef9d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x41, 0x7ff}]}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x8, 0x2, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0xd1, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9c}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0xeb, 0xff, 0x5}}]}}, {{0x9, 0x4, 0xd, 0x2, 0x0, 0xff, 0x0, 0x40, 0x8, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "189b002e"}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0xaa9, 0x8, 0x9, 0x3}, [@acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x10}, @mdlm_detail={0x1c, 0x24, 0x13, 0x0, "92905fcd15e732fffb2f89329e78a8760db548eb046cde28"}, @country_functional={0xc, 0x24, 0x7, 0x3c, 0x0, [0x6, 0x4, 0x67]}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x7, 0x7f}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "cb"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe, 0x7, 0x9, 0x6}, {0x6, 0x24, 0x1a, 0xfb, 0x2}}]}}, {{0x9, 0x4, 0x7a, 0x3, 0xc, 0x31, 0x9e, 0xe0, 0x3, [], [{{0x9, 0x5, 0x0, 0x1, 0x200, 0x7, 0xc, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf, 0x8001}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x8, 0x3, 0xcd}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x0, 0x6, 0x37}}, {{0x9, 0x5, 0x8f, 0xc, 0x8, 0x0, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xec, 0xfff7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x7, 0x3, 0x81}}, {{0x9, 0x5, 0x7, 0x11, 0x400, 0x3, 0x2, 0x4, [@generic={0xba, 0x2, "0cd6930fa90cc9842a525ef6d99a86c173dbaba0c0531d8d12455dbb1fbea209e16a647824dda778f1945f7e156dbec534b8e7934112ef772c2b90d55a3c8de830bf68427d317a038f110717f32d3c26456804b462f9c4214a724024111b9ea2bec9581d37c4e2f06f8c805062b5e70662c7a9e25b3cf2aac9f967f96c54a4e09c9a12f131df06ee00939e4485ba0c96ac0935ddc71364431eb10362faff3f8af49d4953bc391797e211c33dd485328ca7719a15a2eb2e8d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x80}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x0, 0xd, 0x4}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x78, 0x80, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xde, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0xdd13}]}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x10, 0xc, 0x1}}, {{0x9, 0x5, 0x8, 0x10, 0x210, 0x9, 0x8, 0x40}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x6, 0x7, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x28, 0x7}]}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0x2, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x9}, @generic={0xa2, 0x7, "bf35c880e0ec8456dc4f007efbffac7318440aebb00043d1396d7db2b743b3270f091a32d4d446ff21952dba8ac7e3c270a4a4466a3f2ea814e6db3a509fdbf9bf06c2e646d09629f5d4e32aa56f5e4aee36e4f03ea12475f7bf6a9e52249dda97f827ca57b3832fd588ee22407b1409c25ee69685fddfe385003390efad87140d87d2031472ae1345c635794223ccaf75ea86e6f6262f9d3a90abc13b6f23fc"}]}}]}}, {{0x9, 0x4, 0x3d, 0x0, 0x9, 0x42, 0xf5, 0x5c, 0x3, [@generic={0x102, 0x10, "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"}, @uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x4, 0xf, 0x77, "6c589faff15c67"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x1, 0x7, 0x3}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x59, 0x1, 0x0, 0x7, "c63fd7"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x8, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8001, 0xac4, 0x2, 0x2}]}], [{{0x9, 0x5, 0xc, 0xc, 0x8, 0x8, 0xf7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf7, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2c}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x33, 0x87, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7fff}, @generic={0x19, 0xe, "92eea1f4ed4b8212f8a078b32763cc1666ee2b8d581baa"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x6, 0x31, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x6}]}}, {{0x9, 0x5, 0x2, 0x10, 0x68, 0x8, 0x26, 0x7}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0xad, 0x9, 0x4}}, {{0x9, 0x5, 0x14aba3cee050854a, 0x4, 0x10, 0x2, 0x3a, 0xc, [@generic={0xd1, 0x27, "fe730f71dda52828c0d1119a6fbc7dac30237dd21c491d134586e2d7d2a66980c0ca155f192dcf0b7fcfa51cafc3c513ac9989309134875f2e3b6db557c9c58d7a2c7fbba659cf4d0ab937f52f55ee4f63a728129e9fbf1b84d64c7b428fca3b007f44d2d5807cfbabc36216a626243872dc720ecfc47486dcd370c73b2011cff1774f3f350d94ca2056a2d171d3f49024942f670cc03644b4d65daec27b426528a1dcd1e58d1ecf2f3e9fee14072afbdc2829f8cb4c42be4304ef429eb05a769cf0dbf3e517b8a7e040ee2ce3c1fd"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x1, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x0, 0xb2, 0xa, [@generic={0xdf, 0x11, "d8675339bdcf893794f32881ab69d1f7e1357ca0997ac813444cabe27f3938a6e6ca9e2b87b71fbe49fff7434f65ad980e4c9d1ae6802b47b218e787c03a6925d1f9580a41d88b7652277cd3cebbf52db8f714c52977f348928bcf8fb416b00715b5e063c30455ca9a964622568084c8be8cf706b8b23c66e33118827ae91eb8d7bd67fdc17ad9e23091b5faf77b24ff897fca73ddf599f74debead99012f3bcafd0a208917016ab71aed0ba1e9c8e84d52c8f50ce84f78f7feeb5928a378400c4211b7736c0de26f02080be83134638a7ae896a23a194c320808aad72"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x14, 0x9, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x2}]}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x200, 0x9, 0x24, 0x7, 0xd9f671f57b988a0d}, 0x70, &(0x7f0000000300)={0x5, 0xf, 0x70, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0x2, 0xff00, 0x918, [0xc000, 0xf]}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x3, 0x0, 0x5, [0x3f00, 0x3f00, 0x808038, 0x3fcf]}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0xf, 0x100, [0xff00f0]}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x5, 0x5a436e17a65cc422, 0x5, [0xff3f30, 0x1fe3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "9d6bf0946fbf20bf0da900fbec10946b"}]}, 0x4, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x809}}, {0x102, &(0x7f0000000440)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x423}}]}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r9, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001380)={r10, 0x0, 0x0}, 0x20) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r11, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8840) 126.293238ms ago: executing program 33 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 84.073736ms ago: executing program 1 (id=271): r0 = socket(0x10, 0x3, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000040), &(0x7f0000000140)=0x0, &(0x7f00000002c0), {0x30}, &(0x7f0000000300)=""/228, 0xe4, &(0x7f0000000400)=""/82, &(0x7f0000000480)=[0x0], 0x1}, 0x58) ptrace(0x11, r3) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103a"], 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a30"], 0x7904}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x13, 0x0, 0x0) write(r5, &(0x7f0000000100)='1', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4c050}, 0x24000884) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x58, &(0x7f0000000240)}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x804) 0s ago: executing program 1 (id=272): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000300)={r3, r4, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000440)=[0x3], &(0x7f0000000640)=[r7, r7, r8], &(0x7f00000003c0), 0x0, 0x2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r10 = socket$alg(0x26, 0x5, 0x0) r11 = syz_io_uring_setup(0x2fd5, &(0x7f0000000400)={0x0, 0x9e8a, 0x10, 0x10000000, 0x205}, &(0x7f0000000100)=0x0, &(0x7f0000002340)=0x0, &(0x7f0000002400)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x1, r10, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r11, 0x126, 0xfffffffd, 0x29, 0x0, 0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r15) sendmsg$NFC_CMD_LLC_SET_PARAMS(r16, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="010026bd7000fedbdf2510000000050010000100000005000f0002000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r9, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000040)={0x30, r18, 0x0, 0x0, 0x0, 0x100000, 0x80000003, 0x0}) kernel console output (not intermixed with test programs): [ 38.070762][ T43] audit: type=1400 audit(1790480340.033:137): avc: denied { siginh } for pid=5708 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:21672' (ED25519) to the list of known hosts. [ 40.162619][ T43] audit: type=1400 audit(1790480342.123:138): avc: denied { name_bind } for pid=5715 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.196556][ T43] audit: type=1400 audit(1790480342.163:139): avc: denied { execute } for pid=5716 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.198516][ T43] audit: type=1400 audit(1790480342.163:140): avc: denied { execute_no_trans } for pid=5716 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.674984][ T43] audit: type=1400 audit(1790480344.633:141): avc: denied { mounton } for pid=5716 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.685990][ T43] audit: type=1400 audit(1790480344.643:142): avc: denied { mount } for pid=5716 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.688429][ T5716] cgroup: Unknown subsys name 'net' [ 42.779499][ T5716] cgroup: Unknown subsys name 'cpuset' [ 42.781893][ T5716] cgroup: Unknown subsys name 'rlimit' [ 42.999127][ T5722] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.717367][ T5716] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.314657][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 47.314671][ T43] audit: type=1400 audit(1790480349.273:158): avc: denied { execmem } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.488462][ T43] audit: type=1400 audit(1790480349.453:159): avc: denied { create } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.488985][ T43] audit: type=1400 audit(1790480349.453:160): avc: denied { read write } for pid=5728 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.489372][ T43] audit: type=1400 audit(1790480349.453:161): avc: denied { open } for pid=5728 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.497547][ T43] audit: type=1400 audit(1790480349.463:162): avc: denied { ioctl } for pid=5728 comm="syz-executor" path="socket:[7389]" dev="sockfs" ino=7389 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.504063][ T5730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.505727][ T5730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.506769][ T5730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.507450][ T5730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.507905][ T5730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.517792][ T43] audit: type=1400 audit(1790480349.473:163): avc: denied { read } for pid=5728 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.517820][ T43] audit: type=1400 audit(1790480349.473:164): avc: denied { open } for pid=5728 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.517840][ T43] audit: type=1400 audit(1790480349.473:165): avc: denied { mounton } for pid=5728 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.518283][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.519602][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.520404][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.520510][ T43] audit: type=1400 audit(1790480349.483:166): avc: denied { module_request } for pid=5728 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.524249][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.524649][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.546077][ T5089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.549113][ T5089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.549711][ T5089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.558711][ T5089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.560380][ T43] audit: type=1400 audit(1790480349.523:167): avc: denied { sys_module } for pid=5732 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.579878][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.580273][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.581806][ T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.582367][ T65] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.583610][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.583914][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.251452][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.254221][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.254332][ T5737] bridge_slave_0: entered allmulticast mode [ 48.255729][ T5737] bridge_slave_0: entered promiscuous mode [ 48.261207][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.261281][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.261377][ T5737] bridge_slave_1: entered allmulticast mode [ 48.262858][ T5737] bridge_slave_1: entered promiscuous mode [ 48.346713][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.346756][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.346903][ T5728] bridge_slave_0: entered allmulticast mode [ 48.347670][ T5728] bridge_slave_0: entered promiscuous mode [ 48.349117][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.349238][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.349331][ T5728] bridge_slave_1: entered allmulticast mode [ 48.351359][ T5728] bridge_slave_1: entered promiscuous mode [ 48.358333][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.381621][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.409716][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.411299][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.453120][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.453179][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.453240][ T5732] bridge_slave_0: entered allmulticast mode [ 48.453991][ T5732] bridge_slave_0: entered promiscuous mode [ 48.456575][ T5728] team0: Port device team_slave_0 added [ 48.459371][ T5728] team0: Port device team_slave_1 added [ 48.460378][ T5737] team0: Port device team_slave_0 added [ 48.461736][ T5737] team0: Port device team_slave_1 added [ 48.468550][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.468592][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.468744][ T5732] bridge_slave_1: entered allmulticast mode [ 48.469473][ T5732] bridge_slave_1: entered promiscuous mode [ 48.470083][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.470157][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.470248][ T5738] bridge_slave_0: entered allmulticast mode [ 48.471583][ T5738] bridge_slave_0: entered promiscuous mode [ 48.496108][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.496182][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.496238][ T5738] bridge_slave_1: entered allmulticast mode [ 48.497003][ T5738] bridge_slave_1: entered promiscuous mode [ 48.520156][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.520166][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.520183][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.541610][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.541624][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.541644][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.542744][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.542754][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.542767][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.546245][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.562092][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.562107][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.562127][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.569076][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.570717][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.572538][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.625261][ T5732] team0: Port device team_slave_0 added [ 48.632902][ T5738] team0: Port device team_slave_0 added [ 48.647195][ T5737] hsr_slave_0: entered promiscuous mode [ 48.647665][ T5737] hsr_slave_1: entered promiscuous mode [ 48.651399][ T5732] team0: Port device team_slave_1 added [ 48.652595][ T5738] team0: Port device team_slave_1 added [ 48.657642][ T5728] hsr_slave_0: entered promiscuous mode [ 48.658393][ T5728] hsr_slave_1: entered promiscuous mode [ 48.658966][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 48.659047][ T5728] Cannot create hsr debugfs directory [ 48.732680][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.732695][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.732717][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.738699][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.738710][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.738723][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.739430][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.739441][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.739459][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.740052][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.740059][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.740072][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.827353][ T5732] hsr_slave_0: entered promiscuous mode [ 48.828177][ T5732] hsr_slave_1: entered promiscuous mode [ 48.828706][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 48.828724][ T5732] Cannot create hsr debugfs directory [ 48.841665][ T5738] hsr_slave_0: entered promiscuous mode [ 48.842396][ T5738] hsr_slave_1: entered promiscuous mode [ 48.842900][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 48.842917][ T5738] Cannot create hsr debugfs directory [ 49.166630][ T5728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.174200][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.174920][ T5728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.182888][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.191802][ T5728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.193945][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.194370][ T5728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.197059][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.245880][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.249862][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.250662][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.253760][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.267195][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.273373][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.274234][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.278958][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.338010][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.341126][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.347531][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.352267][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.357294][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.359634][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.374381][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.376804][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.414177][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.438658][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.441792][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.443138][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.445504][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.452484][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.456978][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.457612][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.463261][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.479513][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.513939][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.514273][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.524890][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.525509][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.541744][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.548240][ T5089] Bluetooth: hci0: command tx timeout [ 49.556019][ T5089] Bluetooth: hci1: command tx timeout [ 49.589158][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.608355][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.608449][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.616188][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.626631][ T5089] Bluetooth: hci3: command tx timeout [ 49.627038][ T5730] Bluetooth: hci2: command tx timeout [ 49.637374][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.637480][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.660567][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.672006][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.683304][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.692798][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.692877][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.696810][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.696889][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.718678][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.718761][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.720181][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.720254][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.933398][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.959810][ T5728] veth0_vlan: entered promiscuous mode [ 49.963543][ T5728] veth1_vlan: entered promiscuous mode [ 49.981409][ T5728] veth0_macvtap: entered promiscuous mode [ 49.989106][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.994174][ T5728] veth1_macvtap: entered promiscuous mode [ 50.005303][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.011029][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.048987][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.049151][ T5737] veth0_vlan: entered promiscuous mode [ 50.052480][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.064706][ T5737] veth1_vlan: entered promiscuous mode [ 50.113617][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.113631][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.140506][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.140524][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.141710][ T5737] veth0_macvtap: entered promiscuous mode [ 50.154029][ T5732] veth0_vlan: entered promiscuous mode [ 50.155735][ T5738] veth0_vlan: entered promiscuous mode [ 50.156953][ T5737] veth1_macvtap: entered promiscuous mode [ 50.163102][ T5732] veth1_vlan: entered promiscuous mode [ 50.166355][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.166738][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.166828][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.166954][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.171153][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.176887][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.177957][ T5738] veth1_vlan: entered promiscuous mode [ 50.191238][ T5728] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.218592][ T5732] veth0_macvtap: entered promiscuous mode [ 50.223373][ T5732] veth1_macvtap: entered promiscuous mode [ 50.245139][ T5738] veth0_macvtap: entered promiscuous mode [ 50.256136][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.261652][ T5738] veth1_macvtap: entered promiscuous mode [ 50.264463][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.264476][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.269144][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.280860][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.291340][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.293994][ T5879] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.304570][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.306670][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306771][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306837][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306902][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306963][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.307025][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.307090][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.323236][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.323248][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.328450][ T5881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44816 sclass=netlink_route_socket pid=5881 comm=syz.0.5 [ 50.356781][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.356951][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.357129][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.393691][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.393704][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.443258][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.443273][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.457410][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.457424][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.460625][ T5895] syzkaller0: entered promiscuous mode [ 50.460642][ T5895] syzkaller0: entered allmulticast mode [ 50.504007][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.504020][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.536643][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.573579][ T5905] ======================================================= [ 50.573579][ T5905] WARNING: The mand mount option has been deprecated and [ 50.573579][ T5905] and is ignored by this kernel. Remove the mand [ 50.573579][ T5905] option from the mount to silence this warning. [ 50.573579][ T5905] ======================================================= [ 50.575750][ T5905] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.652981][ T5905] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 50.653167][ T5905] overlayfs: failed to look up (tracing) for ino (-66) [ 50.702216][ T5916] device-mapper: ioctl: name not supplied when creating device [ 50.725041][ T5918] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 50.786886][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.787676][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.788239][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.795286][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.795871][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.807306][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.807733][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.808294][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.808785][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.809109][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.809469][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.809877][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.810196][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.810548][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.811026][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.811392][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.811733][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.812135][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.812446][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.812771][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.813185][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.813540][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.813881][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.814373][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.814689][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.815038][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.815426][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.815792][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.816265][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.816786][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.817119][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.817462][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 50.818489][ T5926] 9pnet_fd: p9_fd_create_unix (5926): problem connecting socket: éq‰Y’3aK: -111 [ 51.093418][ T5942] capability: warning: `syz.0.15' uses deprecated v2 capabilities in a way that may be insecure [ 51.210528][ T5951] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 51.375971][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.504706][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 51.528575][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 51.530428][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.626875][ T5730] Bluetooth: hci0: command tx timeout [ 51.626994][ T5730] Bluetooth: hci1: command tx timeout [ 51.706845][ T5730] Bluetooth: hci3: command tx timeout [ 51.706869][ T5730] Bluetooth: hci2: command tx timeout [ 51.757415][ T30] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 51.776781][ T30] usb 5-1: USB disconnect, device number 2 [ 51.802341][ T5969] binder: 5963:5969 ioctl c0306201 0 returned -14 [ 51.803277][ T5969] syzkaller1: entered promiscuous mode [ 51.803288][ T5969] syzkaller1: entered allmulticast mode [ 51.994863][ T5976] netlink: 'syz.2.24': attribute type 1 has an invalid length. [ 51.998526][ T5977] binder: 5974:5977 ioctl c0306201 200000000080 returned -14 [ 52.000758][ T5976] binder: BINDER_SET_CONTEXT_MGR already set [ 52.000766][ T5976] binder: 5974:5976 ioctl 4018620d 200000004a80 returned -16 [ 52.000903][ T5977] binder: BINDER_SET_CONTEXT_MGR already set [ 52.000908][ T5977] binder: 5974:5977 ioctl 4018620d 200000004a80 returned -16 [ 52.001091][ T5976] binder: 5974:5976 ioctl c0306201 2000000003c0 returned -22 [ 52.001143][ T5977] binder: 5974:5977 ioctl c0306201 2000000003c0 returned -22 [ 52.296037][ T5813] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.366691][ T43] kauditd_printk_skb: 115 callbacks suppressed [ 52.366709][ T43] audit: type=1400 audit(1790480354.333:281): avc: denied { create } for pid=5989 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 52.370908][ T43] audit: type=1400 audit(1790480354.333:282): avc: denied { ioctl } for pid=5989 comm="syz.3.28" path="socket:[9533]" dev="sockfs" ino=9533 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 52.371771][ T43] audit: type=1400 audit(1790480354.333:283): avc: denied { write } for pid=5989 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 52.372623][ T43] audit: type=1400 audit(1790480354.333:284): avc: denied { read } for pid=5989 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 52.424202][ T43] audit: type=1400 audit(1790480354.383:285): avc: denied { write } for pid=5989 comm="syz.3.28" name="kcm" dev="proc" ino=4026533453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 52.466193][ T5813] usb 7-1: Using ep0 maxpacket: 8 [ 52.466627][ T5813] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 52.467418][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 52.467434][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 52.467453][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.473329][ T5813] usb 7-1: config 0 descriptor?? [ 52.684148][ T5813] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 52.721420][ T43] audit: type=1400 audit(1790480354.683:286): avc: denied { mount } for pid=5994 comm="syz.0.29" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 52.722086][ T5995] netlink: NAT attribute has 5 unknown bytes [ 52.722102][ T5995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 52.722566][ T43] audit: type=1400 audit(1790480354.683:287): avc: denied { search } for pid=5994 comm="syz.0.29" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.722607][ T43] audit: type=1400 audit(1790480354.683:288): avc: denied { search } for pid=5994 comm="syz.0.29" name="events" dev="tracefs" ino=2298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.723263][ T43] audit: type=1400 audit(1790480354.683:289): avc: denied { search } for pid=5994 comm="syz.0.29" name="sched" dev="tracefs" ino=8989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.723422][ T43] audit: type=1400 audit(1790480354.683:290): avc: denied { search } for pid=5994 comm="syz.0.29" name="sched_switch" dev="tracefs" ino=8991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.780747][ T5997] xt_connbytes: Forcing CT accounting to be enabled [ 52.784161][ T5997] netlink: 48 bytes leftover after parsing attributes in process `syz.0.30'. [ 52.784664][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 52.785024][ T5997] hsr_slave_0: left promiscuous mode [ 52.785850][ T5997] hsr_slave_1: left promiscuous mode [ 52.879913][ T5980] iowarrior 7-1:0.0: Error -90 while submitting URB [ 52.881829][ T5992] usb 7-1: USB disconnect, device number 2 [ 53.216534][ T5999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5999 comm=syz.1.31 [ 53.255001][ T6002] netlink: 40 bytes leftover after parsing attributes in process `syz.3.32'. [ 53.459980][ T6022] netlink: 36 bytes leftover after parsing attributes in process `syz.0.41'. [ 53.462191][ T6022] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.529247][ T6037] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 53.529247][ T6037] The task syz.0.41 (6037) triggered the difference, watch for misbehavior. [ 53.706113][ T5730] Bluetooth: hci0: command tx timeout [ 53.706169][ T5089] Bluetooth: hci1: command tx timeout [ 53.786083][ T5089] Bluetooth: hci3: command tx timeout [ 53.786186][ T5089] Bluetooth: hci2: command tx timeout [ 53.975468][ T6085] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 54.346558][ T6102] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 54.346588][ T6102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.459899][ T6110] fuse: Bad value for 'user_id' [ 54.459925][ T6110] fuse: Bad value for 'user_id' [ 54.537948][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.61'. [ 54.739526][ T6137] netlink: 'syz.1.67': attribute type 23 has an invalid length. [ 54.739540][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 55.093459][ T6147] xfrm1: entered allmulticast mode [ 55.126025][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.138416][ T6150] input: syz1 as /devices/virtual/input/input6 [ 55.158683][ T5735] udevd[5735]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 55.276778][ T9] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 55.277916][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.277953][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.277972][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 55.277989][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.280304][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.280325][ T9] usb 5-1: Product: syz [ 55.280338][ T9] usb 5-1: Manufacturer: syz [ 55.280350][ T9] usb 5-1: SerialNumber: syz [ 55.292918][ T9] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 55.292938][ T9] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 55.292972][ T9] usbserial_generic 5-1:1.0: generic converter detected [ 55.316877][ T9] usb 5-1: generic converter now attached to ttyUSB0 [ 55.363959][ T6161] Bluetooth: MGMT ver 1.23 [ 55.497074][ T30] usb 5-1: USB disconnect, device number 3 [ 55.502291][ T30] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 55.502913][ T30] usbserial_generic 5-1:1.0: device disconnected [ 55.787044][ T5089] Bluetooth: hci1: command tx timeout [ 55.787069][ T5089] Bluetooth: hci0: command tx timeout [ 55.866672][ T5730] Bluetooth: hci2: command tx timeout [ 56.021813][ T6170] Zero length message leads to an empty skb [ 56.057016][ T6170] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 56.065989][ T6170] VFS: Can't find a romfs filesystem on dev nullb0. [ 56.065989][ T6170] [ 56.097954][ T6176] netlink: 136 bytes leftover after parsing attributes in process `syz.0.81'. [ 56.713740][ T6187] process 'syz.0.84' launched './file0' with NULL argv: empty string added [ 57.082302][ T6191] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 57.082461][ T6191] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 57.667739][ T43] kauditd_printk_skb: 98 callbacks suppressed [ 57.667753][ T43] audit: type=1400 audit(1790480359.633:389): avc: denied { map_create } for pid=6207 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.668083][ T43] audit: type=1400 audit(1790480359.633:390): avc: denied { map_read map_write } for pid=6207 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 58.239119][ T6215] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.254253][ T43] audit: type=1400 audit(1790480360.213:391): avc: denied { read } for pid=6216 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.261762][ T43] audit: type=1400 audit(1790480360.223:392): avc: denied { map } for pid=6214 comm="syz.2.89" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.456946][ T6223] netlink: 284 bytes leftover after parsing attributes in process `syz.3.92'. [ 58.547697][ T43] audit: type=1400 audit(1790480360.513:393): avc: denied { mount } for pid=6232 comm="syz.2.96" name="/" dev="configfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 58.548384][ T43] audit: type=1400 audit(1790480360.513:394): avc: denied { search } for pid=6232 comm="syz.2.96" name="/" dev="configfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.550820][ T43] audit: type=1400 audit(1790480360.513:395): avc: denied { search } for pid=6232 comm="syz.2.96" name="usb_gadget" dev="configfs" ino=6123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.550850][ T43] audit: type=1400 audit(1790480360.513:396): avc: denied { write search } for pid=6232 comm="syz.2.96" name="usb_gadget" dev="configfs" ino=6123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.550870][ T43] audit: type=1400 audit(1790480360.513:397): avc: denied { add_name } for pid=6232 comm="syz.2.96" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.550889][ T43] audit: type=1400 audit(1790480360.513:398): avc: denied { create } for pid=6232 comm="syz.2.96" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 58.567012][ T6234] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 58.567153][ T6234] udc dummy_udc.0: failed to start g1: -19 [ 58.569305][ T6234] UDC core: g1: couldn't find an available UDC or it's busy [ 58.589688][ T6234] syz.2.96 (6234) used greatest stack depth: 19752 bytes left [ 58.876061][ T2324] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 59.046636][ T2324] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 59.047497][ T2324] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 59.047513][ T2324] usb 7-1: config 0 has no interface number 0 [ 59.047538][ T2324] usb 7-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 59.048824][ T2324] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 59.048840][ T2324] usb 7-1: Product: syz [ 59.048851][ T2324] usb 7-1: SerialNumber: syz [ 59.051099][ T2324] usb 7-1: config 0 descriptor?? [ 59.056921][ T2324] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 59.279278][ T5804] usb 7-1: USB disconnect, device number 3 [ 59.791115][ T6264] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 59.915410][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.915709][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.930384][ T6278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.105'. [ 59.930384][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.105'. [ 59.960127][ T6274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.960476][ T6274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.146009][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 60.206145][ T5804] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.260944][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.276002][ T9] usb 7-1: device descriptor read/64, error -71 [ 60.317823][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.367473][ T5804] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.368740][ T5804] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.368764][ T5804] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.368781][ T5804] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.368812][ T5804] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.372815][ T5804] usb 8-1: config 0 descriptor?? [ 60.401077][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.422185][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.423753][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.425055][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.427995][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.428688][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.482982][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.516662][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 60.591618][ T6301] syzkaller0: entered promiscuous mode [ 60.591637][ T6301] syzkaller0: entered allmulticast mode [ 60.606952][ T5804] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 60.645435][ T12] bridge_slave_1: left allmulticast mode [ 60.645457][ T12] bridge_slave_1: left promiscuous mode [ 60.647020][ T9] usb 7-1: device descriptor read/64, error -71 [ 60.647597][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.655605][ T12] bridge_slave_0: left allmulticast mode [ 60.655626][ T12] bridge_slave_0: left promiscuous mode [ 60.656738][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.756715][ T9] usb usb7-port1: attempt power cycle [ 60.788789][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.791996][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.792899][ T12] bond0 (unregistering): Released all slaves [ 60.966310][ T5820] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.966413][ T5820] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.966443][ T5820] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.966470][ T5820] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.980077][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 61.091465][ T6325] netlink: 'syz.1.115': attribute type 21 has an invalid length. [ 61.091479][ T6325] netlink: 156 bytes leftover after parsing attributes in process `syz.1.115'. [ 61.096689][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 61.116730][ T9] usb 7-1: device descriptor read/8, error -71 [ 61.122323][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.122346][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.123027][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.123038][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.132267][ T12] veth1_macvtap: left promiscuous mode [ 61.132298][ T12] veth0_macvtap: left promiscuous mode [ 61.132344][ T12] veth1_vlan: left promiscuous mode [ 61.132382][ T12] veth0_vlan: left promiscuous mode [ 61.272475][ T12] team0 (unregistering): Port device team_slave_1 removed [ 61.285562][ T12] team0 (unregistering): Port device team_slave_0 removed [ 61.383447][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 61.386030][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 61.406447][ T9] usb 7-1: device descriptor read/8, error -71 [ 61.442276][ T6292] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.442349][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.442406][ T6292] bridge_slave_0: entered allmulticast mode [ 61.449158][ T6292] bridge_slave_0: entered promiscuous mode [ 61.454548][ T6292] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.454871][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.455013][ T6292] bridge_slave_1: entered allmulticast mode [ 61.457573][ T6292] bridge_slave_1: entered promiscuous mode [ 61.484822][ T6292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.487574][ T6292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.506764][ T6292] team0: Port device team_slave_0 added [ 61.508997][ T6292] team0: Port device team_slave_1 added [ 61.526188][ T9] usb usb7-port1: unable to enumerate USB device [ 61.531076][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.531091][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.531111][ T6292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.533525][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.533537][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.533559][ T6292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.564591][ T6292] hsr_slave_0: entered promiscuous mode [ 61.565007][ T6292] hsr_slave_1: entered promiscuous mode [ 61.565301][ T6292] debugfs: 'hsr0' already exists in 'hsr' [ 61.565312][ T6292] Cannot create hsr debugfs directory [ 61.676231][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 61.718637][ T6292] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.721453][ T6292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.721957][ T6292] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.725046][ T6292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.725527][ T6292] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.728352][ T6292] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.728845][ T6292] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.740283][ T6292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.768655][ T6292] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.768807][ T6292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.769221][ T6292] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.769296][ T6292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.814541][ T6292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.824942][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.826999][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.844148][ T6292] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.856707][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.856783][ T6046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.865125][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.865193][ T6046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.900608][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 61.989092][ T6374] netlink: 'syz.1.120': attribute type 1 has an invalid length. [ 62.019550][ T6374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.034013][ T6374] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 62.127331][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 62.138389][ T6386] xt_bpf: check failed: parse error [ 62.229622][ T6292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.246021][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 62.400864][ T6292] veth0_vlan: entered promiscuous mode [ 62.408145][ T6292] veth1_vlan: entered promiscuous mode [ 62.423113][ T6292] veth0_macvtap: entered promiscuous mode [ 62.425640][ T6292] veth1_macvtap: entered promiscuous mode [ 62.431981][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.433727][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.504981][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.505001][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.517004][ T5089] Bluetooth: hci0: command tx timeout [ 62.540759][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.540774][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.559095][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.559121][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.559138][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.559155][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.710241][ T10] usb 8-1: USB disconnect, device number 2 [ 62.741826][ T6408] ipvlan2: entered allmulticast mode [ 62.741841][ T6408] virt_wifi0: entered allmulticast mode [ 62.743077][ T6408] batman_adv: batadv0: Adding interface: ipvlan2 [ 62.743090][ T6408] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.743114][ T6408] batman_adv: batadv0: Interface activated: ipvlan2 [ 62.780574][ T43] kauditd_printk_skb: 79 callbacks suppressed [ 62.780625][ T43] audit: type=1400 audit(1790480364.743:478): avc: denied { create } for pid=6405 comm="syz.4.118" name="#16" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.781820][ T43] audit: type=1400 audit(1790480364.743:479): avc: denied { link } for pid=6405 comm="syz.4.118" name="#16" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.782095][ T43] audit: type=1400 audit(1790480364.743:480): avc: denied { rename } for pid=6405 comm="syz.4.118" name="#17" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.882513][ T43] audit: type=1400 audit(1790480364.843:481): avc: denied { nlmsg_write } for pid=6414 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.882719][ T6415] netlink: 44 bytes leftover after parsing attributes in process `syz.4.125'. [ 62.883957][ T43] audit: type=1400 audit(1790480364.843:482): avc: denied { append } for pid=6414 comm="syz.4.125" name="comedi4" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.956728][ T6418] netlink: 48 bytes leftover after parsing attributes in process `syz.3.124'. [ 62.984955][ T6423] fuse: Bad value for 'fd' [ 63.710894][ T6429] netlink: 'syz.1.129': attribute type 4 has an invalid length. [ 63.751055][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.130'. [ 63.751072][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.130'. [ 63.753489][ T6433] netlink: 132 bytes leftover after parsing attributes in process `syz.1.130'. [ 63.753504][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.130'. [ 63.790126][ T6435] JFS: discard option not supported on device [ 63.790627][ T6435] Mount JFS Failure: -5 [ 63.790635][ T6435] jfs_mount failed w/return code = -5 [ 63.825843][ T43] audit: type=1400 audit(1790480365.783:483): avc: denied { write } for pid=6436 comm="syz.3.132" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.868370][ T6437] netlink: 'syz.3.132': attribute type 1 has an invalid length. [ 63.881725][ T6437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.889091][ T6437] bond1: (slave veth0_to_bond): making interface the new active one [ 63.889925][ T6437] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 63.894524][ T6437] bond1: entered promiscuous mode [ 63.894536][ T6437] veth0_to_bond: entered promiscuous mode [ 63.894628][ T6437] bond1: entered allmulticast mode [ 63.894637][ T6437] veth0_to_bond: entered allmulticast mode [ 63.959332][ T43] audit: type=1400 audit(1790480365.923:484): avc: denied { map } for pid=6441 comm="syz.3.133" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.082234][ T6446] kvm [6445]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x4 [ 64.082455][ T6446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.135'. [ 64.082745][ T6446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.135'. [ 64.082883][ T6446] netlink: 48 bytes leftover after parsing attributes in process `syz.2.135'. [ 64.235039][ T6451] warning: `syz.2.137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.249655][ T6451] ovs-dp0: entered promiscuous mode [ 64.332368][ T6461] bond0: (slave bond_slave_0): Releasing backup interface [ 64.340075][ T6461] bond0: (slave bond_slave_1): Releasing backup interface [ 64.385854][ T6461] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 64.386659][ T6461] bond0: option slaves: unable to set because the bond device is up [ 64.408367][ T12] bond1: (slave dummy0): link status definitely down, disabling slave [ 64.410903][ T6463] overlay: ./file2 is not a directory [ 64.449844][ T43] audit: type=1400 audit(1790480366.413:485): avc: denied { remount } for pid=6464 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.451932][ T6465] netlink: 48 bytes leftover after parsing attributes in process `syz.1.141'. [ 64.452727][ T6465] netlink: 48 bytes leftover after parsing attributes in process `syz.1.141'. [ 64.499951][ T6467] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.537864][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.143'. [ 64.543623][ T43] audit: type=1400 audit(1790480366.503:486): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 64.560499][ T6470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.586424][ T5089] Bluetooth: hci0: command tx timeout [ 64.596661][ T6491] pvfs2: Unknown parameter 'upperdir' [ 64.598959][ T6470] 8021q: adding VLAN 0 to HW filter on device bond3 [ 64.600866][ T6470] bond2: (slave bond3): Enslaving as an active interface with an up link [ 64.622534][ T6470] bond2 (unregistering): (slave bond3): Releasing backup interface [ 64.629796][ T6470] bond2 (unregistering): Released all slaves [ 64.736288][ T43] audit: type=1400 audit(1790480366.693:487): avc: denied { bind } for pid=6496 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 65.419544][ T6522] xt_hashlimit: size too large, truncated to 1048576 [ 65.759465][ T6536] syzkaller0: entered promiscuous mode [ 65.759484][ T6536] syzkaller0: entered allmulticast mode [ 65.823059][ T6539] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 65.824115][ T6539] overlayfs: failed to resolve './file0': -2 [ 65.914644][ T6544] Device name not specified. [ 65.914644][ T6544] [ 66.086077][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 66.238501][ T10] usb 6-1: New USB device found, idVendor=0451, idProduct=f430, bcdDevice=db.0b [ 66.239372][ T10] usb 6-1: config 1 has an invalid interface number: 15 but max is 2 [ 66.239389][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 66.239404][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.239417][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.239433][ T10] usb 6-1: config 1 has no interface number 0 [ 66.239462][ T10] usb 6-1: config 1 interface 15 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.239482][ T10] usb 6-1: config 1 interface 15 has no altsetting 0 [ 66.242453][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.242473][ T10] usb 6-1: Product: syz [ 66.242484][ T10] usb 6-1: Manufacturer: 蓡쟒ë�Žï…†ä¬»ïš¹î®¡î„Šãƒ¶æƒ¡äŸ©í��骤婌紵 [ 66.242498][ T10] usb 6-1: SerialNumber: syz [ 66.459584][ T10] ti_usb_3410_5052 6-1:1.15: required endpoints missing [ 66.469946][ T10] usb 6-1: USB disconnect, device number 2 [ 66.666371][ T5089] Bluetooth: hci0: command tx timeout [ 67.831984][ T6571] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 67.834518][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 67.834529][ T43] audit: type=1400 audit(1790480369.793:510): avc: denied { write } for pid=6569 comm="syz.2.163" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 67.958382][ T43] audit: type=1400 audit(1790480369.923:511): avc: denied { setopt } for pid=6577 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.058178][ T43] audit: type=1400 audit(1790480370.023:512): avc: denied { nlmsg_read } for pid=6585 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.068721][ T43] audit: type=1400 audit(1790480370.033:513): avc: denied { accept } for pid=6583 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.149079][ T43] audit: type=1400 audit(1790480370.113:514): avc: denied { append } for pid=6594 comm="syz.2.168" name="001" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.206990][ T6595] FAULT_INJECTION: forcing a failure. [ 68.206990][ T6595] name failslab, interval 1, probability 0, space 0, times 0 [ 68.207020][ T6595] CPU: 3 UID: 0 PID: 6595 Comm: syz.2.168 Not tainted syzkaller #0 PREEMPT(full) [ 68.207042][ T6595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.207054][ T6595] Call Trace: [ 68.207064][ T6595] [ 68.207070][ T6595] dump_stack_lvl+0x100/0x190 [ 68.207112][ T6595] should_fail_ex.cold+0x5/0xa [ 68.207139][ T6595] should_failslab+0xc2/0x120 [ 68.207167][ T6595] __kvmalloc_node_noprof+0x113/0x9b0 [ 68.207190][ T6595] ? __pfx___mutex_lock+0x10/0x10 [ 68.207219][ T6595] ? nf_hook_entries_grow+0x6b9/0x870 [ 68.207254][ T6595] nf_hook_entries_grow+0x6b9/0x870 [ 68.207286][ T6595] __nf_register_net_hook+0x112/0x780 [ 68.207312][ T6595] nf_register_net_hook+0xdb/0x170 [ 68.207335][ T6595] nf_register_net_hooks+0x5d/0xd0 [ 68.207357][ T6595] ? __pfx_selinux_nf_register+0x10/0x10 [ 68.207378][ T6595] ops_init+0x1e2/0x5f0 [ 68.207406][ T6595] setup_net+0x118/0x3a0 [ 68.207433][ T6595] ? __pfx_setup_net+0x10/0x10 [ 68.207463][ T6595] copy_net_ns+0x345/0x7a0 [ 68.207492][ T6595] create_new_namespaces+0x3ea/0xac0 [ 68.207522][ T6595] unshare_nsproxy_namespaces+0xf2/0x220 [ 68.207546][ T6595] ksys_unshare+0x4a2/0xa70 [ 68.207570][ T6595] ? __pfx_ksys_unshare+0x10/0x10 [ 68.207602][ T6595] __x64_sys_unshare+0x31/0x40 [ 68.207623][ T6595] do_syscall_64+0x123/0x790 [ 68.207643][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.207661][ T6595] RIP: 0033:0x7efe9cd9e159 [ 68.207677][ T6595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.207695][ T6595] RSP: 002b:00007efe9dbaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 68.207719][ T6595] RAX: ffffffffffffffda RBX: 00007efe9d025fa0 RCX: 00007efe9cd9e159 [ 68.207731][ T6595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 68.207743][ T6595] RBP: 00007efe9ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 68.207754][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.207766][ T6595] R13: 00007efe9d026038 R14: 00007efe9d025fa0 R15: 00007ffc001b2d58 [ 68.207791][ T6595] [ 68.214327][ T6599] bond1: (slave dummy0): Releasing backup interface [ 68.331153][ T43] audit: type=1800 audit(1790480370.293:515): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.170" name="file0" dev="overlay" ino=269 res=0 errno=0 [ 68.734162][ T6629] bond1: entered promiscuous mode [ 68.752860][ T6629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.756285][ T5089] Bluetooth: hci0: command tx timeout [ 68.777922][ T6638] __nla_validate_parse: 13 callbacks suppressed [ 68.777946][ T6638] netlink: 72 bytes leftover after parsing attributes in process `syz.1.179'. [ 68.785138][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 68.811942][ T6640] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.848904][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.181'. [ 68.868457][ T43] audit: type=1400 audit(1790480370.833:516): avc: denied { setopt } for pid=6645 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.932064][ T43] audit: type=1400 audit(1790480370.893:517): avc: denied { write } for pid=6650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.993409][ T43] audit: type=1400 audit(1790480370.953:518): avc: denied { write } for pid=6654 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.115367][ T43] audit: type=1400 audit(1790480371.073:519): avc: denied { write } for pid=6657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.116837][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 69.286040][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 69.290171][ T10] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.40 [ 69.291153][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 69.293055][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.293075][ T10] usb 6-1: Product: syz [ 69.293086][ T10] usb 6-1: Manufacturer: syz [ 69.293098][ T10] usb 6-1: SerialNumber: syz [ 69.523016][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 69.523096][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 69.532880][ T10] usb 6-1: USB disconnect, device number 3 [ 69.609911][ T6667] vim2m vim2m.0: vidioc_s_fmt queue busy [ 69.668876][ T6672] xt_MASQUERADE: bad rangesize 10242 [ 69.737856][ T6674] netlink: 112 bytes leftover after parsing attributes in process `syz.2.187'. [ 70.336017][ T2324] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.496847][ T2324] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 70.497773][ T2324] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.497806][ T2324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.510470][ T2324] metro_usb 6-1:1.0: Metrologic USB to Serial converter detected [ 70.524644][ T2324] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 70.914898][ T10] usb 6-1: USB disconnect, device number 4 [ 70.929674][ T10] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 70.930023][ T10] metro_usb 6-1:1.0: device disconnected [ 71.126754][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 71.155162][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.155200][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.166478][ T42] cfg80211: failed to load regulatory.db [ 71.266026][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 71.416016][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 71.416736][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 71.417947][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 71.417984][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.421986][ T9] usb 8-1: config 0 descriptor?? [ 71.434686][ T6738] Bluetooth: MGMT ver 1.23 [ 71.437210][ T6738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.199'. [ 71.630845][ T9] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 71.806821][ T6752] trusted_key: encrypted_key: insufficient parameters specified [ 71.808200][ T6752] trusted_key: encrypted_key: insufficient parameters specified [ 71.813029][ T6754] FAULT_INJECTION: forcing a failure. [ 71.813029][ T6754] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 71.813055][ T6754] CPU: 2 UID: 0 PID: 6754 Comm: syz.1.202 Not tainted syzkaller #0 PREEMPT(full) [ 71.813074][ T6754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.813083][ T6754] Call Trace: [ 71.813089][ T6754] [ 71.813096][ T6754] dump_stack_lvl+0x100/0x190 [ 71.813139][ T6754] should_fail_ex.cold+0x5/0xa [ 71.813158][ T6754] ? prepare_alloc_pages+0x16d/0x5b0 [ 71.813186][ T6754] should_fail_alloc_page+0xeb/0x140 [ 71.813208][ T6754] prepare_alloc_pages+0x1f0/0x5b0 [ 71.813232][ T6754] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 71.813251][ T6754] ? __asan_memset+0x23/0x50 [ 71.813266][ T6754] ? folios_put_refs+0x58a/0xaa0 [ 71.813317][ T6754] ? __pfx_folios_put_refs+0x10/0x10 [ 71.813340][ T6754] ? find_held_lock+0x2b/0x80 [ 71.813363][ T6754] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 71.813380][ T6754] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.813413][ T6754] ? folio_batch_move_lru+0x3a9/0xc00 [ 71.813437][ T6754] ? __pfx_lru_add+0x10/0x10 [ 71.813461][ T6754] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 71.813483][ T6754] ? find_held_lock+0x2b/0x80 [ 71.813510][ T6754] ? __lock_acquire+0x5c0/0x1f40 [ 71.813528][ T6754] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.813548][ T6754] ? policy_nodemask+0xed/0x4f0 [ 71.813571][ T6754] alloc_pages_mpol+0x201/0x550 [ 71.813705][ T6754] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 71.813726][ T6754] ? filemap_get_entry+0x22d/0x450 [ 71.813747][ T6754] ? filemap_get_entry+0x22d/0x450 [ 71.813772][ T6754] folio_alloc_noprof+0x22/0x250 [ 71.813797][ T6754] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 71.813817][ T6754] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 71.813841][ T6754] __filemap_get_folio_mpol+0x653/0x1280 [ 71.813869][ T6754] ioctx_alloc+0x7e1/0x21a0 [ 71.813911][ T6754] ? __pfx_ioctx_alloc+0x10/0x10 [ 71.813941][ T6754] __x64_sys_io_setup+0xc9/0x220 [ 71.813967][ T6754] do_syscall_64+0x123/0x790 [ 71.813985][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.814002][ T6754] RIP: 0033:0x7f3311f9e159 [ 71.814017][ T6754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.814033][ T6754] RSP: 002b:00007f3312ddf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 71.814052][ T6754] RAX: ffffffffffffffda RBX: 00007f3312225fa0 RCX: 00007f3311f9e159 [ 71.814063][ T6754] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 00000000000003ff [ 71.814072][ T6754] RBP: 00007f331203506b R08: 0000000000000000 R09: 0000000000000000 [ 71.814081][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.814090][ T6754] R13: 00007f3312226038 R14: 00007f3312225fa0 R15: 00007ffd9f3338b8 [ 71.814111][ T6754] [ 71.935115][ T6761] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 71.935127][ T6761] overlayfs: missing 'lowerdir' [ 72.129691][ T10] usb 8-1: USB disconnect, device number 3 [ 72.175623][ T6782] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 72.374089][ T6800] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 72.843099][ T43] kauditd_printk_skb: 47 callbacks suppressed [ 72.843115][ T43] audit: type=1400 audit(1790480374.803:567): avc: denied { write } for pid=6813 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.896062][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'. [ 72.899820][ T6817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'. [ 73.058294][ T43] audit: type=1400 audit(1790480375.023:568): avc: denied { name_connect } for pid=6830 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 73.374560][ T6842] FAULT_INJECTION: forcing a failure. [ 73.374560][ T6842] name failslab, interval 1, probability 0, space 0, times 0 [ 73.374581][ T6842] CPU: 0 UID: 0 PID: 6842 Comm: syz.1.226 Not tainted syzkaller #0 PREEMPT(full) [ 73.374595][ T6842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.374602][ T6842] Call Trace: [ 73.374607][ T6842] [ 73.374612][ T6842] dump_stack_lvl+0x100/0x190 [ 73.374640][ T6842] should_fail_ex.cold+0x5/0xa [ 73.374658][ T6842] should_failslab+0xc2/0x120 [ 73.374678][ T6842] kmem_cache_alloc_noprof+0x92/0x6a0 [ 73.374692][ T6842] ? alloc_vfsmnt+0x23/0x710 [ 73.374705][ T6842] alloc_vfsmnt+0x23/0x710 [ 73.374717][ T6842] clone_mnt+0x4b/0x930 [ 73.374729][ T6842] copy_tree+0x329/0xbf0 [ 73.374747][ T6842] copy_mnt_ns+0x3fa/0x1180 [ 73.374768][ T6842] ? __pfx_copy_mnt_ns+0x10/0x10 [ 73.374788][ T6842] ? create_new_namespaces+0x30/0xac0 [ 73.374806][ T6842] create_new_namespaces+0xd3/0xac0 [ 73.374818][ T6842] ? bpf_lsm_capable+0x9/0x10 [ 73.374835][ T6842] ? security_capable+0x80/0x260 [ 73.374855][ T6842] unshare_nsproxy_namespaces+0xf2/0x220 [ 73.374869][ T6842] ksys_unshare+0x4a2/0xa70 [ 73.374883][ T6842] ? __pfx_ksys_unshare+0x10/0x10 [ 73.374896][ T6842] ? ksys_write+0x1ac/0x250 [ 73.374912][ T6842] __x64_sys_unshare+0x31/0x40 [ 73.374926][ T6842] do_syscall_64+0x123/0x790 [ 73.374942][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.374953][ T6842] RIP: 0033:0x7f3311f9e159 [ 73.374963][ T6842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.374973][ T6842] RSP: 002b:00007f3312ddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 73.374985][ T6842] RAX: ffffffffffffffda RBX: 00007f3312225fa0 RCX: 00007f3311f9e159 [ 73.374992][ T6842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400 [ 73.374998][ T6842] RBP: 00007f331203506b R08: 0000000000000000 R09: 0000000000000000 [ 73.375005][ T6842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.375011][ T6842] R13: 00007f3312226038 R14: 00007f3312225fa0 R15: 00007ffd9f3338b8 [ 73.375033][ T6842] [ 73.376165][ T2324] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 73.477757][ T6845] overlay: Unknown parameter 'hash' [ 73.531951][ T2324] usb 7-1: not running at top speed; connect to a high speed hub [ 73.531982][ T2324] usb 7-1: New USB device found, idVendor=0499, idProduct=150a, bcdDevice= 0.40 [ 73.537803][ T43] audit: type=1400 audit(1790480375.503:569): avc: denied { ioctl } for pid=6847 comm="syz.1.228" path="socket:[14257]" dev="sockfs" ino=14257 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.543075][ T2324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.543096][ T2324] usb 7-1: Product: syz [ 73.543110][ T2324] usb 7-1: Manufacturer: à°‡ [ 73.543122][ T2324] usb 7-1: SerialNumber: syz [ 73.581008][ T43] audit: type=1400 audit(1790480375.543:570): avc: denied { write } for pid=6846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.674374][ T43] audit: type=1400 audit(1790480375.633:571): avc: denied { write } for pid=6860 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.699097][ T6863] netlink: 'syz.3.230': attribute type 12 has an invalid length. [ 73.767498][ T2324] usb 7-1: 1:1 : bogus bTerminalLink 1 [ 73.770753][ T2324] usb 7-1: 2:1 : bogus bTerminalLink 3 [ 73.799578][ T43] audit: type=1400 audit(1790480375.763:572): avc: denied { write } for pid=6869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.847017][ T2324] usb 7-1: USB disconnect, device number 8 [ 73.872179][ T43] audit: type=1400 audit(1790480375.833:573): avc: denied { write } for pid=6877 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.923585][ T43] audit: type=1400 audit(1790480375.883:574): avc: denied { setopt } for pid=6878 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.943123][ T43] audit: type=1400 audit(1790480375.903:575): avc: denied { mounton } for pid=6878 comm="syz.3.234" path="/62/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 73.951132][ T5735] udevd[5735]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.988364][ T43] audit: type=1400 audit(1790480375.953:576): avc: denied { write } for pid=6887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.029562][ T6895] jffs2: notice: (6895) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 74.104250][ T6904] bond2 (unregistering): Released all slaves [ 74.249028][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 74.336184][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.337471][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.434054][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.445776][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.592033][ T6911] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 74.615990][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.616018][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.616036][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.616054][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.790062][ T6932] ip_tables: iptables: counters copy to user failed while replacing table [ 74.820684][ T6935] netlink: 'syz.2.244': attribute type 16 has an invalid length. [ 74.820697][ T6935] netlink: 'syz.2.244': attribute type 17 has an invalid length. [ 74.846824][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.849095][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.886897][ T6935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.908072][ T62] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 76.076456][ T62] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 76.077369][ T62] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.077393][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.098089][ T62] as10x_usb: device has been detected [ 76.098491][ T62] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 76.110240][ T62] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 76.136656][ T62] as10x_usb: error during firmware upload part1 [ 76.137168][ T62] Registered device Abilis Systems DVB-Titan [ 76.216224][ T6983] synth uevent: /bus/acpi: unknown uevent action string [ 76.267280][ T50] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 76.397712][ T50] usb 8-1: device descriptor read/64, error -71 [ 76.636007][ T50] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 76.766129][ T50] usb 8-1: device descriptor read/64, error -71 [ 76.876764][ T50] usb usb8-port1: attempt power cycle [ 77.002506][ T6996] FAULT_INJECTION: forcing a failure. [ 77.002506][ T6996] name failslab, interval 1, probability 0, space 0, times 0 [ 77.002526][ T6996] CPU: 0 UID: 0 PID: 6996 Comm: syz.2.264 Not tainted syzkaller #0 PREEMPT(full) [ 77.002539][ T6996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.002546][ T6996] Call Trace: [ 77.002550][ T6996] [ 77.002555][ T6996] dump_stack_lvl+0x100/0x190 [ 77.002587][ T6996] should_fail_ex.cold+0x5/0xa [ 77.002605][ T6996] should_failslab+0xc2/0x120 [ 77.002624][ T6996] __kmalloc_noprof+0xfc/0x840 [ 77.002637][ T6996] ? rcu_is_watching+0x13/0xc0 [ 77.002653][ T6996] ? tomoyo_realpath_from_path+0xb6/0x690 [ 77.002672][ T6996] tomoyo_realpath_from_path+0xb6/0x690 [ 77.002690][ T6996] tomoyo_path_number_perm+0x23c/0x580 [ 77.002702][ T6996] ? tomoyo_path_number_perm+0x22e/0x580 [ 77.002715][ T6996] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 77.002728][ T6996] ? __pfx_futex_wait+0x10/0x10 [ 77.002743][ T6996] ? __lock_acquire+0x5c0/0x1f40 [ 77.002763][ T6996] ? __fget_files+0x34/0x3d0 [ 77.002778][ T6996] ? find_held_lock+0x2b/0x80 [ 77.002793][ T6996] ? hook_file_ioctl_common+0x140/0x440 [ 77.002812][ T6996] ? __fget_files+0x21f/0x3d0 [ 77.002828][ T6996] security_file_ioctl+0xd3/0x230 [ 77.002842][ T6996] __x64_sys_ioctl+0xb7/0x210 [ 77.002855][ T6996] do_syscall_64+0x123/0x790 [ 77.002871][ T6996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.002882][ T6996] RIP: 0033:0x7efe9cd9e159 [ 77.002892][ T6996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.002903][ T6996] RSP: 002b:00007efe9dbaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.002917][ T6996] RAX: ffffffffffffffda RBX: 00007efe9d025fa0 RCX: 00007efe9cd9e159 [ 77.002924][ T6996] RDX: 0000200000000040 RSI: 0000000040047438 RDI: 0000000000000004 [ 77.002931][ T6996] RBP: 00007efe9ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 77.002937][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.002943][ T6996] R13: 00007efe9d026038 R14: 00007efe9d025fa0 R15: 00007ffc001b2d58 [ 77.002957][ T6996] [ 77.002962][ T6996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 77.081092][ T6999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.265'. [ 77.216033][ T50] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 77.236418][ T50] usb 8-1: device descriptor read/8, error -71 [ 77.448191][ T7012] MTD: Couldn't look up './cgroup': -15 [ 77.476106][ T50] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 77.496444][ T50] usb 8-1: device descriptor read/8, error -71 [ 77.594998][ T35] usb 6-1: USB disconnect, device number 5 [ 77.606166][ T50] usb usb8-port1: unable to enumerate USB device [ 77.622069][ T35] Unregistered device Abilis Systems DVB-Titan [ 77.626557][ T35] as10x_usb: device has been disconnected [ 78.194996][ T5730] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.202612][ T5730] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.204613][ T5730] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.205457][ T5730] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.214556][ T5730] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.253547][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 78.253564][ T43] audit: type=1400 audit(1790480380.213:593): avc: denied { append } for pid=7021 comm="syz.1.272" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 78.267231][ T7022] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 78.289491][ T6039] ================================================================== [ 78.289501][ T6039] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 78.289524][ T6039] Read of size 1 at addr ffff88805524dc09 by task kworker/u33:15/6039 [ 78.289533][ T6039] [ 78.289539][ T6039] CPU: 1 UID: 0 PID: 6039 Comm: kworker/u33:15 Not tainted syzkaller #0 PREEMPT(full) [ 78.289551][ T6039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.289559][ T6039] Workqueue: events_unbound commit_work [ 78.289576][ T6039] Call Trace: [ 78.289580][ T6039] [ 78.289584][ T6039] dump_stack_lvl+0x100/0x190 [ 78.289601][ T6039] print_report+0x13d/0x4b0 [ 78.289617][ T6039] ? __virt_addr_valid+0x239/0x430 [ 78.289629][ T6039] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 78.289645][ T6039] kasan_report+0xdf/0x1c0 [ 78.289659][ T6039] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 78.289676][ T6039] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 78.289693][ T6039] ? preempt_schedule_common+0x3c/0xb0 [ 78.289709][ T6039] ? preempt_schedule_thunk+0x16/0x40 [ 78.289723][ T6039] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 78.289739][ T6039] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 78.289755][ T6039] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 78.289772][ T6039] drm_atomic_helper_commit_tail+0xff/0x130 [ 78.289802][ T6039] commit_tail+0x338/0x430 [ 78.289818][ T6039] process_one_work+0xac7/0x1b10 [ 78.289838][ T6039] ? __pfx_process_one_work+0x10/0x10 [ 78.289855][ T6039] ? lock_acquire+0x1d1/0x380 [ 78.289867][ T6039] ? __pfx_commit_work+0x10/0x10 [ 78.289883][ T6039] worker_thread+0x5ef/0xe50 [ 78.289901][ T6039] ? kthread+0x13a/0x450 [ 78.289915][ T6039] ? __pfx_worker_thread+0x10/0x10 [ 78.289937][ T6039] kthread+0x373/0x450 [ 78.289951][ T6039] ? __pfx_kthread+0x10/0x10 [ 78.289966][ T6039] ret_from_fork+0x730/0xd60 [ 78.289979][ T6039] ? __pfx_ret_from_fork+0x10/0x10 [ 78.289991][ T6039] ? __switch_to+0x800/0x10f0 [ 78.290005][ T6039] ? __pfx_kthread+0x10/0x10 [ 78.290020][ T6039] ret_from_fork_asm+0x1a/0x30 [ 78.290034][ T6039] [ 78.290038][ T6039] [ 78.290040][ T6039] Allocated by task 7022: [ 78.290046][ T6039] kasan_save_stack+0x30/0x50 [ 78.290057][ T6039] kasan_save_track+0x14/0x30 [ 78.290068][ T6039] __kasan_kmalloc+0xaa/0xb0 [ 78.290079][ T6039] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 78.290095][ T6039] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 78.290112][ T6039] drm_atomic_get_crtc_state+0x1de/0x690 [ 78.290124][ T6039] drm_atomic_set_property+0x165/0x3f90 [ 78.290139][ T6039] drm_mode_atomic_ioctl+0x6ed/0x2940 [ 78.290153][ T6039] drm_ioctl_kernel+0x1f3/0x3e0 [ 78.290166][ T6039] drm_ioctl+0x5e6/0xc60 [ 78.290178][ T6039] __x64_sys_ioctl+0x18e/0x210 [ 78.290188][ T6039] do_syscall_64+0x123/0x790 [ 78.290196][ T6039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.290205][ T6039] [ 78.290208][ T6039] Freed by task 35: [ 78.290212][ T6039] kasan_save_stack+0x30/0x50 [ 78.290223][ T6039] kasan_save_track+0x14/0x30 [ 78.290234][ T6039] kasan_save_free_info+0x3b/0x70 [ 78.290249][ T6039] __kasan_slab_free+0x5f/0x80 [ 78.290261][ T6039] kfree+0x22b/0x6d0 [ 78.290275][ T6039] drm_atomic_commit_default_clear+0x465/0x10c0 [ 78.290288][ T6039] __drm_atomic_commit_free+0x185/0x2f0 [ 78.290302][ T6039] drm_atomic_helper_dirtyfb+0x578/0x790 [ 78.290312][ T6039] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 78.290323][ T6039] drm_fb_helper_damage_work+0x4c8/0xab0 [ 78.290338][ T6039] process_one_work+0xac7/0x1b10 [ 78.290353][ T6039] worker_thread+0x5ef/0xe50 [ 78.290367][ T6039] kthread+0x373/0x450 [ 78.290380][ T6039] ret_from_fork+0x730/0xd60 [ 78.290391][ T6039] ret_from_fork_asm+0x1a/0x30 [ 78.290400][ T6039] [ 78.290403][ T6039] The buggy address belongs to the object at ffff88805524dc00 [ 78.290403][ T6039] which belongs to the cache kmalloc-512 of size 512 [ 78.290411][ T6039] The buggy address is located 9 bytes inside of [ 78.290411][ T6039] freed 512-byte region [ffff88805524dc00, ffff88805524de00) [ 78.290420][ T6039] [ 78.290422][ T6039] The buggy address belongs to the physical page: [ 78.290427][ T6039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805524f800 pfn:0x5524c [ 78.290437][ T6039] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 78.290444][ T6039] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 78.290454][ T6039] page_type: f5(slab) [ 78.290464][ T6039] raw: 00fff00000000240 ffff88801c042c80 ffffea0000f7a510 ffffea0000d62110 [ 78.290473][ T6039] raw: ffff88805524f800 000000000010000f 00000000f5000000 0000000000000000 [ 78.290482][ T6039] head: 00fff00000000240 ffff88801c042c80 ffffea0000f7a510 ffffea0000d62110 [ 78.290491][ T6039] head: ffff88805524f800 000000000010000f 00000000f5000000 0000000000000000 [ 78.290499][ T6039] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 78.290508][ T6039] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 78.290514][ T6039] page dumped because: kasan: bad access detected [ 78.290518][ T6039] page_owner tracks the page as allocated [ 78.290522][ T6039] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5732, tgid 5732 (syz-executor), ts 48290750306 [ 78.290538][ T6039] post_alloc_hook+0xfd/0x120 [ 78.290553][ T6039] get_page_from_freelist+0x110d/0x35d0 [ 78.290562][ T6039] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 78.290572][ T6039] new_slab+0xa9/0x6e0 [ 78.290580][ T6039] refill_objects+0xe3/0x410 [ 78.290588][ T6039] __pcs_replace_empty_main+0x35e/0x650 [ 78.290603][ T6039] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 78.290619][ T6039] device_add+0xd3f/0x1970 [ 78.290632][ T6039] netdev_register_kobject+0x1df/0x410 [ 78.290653][ T6039] register_netdevice+0x15b6/0x25a0 [ 78.290667][ T6039] veth_newlink+0x44a/0xce0 [ 78.290683][ T6039] rtnl_newlink+0x1697/0x2620 [ 78.290696][ T6039] rtnetlink_rcv_msg+0x95e/0xe90 [ 78.290710][ T6039] netlink_rcv_skb+0x159/0x420 [ 78.290722][ T6039] netlink_unicast+0x585/0x850 [ 78.290733][ T6039] netlink_sendmsg+0x8b0/0xda0 [ 78.290744][ T6039] page_owner free stack trace missing [ 78.290747][ T6039] [ 78.290750][ T6039] Memory state around the buggy address: [ 78.290754][ T6039] ffff88805524db00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.290761][ T6039] ffff88805524db80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.290768][ T6039] >ffff88805524dc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.290774][ T6039] ^ [ 78.290778][ T6039] ffff88805524dc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.290785][ T6039] ffff88805524dd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.290791][ T6039] ================================================================== [ 78.290812][ T6039] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.519770][ T6039] CPU: 1 UID: 0 PID: 6039 Comm: kworker/u33:15 Not tainted syzkaller #0 PREEMPT(full) [ 78.522714][ T6039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.525841][ T6039] Workqueue: events_unbound commit_work [ 78.527584][ T6039] Call Trace: [ 78.528680][ T6039] [ 78.529629][ T6039] dump_stack_lvl+0x100/0x190 [ 78.531109][ T6039] vpanic+0x553/0x970 [ 78.532398][ T6039] ? __pfx_vpanic+0x10/0x10 [ 78.533867][ T6039] ? mark_held_locks+0x40/0x70 [ 78.535371][ T6039] ? irqentry_exit+0x24d/0xa10 [ 78.536882][ T6039] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 78.539192][ T6039] panic+0xd1/0xe0 [ 78.540378][ T6039] ? __pfx_panic+0x10/0x10 [ 78.541784][ T6039] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 78.544036][ T6039] ? preempt_schedule_common+0x3c/0xb0 [ 78.545749][ T6039] check_panic_on_warn.cold+0x19/0x34 [ 78.547422][ T6039] end_report.part.0+0x3a/0x90 [ 78.548962][ T6039] kasan_report.cold+0xe/0x18 [ 78.550448][ T6039] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 78.552680][ T6039] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 78.554872][ T6039] ? preempt_schedule_common+0x3c/0xb0 [ 78.556576][ T6039] ? preempt_schedule_thunk+0x16/0x40 [ 78.558298][ T6039] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 78.560618][ T6039] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 78.562457][ T6039] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 78.564464][ T6039] drm_atomic_helper_commit_tail+0xff/0x130 [ 78.566317][ T6039] commit_tail+0x338/0x430 [ 78.567723][ T6039] process_one_work+0xac7/0x1b10 [ 78.569338][ T6039] ? __pfx_process_one_work+0x10/0x10 [ 78.571023][ T6039] ? lock_acquire+0x1d1/0x380 [ 78.572501][ T6039] ? __pfx_commit_work+0x10/0x10 [ 78.574066][ T6039] worker_thread+0x5ef/0xe50 [ 78.575527][ T6039] ? kthread+0x13a/0x450 [ 78.576871][ T6039] ? __pfx_worker_thread+0x10/0x10 [ 78.578510][ T6039] kthread+0x373/0x450 [ 78.579794][ T6039] ? __pfx_kthread+0x10/0x10 [ 78.581240][ T6039] ret_from_fork+0x730/0xd60 [ 78.582697][ T6039] ? __pfx_ret_from_fork+0x10/0x10 [ 78.584311][ T6039] ? __switch_to+0x800/0x10f0 [ 78.585797][ T6039] ? __pfx_kthread+0x10/0x10 [ 78.587241][ T6039] ret_from_fork_asm+0x1a/0x30 [ 78.588731][ T6039] [ 78.590354][ T6039] Kernel Offset: disabled [ 78.591692][ T6039] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:39:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff88801eeda580 RSI=ffffffff81ff70fe RDI=0000000000000000 RBP=ffff88806a541900 RSP=ffffc900000d7960 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1003ddb763 R13=0000000000000003 R14=ffffed100d4a8321 R15=0000000000000001 RIP=ffffffff81ff711c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3312227dac CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000000100000 Opmask04=00000000ffffff7f Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558e992645a0 0000558e992645a0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558e9923c9e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558e992422b0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9909bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000ff0000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373734212 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 17005c1217005c18 101c1f115c434943 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558e9923ce18 0000558e9923ce18 0000000000000041 000000000000302e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c4b534944 445241483032785c 554d45513d434e45 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b18b95 RDI=ffffffff9bc72f60 RBP=ffffffff9bc72f20 RSP=ffffc90004ba7220 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3432353530386552 R12=0000000000000000 R13=0000000000000073 R14=0000000000000004 R15=ffffc90004ba7538 RIP=ffffffff85b18bbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3311faedc0 CR3=000000004adf9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000004000101 Opmask02=000000007ffeffff Opmask03=0000000022080800 Opmask04=00000000fffbffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558e99259a10 0000558e99259a10 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558e99250140 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9909bf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9909bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 43495a05594f4943 5c4f4e0559535905 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a4159434e75 4f4645425d051b4b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc75b890b6c83500 0000558bc1cdaefd 0000000000000021 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ad178990f2816a52 4f441bce9792eab4 0000558e5a96df96 00007ffcb8816850 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ed77ff9fffedfe5f 7f447feebfbfffb5 51fe7f9ffaffffbf 30457ffffbe56b76 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b53494444524148 5f554d45512d6174 612f64692d79622f 6b7369642f766564 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558e99240180 0000000000000041 00004e4f53240352 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558b99240180 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=8000000000000000 RBX=0000000000000000 RCX=ffffffff82801f7f RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888027430000 RBP=0000000000140cca RSP=ffffc90004c47710 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffc90004c47974 R14=0000000000000008 R15=ffffc90004c47898 RIP=ffffffff820c32bc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7eb42b3068 CR3=000000002c261000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000b68 000000000002c498 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff88801f28cb00 RSI=ffffffff81ff9b8e RDI=ffff88801f28cb00 RBP=ffffc90000167cd8 RSP=ffffc90000167bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a633de0 R12=ffff88806a73d280 R13=ffffed100d4e7a51 R14=ffff88806a73d288 R15=0000000000000001 RIP=ffffffff81ff9b90 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7eb42c2eb8 CR3=000000002c261000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00312e6f732e7875 6e696c657362696c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00312e6f732e7875 6e696c657362696c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000