last executing test programs: 32.829241361s ago: executing program 2 (id=3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000500)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x9, &(0x7f0000000580)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000ac0)=r3, 0x4) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x4200, 0x19, 0x7}, 0x18) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = open(&(0x7f0000000000)='.\x00', 0x820100, 0x0) setuid(0xee01) pipe2(0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) 32.62954973s ago: executing program 2 (id=5): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000040) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x800000, @empty}, 0x1c) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x400000) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/226) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_create1(0x0) r6 = syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x4}, 0x8) write$UHID_CREATE2(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x34cb, 0x0, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000010c0)={0x8, "99bdb1b0c7251b0894d402060074bd856e3c10db57c3f7484d9ed4190db800f3"}) ioctl$SW_SYNC_IOC_INC(r5, 0xc0285700, &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bf00ffff000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host, 0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$char_usb(r1, &(0x7f00000003c0)=""/62, 0x3e) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 17.656217831s ago: executing program 32 (id=5): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000040) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x800000, @empty}, 0x1c) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x400000) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/226) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_create1(0x0) r6 = syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x4}, 0x8) write$UHID_CREATE2(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x34cb, 0x0, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000010c0)={0x8, "99bdb1b0c7251b0894d402060074bd856e3c10db57c3f7484d9ed4190db800f3"}) ioctl$SW_SYNC_IOC_INC(r5, 0xc0285700, &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bf00ffff000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host, 0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$char_usb(r1, &(0x7f00000003c0)=""/62, 0x3e) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 13.919720113s ago: executing program 3 (id=348): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000380)) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f00000003c0)={@private=0xa010101, @empty, @broadcast}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x0, r0, 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f75", 0xa0}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f675", 0x8e}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971e", 0xf8}, {&(0x7f0000002380)="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", 0x9fb}, {&(0x7f0000003000)="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", 0x291}], 0x8}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000d40)={'syz1\x00', {0x9, 0x2, 0xd8e, 0x5}, 0x44, [0x2, 0x5, 0x10, 0x7f, 0xdeea, 0x400, 0x7, 0x4, 0x7, 0x401, 0xe, 0x10, 0x80000000, 0xf, 0x9, 0xaa1, 0xffffff61, 0x1f9, 0xfffffffe, 0x1, 0x100, 0x27, 0x9, 0xfc000000, 0x2, 0x40, 0x80000001, 0x2, 0x4, 0x5, 0x10200000, 0xffff, 0x2, 0x4, 0x7, 0x472, 0x80000000, 0x1, 0x800, 0x9f2, 0x8, 0x3ff, 0x3, 0xb571c000, 0x8, 0x2, 0x0, 0x0, 0x7ff, 0x1c0, 0x401, 0x2, 0x8, 0x3ff, 0x2, 0x6fc, 0x7, 0x401, 0x9ab8, 0x2fad, 0x100, 0x100, 0x2], [0x9, 0x9, 0x5, 0xa, 0xcd9e, 0x7fff, 0x0, 0x4, 0x10001, 0xfff, 0x0, 0x7, 0x2, 0x3, 0x6, 0x3ff, 0x2, 0x7, 0x0, 0xfffffff8, 0x2, 0x100, 0xfc3, 0x9, 0xffffff80, 0x401, 0x10, 0x7, 0x18, 0x7ff, 0x3, 0xfec, 0x6, 0x1, 0x6, 0x9, 0x0, 0x6, 0xffffffff, 0x10000, 0x80000001, 0x8, 0x1, 0xfffffffc, 0x88, 0x7, 0x6, 0x6, 0xf, 0x6, 0x3, 0x9, 0xf, 0x5, 0x5, 0x4, 0x4, 0x0, 0x5, 0xc, 0x7, 0x1, 0x7f, 0x4], [0x1, 0x6196, 0xffffff80, 0x7, 0x6, 0xfff, 0x9, 0x2, 0x5, 0x3b2, 0xc2, 0xa, 0x27, 0xa34, 0x81, 0x3, 0x9, 0x2, 0xfffffffe, 0xb6, 0x6, 0x0, 0x10, 0xb, 0x72d6a445, 0x6, 0x0, 0x2, 0x6, 0x7, 0x5, 0x5, 0x3, 0xfffffffd, 0x4, 0x5, 0x1fcf, 0x0, 0x101, 0x0, 0xb0, 0x0, 0x0, 0x6, 0x40, 0xffffff0a, 0x0, 0xd, 0x4, 0x1f, 0x40, 0x3, 0x1, 0xffffffe1, 0x8, 0xa0, 0x1dc9, 0x2, 0x0, 0x7, 0x2, 0x9, 0x87f, 0x8000], [0x9, 0x8, 0x7fffffff, 0x80000000, 0x0, 0x80000000, 0xe, 0xfffffffd, 0x1, 0x858f, 0x5, 0x0, 0x4, 0x10000, 0xe, 0x9f8, 0x9, 0xffff, 0x8, 0x5db, 0x8d, 0x98, 0x7, 0xcfa3, 0x400, 0x2, 0xc4, 0x0, 0x32, 0x7fff, 0x9, 0xa, 0xf50, 0x2, 0x9, 0x6, 0x5, 0x4, 0x7b74481e, 0x19, 0x3ff, 0xba0, 0x101, 0x4, 0x10000000, 0x81, 0x8, 0x2, 0x7, 0x8c7, 0x4c5, 0x7fffffff, 0xff, 0x4, 0x6, 0x6, 0x7f, 0x0, 0x3, 0x5, 0x40, 0x100, 0x800, 0xc]}, 0x45c) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000002c0)={0x401, 0x2, 0x6, 0x5, 0x101, 0x6}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000080)=[@ioring_restriction_sqe_op={0x1, 0x10}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1b}, @ioring_restriction_sqe_flags_required={0x3, 0x15}, @ioring_restriction_sqe_flags_required={0x3, 0x1e}, @ioring_restriction_sqe_op={0x1, 0xa}], 0x5) 13.856294548s ago: executing program 3 (id=351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x2, 0x6, 0x201, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0xc080) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x22000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x5, r2}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x2, 0x6, 0x201, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0xc080) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x22000) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x5, r2}) (async) 13.769982536s ago: executing program 3 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r2, 0x1, 0x0, 0x20003, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc101}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 13.696413748s ago: executing program 3 (id=354): r0 = socket(0x3e, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x1, 0x3, 0x0, 0x4, 0x5}, 0x20) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000100)="000001020200d2", 0x7, 0xfffffffffffffffb) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xc0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 13.429552015s ago: executing program 3 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@getneightbl={0x14, 0x42, 0xd33af63812c15f45, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x24044090) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@getneightbl={0x14, 0x42, 0xd33af63812c15f45, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x24044090) (async) 12.860243046s ago: executing program 3 (id=370): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0xb6400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x1b1d, 0x40, 0x0, 0xc0000310, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$FICLONE(r1, 0x40049409, r0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r6 = fcntl$dupfd(r4, 0x406, r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) setsockopt$inet_mtu(r6, 0x111, 0xa, &(0x7f0000000000), 0x4) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x1, 0x4, 0x7, 0xf7, 0xa, 0x6, "6aa010ebc59fe000", 0xfe, 0x3, 0xb6, 0x3, 0xe, 0x8}) syz_open_dev$char_usb(0xc, 0xb4, 0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f00000005c0)={0x2d, 0x0, r10, 0xc}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0xe, 0x2, 0x1, 0x49, @private0, @empty, 0x1, 0x20, 0xfffffffc, 0x2}}) getpeername$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r8, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x62, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000008c0), &(0x7f0000000900)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x74, 0x100, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40, 0x40, 0x7, 0xffffff27}}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="6c050000", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="e000028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040003000772060000006100020904000000306203f8f7ffffff0b002d05040000000700d6fb4800000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff00000008000100", @ANYRES32=0x0, @ANYBLOB="e40002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000100020644886f6d0101000100000100080002810300000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000100840100000000070010fe000000000400070970000000096705b80500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="680202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600aaa241a8c2a4ae877305ec51a92347efe670b8e64123b2c734053af2284868dd37ff4853d2097a84dd3ac8f37b8421b96f621ce6e3e7dd18fc894c73b75789a15f72037cbfd73873ce5a1052841e94d15f8b26f81ad8cb865f49e5117e27d75a0bb28f8cdcf205eaf1571fa766ec57af03a480852d7ed25ed46050ed55b471a3ef46972ca45026fa6617f4a732f85cf918a884eff70a8cc1eb7814e7b4954b8515e4925e3ab197db7fd99da4d9106b80c43d0546bdc54d9153664deb147a51724963f27ed76f1b2b5d1536dec0a6465bf1723f922f2b2aed3d", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400560d000008000600", @ANYRES32=r12, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=r14, @ANYBLOB="bc00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000f000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400d700000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400080000005f74785f686173685f746f5f706f72745f6d617070696e67000000000000050000000000000000000400934612f45cecb4d76baf2b0adf2371962b3d2fa8f1f419b402721d33d696fa0a4719759e269ed45e750bc92d9a1143295a33d0d475a663b129894e43fc77a7485f577d6f453100d1bd5163771783d3aab171c8ab3be992a53fd77d80647b640305bdf3148f95006d40c56753aef597dd5b198ea2a2a420c24a3b9ddbe4c9249519289542ed36d58d1389cc1c2614f8b8de13e0a914b94a79acce47f49fe4ad2d7c731913310fef867a04d691", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x56c}, 0x1, 0x0, 0x0, 0x24044000}, 0x4004840) 12.826753216s ago: executing program 33 (id=370): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0xb6400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x1b1d, 0x40, 0x0, 0xc0000310, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$FICLONE(r1, 0x40049409, r0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r6 = fcntl$dupfd(r4, 0x406, r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) setsockopt$inet_mtu(r6, 0x111, 0xa, &(0x7f0000000000), 0x4) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x1, 0x4, 0x7, 0xf7, 0xa, 0x6, "6aa010ebc59fe000", 0xfe, 0x3, 0xb6, 0x3, 0xe, 0x8}) syz_open_dev$char_usb(0xc, 0xb4, 0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f00000005c0)={0x2d, 0x0, r10, 0xc}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0xe, 0x2, 0x1, 0x49, @private0, @empty, 0x1, 0x20, 0xfffffffc, 0x2}}) getpeername$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r8, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x62, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000008c0), &(0x7f0000000900)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x74, 0x100, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40, 0x40, 0x7, 0xffffff27}}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="6c050000", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="e000028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040003000772060000006100020904000000306203f8f7ffffff0b002d05040000000700d6fb4800000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff00000008000100", @ANYRES32=0x0, @ANYBLOB="e40002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000100020644886f6d0101000100000100080002810300000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000100840100000000070010fe000000000400070970000000096705b80500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="680202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400560d000008000600", @ANYRES32=r12, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=r14, @ANYBLOB="bc00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000f000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400d700000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400080000005f74785f686173685f746f5f706f72745f6d617070696e67000000000000050000000000000000000400934612f45cecb4d76baf2b0adf2371962b3d2fa8f1f419b402721d33d696fa0a4719759e269ed45e750bc92d9a1143295a33d0d475a663b129894e43fc77a7485f577d6f453100d1bd5163771783d3aab171c8ab3be992a53fd77d80647b640305bdf3148f95006d40c56753aef597dd5b198ea2a2a420c24a3b9ddbe4c9249519289542ed36d58d1389cc1c2614f8b8de13e0a914b94a79acce47f49fe4ad2d7c731913310fef867a04d691", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x56c}, 0x1, 0x0, 0x0, 0x24044000}, 0x4004840) 4.260764617s ago: executing program 4 (id=505): keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000250001"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xd0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200000, 0x0) 4.259862542s ago: executing program 4 (id=506): syz_emit_ethernet(0x6c, &(0x7f0000000c40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1208004500005e00000000002f907800000000000000002480655800000000100008000005039e0fff000086dd080088be00000000100c0000e2ff000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) 4.18060155s ago: executing program 4 (id=507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000100)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x65364000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000001840)={@val={0x8, 0xc}, @val={0x0, 0x0, 0x6, 0x0, 0x14, 0x4}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x8, 0xfc0, 0x66, 0x0, 0xb, 0x6c, 0x0, @rand_addr=0x64010100, @remote}, "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"}}, 0xfce) read$char_usb(r4, &(0x7f00000000c0)=""/34, 0x22) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c0000000001400001400350077673200f50000000000008677e566ca1d4d2569cf0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x1) timer_create(0x1, &(0x7f0000000740)={0x0, 0x3c, 0x4, @thr={&(0x7f00000005c0)="1b3903b0ab5031760c00ec062cf1bafaa0540c94a36e99c492223421a881bc607d7807d651f629cc48c2e4825aaff20675a232402e7ef8a86d61137f46744cd0f4e3a3ef9cba3a255c118e2252d79c4008f39caaf0ffcbf074ca1a3bd506eeb05a2d5a0a193f514fbbbab47b2b7993b00058764935afe2679c007162f43b0b338219d578d88d8b327f1bd4e6c39b4d17a40284e9c2bbab", &(0x7f0000000680)="9d9083e2227f997418394fa1beab8983ffb5fb1e275df730c6874d3ef204cf215d1aef63a27e6ddda4259fdec950fa923cb99d902013d1576087b07ce87fcb77671ab2d7c873a9600841d4ed0a04d58e19edeba8c39a13ca809c257359619cd21eb4fdf65423d4414a8186bb8a8bbddfdaf527a4743b7c816965043fb4480be06863ba87b7cedcbdc6"}}, &(0x7f0000000780)=0x0) timer_settime(r11, 0x0, &(0x7f00000007c0)={{0x0, 0x3938700}}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r10, 0x5385, &(0x7f00000000c0)={0x1a, ""/26}) 3.565162021s ago: executing program 1 (id=517): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x102000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1d0c26bd7000f8dbdf250c00000008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x8194}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x7fffffffffffffff, 0x43, 0x8, 0xfffffffffffffffc, 0x2, 0xffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x6, 0x7, 0x17c, 0x0, 0xffffffff, 0xfffffffffffffff7], 0x5000, 0x10}) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r8, 0x0, 0x4ffe6, 0x0) 2.840246764s ago: executing program 5 (id=528): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ff", 0x3, 0x0, 0x0, 0x2}]) 2.760716857s ago: executing program 1 (id=529): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.688620629s ago: executing program 5 (id=530): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) 2.629587254s ago: executing program 1 (id=532): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sendto$inet6(r0, &(0x7f00000000c0)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549025ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x40, 0x0, 0x0) 2.629334776s ago: executing program 0 (id=533): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.569471479s ago: executing program 5 (id=534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, r3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0x2020) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100001a"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.920229625s ago: executing program 5 (id=535): open(0x0, 0x86442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sync() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 1.729258984s ago: executing program 1 (id=536): userfaultfd(0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x5aa7bac0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_io_uring_setup(0x4f0e, &(0x7f0000000480)={0x0, 0x0, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x62dd, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 1.660569469s ago: executing program 0 (id=537): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00"], 0xfc}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x5efe) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001d0001"], 0x10}}, 0x0) 1.660213857s ago: executing program 0 (id=538): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.100428856s ago: executing program 4 (id=539): socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006840)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000000)={0x18, 0x401, 0x1f, 0x5, 0x8, "e2f265c1dcec0ed6"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 940.582598ms ago: executing program 5 (id=540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000400000004000000000080000200000035e7aae279bea7543def6e75e41be218ab1ac56a9028537971067f3c55b975b8d61f88d0a504f4eda1e4ec13fa74fcdff6060ff38bd84b708cb80b89b409d8cacea1f41e839a1158fe0d6c7cca63f5301f090234f33b750949049e545d041c49460f42dc3b4ebea33a659dc1c3e086b256ec54389a78b57557c854e3558c749f513c0d788fd69ad73dc770d3bcdd5ad061375d9d3a48fdc4264ae82a72bc2cc80a00cf1955b9ee5a2be6834888e1650c7b08947e", @ANYRES32, @ANYBLOB="fcffffff00"/18, @ANYRES32=0x0, @ANYRES8=0x0], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_adjtime(0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@multicast1}, &(0x7f0000000400)=0xc) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r9) 858.646769ms ago: executing program 1 (id=541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0x10}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5a, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 858.476034ms ago: executing program 1 (id=542): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af0", 0x30, 0x840, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 740.703506ms ago: executing program 0 (id=543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x20040020) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x40) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x9) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x7}}, 0x50) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) prctl$PR_SET_THP_DISABLE(0x29, 0x2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000040)) 199.885091ms ago: executing program 4 (id=544): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800090400080000000000000a000000000008000000000008001e0001"], 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r3, 0x29, 0x2, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x80, 0x5, 0x9}}) 199.666755ms ago: executing program 4 (id=545): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x22, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 425.789µs ago: executing program 5 (id=546): open(0x0, 0x86442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sync() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 215.398µs ago: executing program 0 (id=547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x6, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_PIT(r4, 0xc048ae65, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r2, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000002240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, 0x0) 0s ago: executing program 0 (id=548): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:45438' (ED25519) to the list of known hosts. [ 45.366646][ T40] audit: type=1400 audit(1758338481.638:62): avc: denied { name_bind } for pid=5930 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.400805][ T40] audit: type=1400 audit(1758338481.668:63): avc: denied { write } for pid=5933 comm="sh" path="pipe:[2759]" dev="pipefs" ino=2759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.421578][ T40] audit: type=1400 audit(1758338481.688:64): avc: denied { execute } for pid=5933 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.429526][ T40] audit: type=1400 audit(1758338481.688:65): avc: denied { execute_no_trans } for pid=5933 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.564373][ T40] audit: type=1400 audit(1758338483.838:66): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.567743][ T5933] cgroup: Unknown subsys name 'net' [ 47.756445][ T5933] cgroup: Unknown subsys name 'cpuset' [ 47.761858][ T5933] cgroup: Unknown subsys name 'rlimit' [ 48.010596][ T5956] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.905955][ T5933] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.307530][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 52.307541][ T40] audit: type=1400 audit(1758338488.578:80): avc: denied { execmem } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.509208][ T40] audit: type=1400 audit(1758338488.778:81): avc: denied { create } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.519059][ T40] audit: type=1400 audit(1758338488.778:82): avc: denied { read write } for pid=5965 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.526494][ T40] audit: type=1400 audit(1758338488.778:83): avc: denied { read write } for pid=5966 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.533811][ T40] audit: type=1400 audit(1758338488.778:84): avc: denied { open } for pid=5966 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.541063][ T40] audit: type=1400 audit(1758338488.778:85): avc: denied { open } for pid=5965 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.545587][ T5970] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.548624][ T40] audit: type=1400 audit(1758338488.788:86): avc: denied { ioctl } for pid=5965 comm="syz-executor" path="socket:[5889]" dev="sockfs" ino=5889 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.550996][ T5970] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.562412][ T5971] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.563804][ T5978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.567347][ T5978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.568087][ T5971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.570231][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.573562][ T5971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.574990][ T5978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.577832][ T5971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.579958][ T5978] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.580862][ T5975] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.581580][ T5975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.582277][ T5975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.588263][ T40] audit: type=1400 audit(1758338488.858:87): avc: denied { read } for pid=5965 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.589047][ T5975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.590756][ T5978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.591254][ T40] audit: type=1400 audit(1758338488.858:88): avc: denied { open } for pid=5965 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.593620][ T5981] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.598795][ T5978] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.600257][ T40] audit: type=1400 audit(1758338488.868:89): avc: denied { mounton } for pid=5965 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.602860][ T5975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.623585][ T5975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.779093][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 52.909947][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 52.971513][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.974156][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.977087][ T5966] bridge_slave_0: entered allmulticast mode [ 52.980590][ T5966] bridge_slave_0: entered promiscuous mode [ 53.001406][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.005206][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.007684][ T5966] bridge_slave_1: entered allmulticast mode [ 53.010674][ T5966] bridge_slave_1: entered promiscuous mode [ 53.046580][ T5977] chnl_net:caif_netlink_parms(): no params data found [ 53.119904][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.127291][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.184859][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 53.222186][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.224611][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.226877][ T5965] bridge_slave_0: entered allmulticast mode [ 53.229460][ T5965] bridge_slave_0: entered promiscuous mode [ 53.251774][ T5966] team0: Port device team_slave_0 added [ 53.254285][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.257188][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.259936][ T5965] bridge_slave_1: entered allmulticast mode [ 53.263327][ T5965] bridge_slave_1: entered promiscuous mode [ 53.301007][ T5966] team0: Port device team_slave_1 added [ 53.335607][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.338998][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.341244][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.343915][ T5977] bridge_slave_0: entered allmulticast mode [ 53.346548][ T5977] bridge_slave_0: entered promiscuous mode [ 53.382831][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.385959][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.388870][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.391779][ T5977] bridge_slave_1: entered allmulticast mode [ 53.396136][ T5977] bridge_slave_1: entered promiscuous mode [ 53.429594][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.432493][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.442746][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.451470][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.454454][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.462333][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.577705][ T5965] team0: Port device team_slave_0 added [ 53.604836][ T5977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.624082][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.626369][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.628722][ T5973] bridge_slave_0: entered allmulticast mode [ 53.631315][ T5973] bridge_slave_0: entered promiscuous mode [ 53.652662][ T5965] team0: Port device team_slave_1 added [ 53.656814][ T5977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.684962][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.688004][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.691078][ T5973] bridge_slave_1: entered allmulticast mode [ 53.696072][ T5973] bridge_slave_1: entered promiscuous mode [ 53.787304][ T5966] hsr_slave_0: entered promiscuous mode [ 53.789907][ T5966] hsr_slave_1: entered promiscuous mode [ 53.817318][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.819619][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.827996][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.834602][ T5977] team0: Port device team_slave_0 added [ 53.873083][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.875570][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.885649][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.891613][ T5977] team0: Port device team_slave_1 added [ 53.912923][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.924385][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.984082][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.986886][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.997048][ T5977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.001282][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.003498][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.011334][ T5977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.141712][ T5973] team0: Port device team_slave_0 added [ 54.148403][ T5965] hsr_slave_0: entered promiscuous mode [ 54.151210][ T5965] hsr_slave_1: entered promiscuous mode [ 54.154398][ T5965] debugfs: 'hsr0' already exists in 'hsr' [ 54.156625][ T5965] Cannot create hsr debugfs directory [ 54.165796][ T5973] team0: Port device team_slave_1 added [ 54.239577][ T5977] hsr_slave_0: entered promiscuous mode [ 54.242339][ T5977] hsr_slave_1: entered promiscuous mode [ 54.245688][ T5977] debugfs: 'hsr0' already exists in 'hsr' [ 54.247863][ T5977] Cannot create hsr debugfs directory [ 54.306719][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.309657][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.320462][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.381120][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.384082][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.394601][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.540677][ T5973] hsr_slave_0: entered promiscuous mode [ 54.542944][ T5973] hsr_slave_1: entered promiscuous mode [ 54.545124][ T5973] debugfs: 'hsr0' already exists in 'hsr' [ 54.546938][ T5973] Cannot create hsr debugfs directory [ 54.644031][ T5972] Bluetooth: hci2: command tx timeout [ 54.644351][ T5975] Bluetooth: hci3: command tx timeout [ 54.645087][ T5978] Bluetooth: hci1: command tx timeout [ 54.645243][ T5978] Bluetooth: hci0: command tx timeout [ 54.645942][ T5966] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.660139][ T5966] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.673920][ T5966] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.678518][ T5966] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.764171][ T5965] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.772372][ T5965] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.777936][ T5965] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.786140][ T5965] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.836557][ T5977] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.845879][ T5977] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.851999][ T5977] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.859099][ T5977] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.924281][ T5973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.928642][ T5973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.939710][ T5973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.947437][ T5973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.958095][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.001393][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.010799][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.023029][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.025478][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.040091][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.043107][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.051442][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.069699][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.086897][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.089718][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.099992][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.102876][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.115626][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.130615][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.133311][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.151620][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.153979][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.167119][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.205587][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.219164][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.221444][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.228749][ T5977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.237265][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.240344][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.302618][ T5973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.324062][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.363170][ T5966] veth0_vlan: entered promiscuous mode [ 55.370562][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.374801][ T5966] veth1_vlan: entered promiscuous mode [ 55.381730][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.420084][ T5966] veth0_macvtap: entered promiscuous mode [ 55.425561][ T5966] veth1_macvtap: entered promiscuous mode [ 55.461221][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.468538][ T5977] veth0_vlan: entered promiscuous mode [ 55.474509][ T5965] veth0_vlan: entered promiscuous mode [ 55.480407][ T5977] veth1_vlan: entered promiscuous mode [ 55.488461][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.498025][ T5965] veth1_vlan: entered promiscuous mode [ 55.503191][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.521351][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.533793][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.541104][ T5977] veth0_macvtap: entered promiscuous mode [ 55.551544][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.555864][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.567051][ T5977] veth1_macvtap: entered promiscuous mode [ 55.591683][ T5973] veth0_vlan: entered promiscuous mode [ 55.606542][ T5965] veth0_macvtap: entered promiscuous mode [ 55.624607][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.639114][ T5965] veth1_macvtap: entered promiscuous mode [ 55.644919][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.648699][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.651973][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.662952][ T5973] veth1_vlan: entered promiscuous mode [ 55.682519][ T92] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.694833][ T92] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.698481][ T92] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.705897][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.712407][ T92] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.725021][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.725772][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.727531][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.738599][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.742154][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.752736][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.756395][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.779879][ T5966] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.784577][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.784594][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.815085][ T5973] veth0_macvtap: entered promiscuous mode [ 55.830651][ T5973] veth1_macvtap: entered promiscuous mode [ 55.838472][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.842344][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.858777][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.862116][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.877620][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.900497][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.908248][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.911505][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.916996][ T92] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.921069][ T92] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.931793][ T92] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.945430][ T92] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.977192][ T6057] xt_l2tp: wrong L2TP version: 0 [ 55.999059][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.001509][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.027191][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.030469][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.080793][ T6066] libceph: resolve ' [ 56.080793][ T6066] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 56.080793][ T6066] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 56.099731][ T6064] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 56.111837][ T6064] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 56.118474][ T6064] warning: `syz.3.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.228389][ T6083] delete_channel: no stack [ 56.306008][ T6099] libceph: resolve ' [ 56.306008][ T6099] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 56.306008][ T6099] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 56.520033][ T6115] netlink: 27 bytes leftover after parsing attributes in process `syz.3.19'. [ 56.694352][ T6133] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.697941][ T6135] netlink: 3 bytes leftover after parsing attributes in process `syz.0.26'. [ 56.726044][ T5975] Bluetooth: hci3: command tx timeout [ 56.726057][ T5972] Bluetooth: hci2: command tx timeout [ 56.733877][ T5972] Bluetooth: hci0: command tx timeout [ 56.733893][ T5975] Bluetooth: hci1: command tx timeout [ 56.785595][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 57.351728][ T40] kauditd_printk_skb: 96 callbacks suppressed [ 57.351738][ T40] audit: type=1400 audit(1758338493.618:186): avc: denied { bind } for pid=6207 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.364747][ T40] audit: type=1400 audit(1758338493.638:187): avc: denied { write } for pid=6207 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.423185][ T40] audit: type=1400 audit(1758338493.688:188): avc: denied { mounton } for pid=6207 comm="syz.3.36" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 57.436456][ T6209] affs: No valid root block on device nullb0 [ 57.554839][ T40] audit: type=1400 audit(1758338493.828:189): avc: denied { read } for pid=6210 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.695930][ T6221] netlink: 44 bytes leftover after parsing attributes in process `syz.0.39'. [ 57.698793][ T6221] netlink: 84 bytes leftover after parsing attributes in process `syz.0.39'. [ 57.798264][ T40] audit: type=1400 audit(1758338494.068:190): avc: denied { read } for pid=6054 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.810822][ T40] audit: type=1400 audit(1758338494.078:191): avc: denied { mounton } for pid=6054 comm="syz.1.2" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.913540][ T40] audit: type=1400 audit(1758338494.188:192): avc: denied { unmount } for pid=5977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 58.010171][ T40] audit: type=1400 audit(1758338494.278:193): avc: denied { read write } for pid=6222 comm="syz.1.40" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 58.018938][ T40] audit: type=1400 audit(1758338494.278:194): avc: denied { open } for pid=6222 comm="syz.1.40" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 58.028532][ T40] audit: type=1400 audit(1758338494.278:195): avc: denied { write } for pid=6222 comm="syz.1.40" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.171161][ T6229] XFS (nullb0): Invalid superblock magic number [ 58.239507][ T6236] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 58.239833][ T5975] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 58.246496][ T5975] Bluetooth: Wrong link type (-22) [ 58.249612][ T6236] netlink: 10 bytes leftover after parsing attributes in process `syz.3.44'. [ 58.277610][ T6244] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 58.334794][ T6253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.55'. [ 58.350909][ T6048] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x4 [ 58.356502][ T6048] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 58.360329][ T6048] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 58.364532][ T6048] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 58.367611][ T6048] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x2 [ 58.370717][ T6048] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 58.380819][ T6048] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 58.384151][ T6048] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x4 [ 58.388156][ T6048] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 58.391154][ T6048] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 58.405078][ T6048] hid-generic 00A0:0008:0003.0002: hidraw1: HID v0.05 Device [syz1] on syz0 [ 58.428328][ T6259] IPVS: Error connecting to the multicast addr [ 58.474509][ T6253] io-wq is not configured for unbound workers [ 58.559204][ T6275] tipc: Started in network mode [ 58.563566][ T6275] tipc: Node identity 7f000001, cluster identity 4711 [ 58.567202][ T6275] tipc: Enabled bearer , priority 10 [ 58.804059][ T5975] Bluetooth: hci0: command tx timeout [ 58.804234][ T5972] Bluetooth: hci2: command tx timeout [ 58.813481][ T5972] Bluetooth: hci1: command tx timeout [ 58.813499][ T5975] Bluetooth: hci3: command tx timeout [ 58.887462][ T6291] netlink: 'syz.3.59': attribute type 20 has an invalid length. [ 58.960856][ T24] Process accounting resumed [ 59.298613][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.63'. [ 59.594152][ T2301] tipc: Node number set to 2130706433 [ 60.126624][ T6330] ptrace attach of "/syz-executor exec"[5977] was attempted by ""[6330] [ 60.171276][ T6332] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 60.295544][ T6340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65529 sclass=netlink_route_socket pid=6340 comm=syz.1.75 [ 60.447244][ T6355] netlink: 'syz.1.80': attribute type 2 has an invalid length. [ 60.710384][ T6360] capability: warning: `syz.1.82' uses 32-bit capabilities (legacy support in use) [ 60.858915][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.86'. [ 60.861621][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.86'. [ 60.883560][ T5975] Bluetooth: hci1: command tx timeout [ 60.883572][ T5972] Bluetooth: hci2: command tx timeout [ 60.893361][ T5975] Bluetooth: hci3: command tx timeout [ 60.893373][ T5972] Bluetooth: hci0: command tx timeout [ 60.914404][ T6373] process 'syz.1.88' launched './file0' with NULL argv: empty string added [ 60.943883][ T6375] netlink: 'syz.1.89': attribute type 3 has an invalid length. [ 61.093526][ T6389] syz.1.91 uses obsolete (PF_INET,SOCK_PACKET) [ 61.197819][ T6396] tipc: Can't bind to reserved service type 1 [ 61.367513][ T5975] block nbd0: Receive control failed (result -11) [ 61.475146][ T6422] tipc: Started in network mode [ 61.476967][ T6422] tipc: Node identity 7f000001, cluster identity 4711 [ 61.479991][ T6422] tipc: Enabled bearer , priority 10 [ 61.485786][ T6422] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 61.489826][ T6422] tipc: Enabled bearer , priority 10 [ 61.690513][ T6445] __nla_validate_parse: 3 callbacks suppressed [ 61.690524][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 61.697105][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 61.765324][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 61.768752][ T6447] bond0: option use_carrier: invalid value (10) [ 61.930519][ T6465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33560 sclass=netlink_route_socket pid=6465 comm=syz.0.115 [ 61.937291][ T6466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33560 sclass=netlink_route_socket pid=6466 comm=syz.0.115 [ 62.027464][ T6472] netlink: 348 bytes leftover after parsing attributes in process `syz.3.117'. [ 62.089319][ T6484] capability: warning: `syz.3.121' uses deprecated v2 capabilities in a way that may be insecure [ 62.238176][ T6521] netlink: 248 bytes leftover after parsing attributes in process `syz.3.124'. [ 62.330232][ T6550] udevd[6550]: failed to send result of seq 13927 to main daemon: Connection refused [ 62.401101][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 62.401111][ T40] audit: type=1400 audit(1758338498.668:282): avc: denied { checkpoint_restore } for pid=6553 comm="syz.3.127" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.410474][ T40] audit: type=1400 audit(1758338498.678:283): avc: denied { write } for pid=6553 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.483350][ T34] tipc: Node number set to 2130706433 [ 62.586915][ T40] audit: type=1400 audit(1758338498.858:284): avc: denied { bind } for pid=6557 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.597652][ T40] audit: type=1400 audit(1758338498.858:285): avc: denied { ioctl } for pid=6557 comm="syz.3.128" path="socket:[13377]" dev="sockfs" ino=13377 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.619867][ T6560] Zero length message leads to an empty skb [ 62.650873][ T6562] tipc: Enabled bearer , priority 10 [ 62.717321][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 62.720267][ T6568] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 62.722799][ T6568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 62.727467][ T40] audit: type=1400 audit(1758338498.998:286): avc: denied { read } for pid=6567 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.727848][ T6568] /dev/sg0: Can't lookup blockdev [ 62.736762][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 62.739571][ T6570] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 62.742328][ T6570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 62.779927][ T40] audit: type=1400 audit(1758338499.048:287): avc: denied { read write } for pid=6572 comm="syz.3.133" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.789740][ T40] audit: type=1400 audit(1758338499.048:288): avc: denied { open } for pid=6572 comm="syz.3.133" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.799671][ T40] audit: type=1400 audit(1758338499.048:289): avc: denied { ioctl } for pid=6572 comm="syz.3.133" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.012241][ T40] audit: type=1400 audit(1758338499.278:290): avc: denied { bind } for pid=6583 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.020170][ T40] audit: type=1400 audit(1758338499.278:291): avc: denied { name_bind } for pid=6583 comm="syz.0.137" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 63.027299][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.091487][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 63.180278][ T34] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 63.183364][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.186047][ T34] usb 8-1: Product: syz [ 63.187670][ T34] usb 8-1: Manufacturer: syz [ 63.189112][ T34] usb 8-1: SerialNumber: syz [ 63.198465][ T34] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 63.218889][ T6031] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 63.241574][ T6608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.145'. [ 63.433811][ T54] usb 8-1: USB disconnect, device number 2 [ 63.500530][ T6628] erspan1: entered promiscuous mode [ 63.504516][ T6630] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 63.517143][ T6628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.562039][ T6638] ip6gre1: entered allmulticast mode [ 63.569323][ T6638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.153'. [ 63.948827][ T6671] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 63.951846][ T6671] netlink: 'syz.1.163': attribute type 4 has an invalid length. [ 64.243382][ T6031] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 64.253708][ T6031] ath9k_htc: Failed to initialize the device [ 64.257855][ T54] usb 8-1: ath9k_htc: USB layer deinitialized [ 64.534361][ T6699] fuse: Unknown parameter 'fd' [ 64.536223][ T5975] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 64.536253][ T5975] Bluetooth: hci3: Malformed LE Event: 0x02 [ 64.654400][ T6698] team0 (unregistering): Port device team_slave_0 removed [ 64.666692][ T6698] team0 (unregistering): Port device team_slave_1 removed [ 65.000957][ T6715] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 65.302762][ T6742] cgroup2: Unknown parameter 'memory' [ 65.475245][ T6765] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 65.478569][ T6760] syzkaller1: entered promiscuous mode [ 65.480340][ T6760] syzkaller1: entered allmulticast mode [ 65.639791][ T6783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.700391][ T6788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.830062][ T839] cfg80211: failed to load regulatory.db [ 65.865559][ T6802] ip6tnl1: entered promiscuous mode [ 65.867346][ T6802] ip6tnl1: entered allmulticast mode [ 66.045128][ T6819] trusted_key: syz.1.209 sent an empty control message without MSG_MORE. [ 66.661627][ T6837] openvswitch: netlink: IPv4 tun info is not correct [ 66.661738][ T6838] ======================================================= [ 66.661738][ T6838] WARNING: The mand mount option has been deprecated and [ 66.661738][ T6838] and is ignored by this kernel. Remove the mand [ 66.661738][ T6838] option from the mount to silence this warning. [ 66.661738][ T6838] ======================================================= [ 66.723514][ T6849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.730571][ T6850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.730843][ T6842] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 66.826028][ T6867] netlink: 'syz.0.223': attribute type 10 has an invalid length. [ 67.294620][ T6906] bond2: entered allmulticast mode [ 67.296676][ T6906] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.432588][ T40] kauditd_printk_skb: 1041 callbacks suppressed [ 67.432598][ T40] audit: type=1400 audit(1758338503.698:1333): avc: denied { read write } for pid=6917 comm="syz.1.227" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.441747][ T40] audit: type=1400 audit(1758338503.708:1334): avc: denied { open } for pid=6917 comm="syz.1.227" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.476632][ T6921] __nla_validate_parse: 10 callbacks suppressed [ 67.476642][ T6921] netlink: 200 bytes leftover after parsing attributes in process `syz.1.228'. [ 67.530895][ T6924] fuse: Bad value for 'fd' [ 67.563087][ T6932] netlink: 'syz.0.230': attribute type 4 has an invalid length. [ 67.595793][ T6934] : renamed from lo (while UP) [ 67.627424][ T40] audit: type=1400 audit(1758338503.898:1335): avc: denied { write } for pid=6938 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.898603][ T6950] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 67.902389][ T6949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 67.904591][ T6950] netlink: 56 bytes leftover after parsing attributes in process `syz.0.235'. [ 68.455082][ T40] audit: type=1400 audit(1758338504.728:1336): avc: denied { getopt } for pid=6957 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.463002][ T40] audit: type=1400 audit(1758338504.728:1337): avc: denied { create } for pid=6957 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 68.472611][ T40] audit: type=1400 audit(1758338504.738:1338): avc: denied { ioctl } for pid=6959 comm="syz.3.237" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 68.577121][ T6983] netlink: 96 bytes leftover after parsing attributes in process `syz.3.244'. [ 68.610367][ T40] audit: type=1400 audit(1758338504.878:1339): avc: denied { append } for pid=6990 comm="syz.1.245" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.617740][ T40] audit: type=1400 audit(1758338504.888:1340): avc: denied { create } for pid=6992 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.623711][ T40] audit: type=1400 audit(1758338504.888:1341): avc: denied { ioctl } for pid=6992 comm="syz.0.246" path="socket:[14703]" dev="sockfs" ino=14703 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.631562][ T40] audit: type=1400 audit(1758338504.888:1342): avc: denied { ioctl } for pid=6992 comm="syz.0.246" path="socket:[14704]" dev="sockfs" ino=14704 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 68.637150][ T6999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 68.675846][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.249'. [ 68.713641][ T7003] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 68.748133][ T7012] evm: overlay not supported [ 68.756815][ T7016] netlink: 'syz.0.252': attribute type 10 has an invalid length. [ 68.767518][ T7016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.779389][ T7016] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 68.786553][ T7016] netlink: 'syz.0.252': attribute type 10 has an invalid length. [ 68.789608][ T7016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.252'. [ 68.794244][ T7016] batadv0: entered promiscuous mode [ 68.795876][ T7016] batadv0: entered allmulticast mode [ 68.798545][ T7016] bond0: (slave batadv0): Releasing backup interface [ 68.804054][ T7016] bridge0: port 3(batadv0) entered blocking state [ 68.806854][ T7016] bridge0: port 3(batadv0) entered disabled state [ 69.061096][ T7045] netlink: 56 bytes leftover after parsing attributes in process `syz.0.259'. [ 69.125489][ T6537] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 69.129645][ T6537] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 69.259821][ T7056] (syz.0.264,7056,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 69.416533][ T7069] bond2: entered allmulticast mode [ 69.418437][ T7069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.425064][ T7069] ip6erspan0: entered promiscuous mode [ 69.484690][ T7076] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 69.522122][ T7078] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 69.526561][ T7078] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 69.569154][ T60] Process accounting resumed [ 69.573875][ T7082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.271'. [ 69.586834][ T7082] Process accounting resumed [ 69.603470][ T5972] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 69.603670][ T5975] Bluetooth: hci3: command 0x206a tx timeout [ 69.741397][ T7094] overlayfs: failed to clone upperpath [ 69.970633][ T7110] block nbd1: Attempted send on invalid socket [ 69.974041][ T7110] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 69.977783][ T7110] XFS (nbd1): SB validate failed with error -5. [ 70.087066][ T7118] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 70.090244][ T7118] netlink: 'syz.1.280': attribute type 11 has an invalid length. [ 70.173963][ T7124] macvtap1: entered promiscuous mode [ 70.176414][ T7124] team0: Device macvtap1 is already an upper device of the team interface [ 70.307733][ T7127] loop6: detected capacity change from 0 to 2560 [ 70.311775][ T7127] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.315333][ T7127] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.318679][ T7127] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.322108][ T7127] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.326474][ T7127] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.329829][ T7127] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.333431][ T7127] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.336917][ T7127] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.339331][ T7127] ldm_validate_partition_table(): Disk read failed. [ 70.341387][ T7127] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.346916][ T7127] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.349479][ T7127] Dev loop6: unable to read RDB block 0 [ 70.351423][ T7127] loop6: unable to read partition table [ 70.353429][ T7127] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 70.594426][ T7144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.666132][ T7156] overlayfs: failed to clone upperpath [ 71.091485][ T5972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.094975][ T5972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.097764][ T5972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.102154][ T5972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.105656][ T5972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.226624][ T7168] chnl_net:caif_netlink_parms(): no params data found [ 71.309817][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.312250][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.315409][ T7168] bridge_slave_0: entered allmulticast mode [ 71.318299][ T7168] bridge_slave_0: entered promiscuous mode [ 71.337092][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.346250][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.348558][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.351305][ T7168] bridge_slave_1: entered allmulticast mode [ 71.356235][ T7168] bridge_slave_1: entered promiscuous mode [ 71.388654][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.410110][ T7168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.414879][ T7168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.449162][ T7168] team0: Port device team_slave_0 added [ 71.452611][ T7168] team0: Port device team_slave_1 added [ 71.492289][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.498852][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.501466][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.510142][ T7168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.516504][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.518681][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.526936][ T7168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.540621][ T7193] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 71.548630][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.591272][ T7168] hsr_slave_0: entered promiscuous mode [ 71.593640][ T7168] hsr_slave_1: entered promiscuous mode [ 71.595642][ T7168] debugfs: 'hsr0' already exists in 'hsr' [ 71.598881][ T7168] Cannot create hsr debugfs directory [ 71.663775][ T7202] openvswitch: netlink: IPv4 frag type 36 is out of range max 2 [ 71.728293][ T12] bridge_slave_1: left allmulticast mode [ 71.730552][ T12] bridge_slave_1: left promiscuous mode [ 71.733655][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.741947][ T12] bridge_slave_0: left allmulticast mode [ 71.745571][ T12] bridge_slave_0: left promiscuous mode [ 71.747727][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.965277][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.970547][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.974779][ T12] bond0 (unregistering): Released all slaves [ 71.989794][ T7212] ipip0: entered promiscuous mode [ 72.069954][ T7168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.076193][ T7168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.084082][ T7168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.118274][ T7168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.198662][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.211167][ T7168] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.217617][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.220595][ T6514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.227801][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.230718][ T6537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.261874][ T7168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.266275][ T7168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.277494][ T12] hsr_slave_0: left promiscuous mode [ 72.280485][ T12] hsr_slave_1: left promiscuous mode [ 72.283030][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.286289][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.290386][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.293773][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.336869][ T12] veth1_macvtap: left promiscuous mode [ 72.340033][ T12] veth0_macvtap: left promiscuous mode [ 72.342820][ T12] veth1_vlan: left promiscuous mode [ 72.345762][ T12] veth0_vlan: left promiscuous mode [ 72.559689][ T7246] futex_wake_op: syz.0.317 tries to shift op by 32; fix this program [ 72.862451][ T12] team0 (unregistering): Port device team_slave_1 removed [ 72.912675][ T12] team0 (unregistering): Port device team_slave_0 removed [ 73.071678][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 73.071692][ T40] audit: type=1400 audit(1758338509.338:1379): avc: denied { getopt } for pid=7251 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.133831][ T5972] Bluetooth: hci0: command tx timeout [ 73.366265][ T7246] __nla_validate_parse: 10 callbacks suppressed [ 73.366282][ T7246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.317'. [ 73.471801][ T40] audit: type=1400 audit(1758338509.738:1380): avc: denied { getopt } for pid=7270 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.481880][ T7168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.482717][ T40] audit: type=1400 audit(1758338509.748:1381): avc: denied { read } for pid=7272 comm="syz.1.324" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.493166][ T40] audit: type=1400 audit(1758338509.748:1382): avc: denied { open } for pid=7272 comm="syz.1.324" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.621667][ T40] audit: type=1326 audit(1758338509.888:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.1.324" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb52138ec29 code=0x0 [ 73.661517][ T7168] veth0_vlan: entered promiscuous mode [ 73.670388][ T7168] veth1_vlan: entered promiscuous mode [ 73.692303][ T7168] veth0_macvtap: entered promiscuous mode [ 73.699459][ T7168] veth1_macvtap: entered promiscuous mode [ 73.719595][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.726993][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.734533][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.737376][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.741163][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.744198][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.777009][ T6170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.779974][ T6170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.794892][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.798249][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.806243][ T40] audit: type=1400 audit(1758338510.078:1384): avc: denied { mounton } for pid=7168 comm="syz-executor" path="/syzkaller.wJd3ce/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.962291][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.328'. [ 73.968404][ T7298] ip_vti0: entered promiscuous mode [ 73.970577][ T7298] ip_vti0: entered allmulticast mode [ 74.012054][ T7306] trusted_key: encrypted_key: insufficient parameters specified [ 74.015508][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 74.018323][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 74.045353][ T40] audit: type=1400 audit(1758338510.318:1385): avc: denied { associate } for pid=7305 comm="syz.3.330" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.054564][ T40] audit: type=1400 audit(1758338510.318:1386): avc: denied { read } for pid=7305 comm="syz.3.330" name="file0" dev="9p" ino=71827875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.063152][ T40] audit: type=1400 audit(1758338510.328:1387): avc: denied { remove_name } for pid=7305 comm="syz.3.330" name="file0" dev="9p" ino=71827875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.072321][ T40] audit: type=1400 audit(1758338510.328:1388): avc: denied { unlink } for pid=7305 comm="syz.3.330" name="file0" dev="9p" ino=71827875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.220098][ T7310] netlink: 'syz.3.331': attribute type 22 has an invalid length. [ 74.223574][ T7310] netlink: 'syz.3.331': attribute type 19 has an invalid length. [ 74.226553][ T7310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'. [ 74.231635][ T7310] autofs: Unknown parameter './file1' [ 74.311738][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 74.387054][ T7320] vlan2: entered promiscuous mode [ 74.388811][ T7320] vlan2: entered allmulticast mode [ 74.390419][ T7320] hsr_slave_1: entered allmulticast mode [ 74.488651][ T7341] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.494640][ T7341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.339'. [ 74.611580][ T7355] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 74.616616][ T7355] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 74.683747][ T7367] overlayfs: missing 'lowerdir' [ 74.721059][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'. [ 74.728441][ T7375] xfrm1: entered promiscuous mode [ 74.730543][ T7375] xfrm1: entered allmulticast mode [ 74.739075][ T7377] veth0: entered promiscuous mode [ 74.741044][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 74.780193][ T7377] veth0 (unregistering): left promiscuous mode [ 74.824204][ T7379] bridge_slave_0: left allmulticast mode [ 74.826617][ T7379] bridge_slave_0: left promiscuous mode [ 74.830223][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.836813][ T7385] (syz.4.350,7385,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 74.841414][ T7385] netlink: 'syz.4.350': attribute type 10 has an invalid length. [ 74.842420][ T7379] bridge_slave_1: left allmulticast mode [ 74.848426][ T7379] bridge_slave_1: left promiscuous mode [ 74.850924][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.858760][ T7379] bond0: (slave bond_slave_0): Releasing backup interface [ 74.869270][ T7379] bond0: (slave bond_slave_1): Releasing backup interface [ 74.880450][ T7379] team0: Port device team_slave_0 removed [ 74.888907][ T7379] team0: Port device team_slave_1 removed [ 74.892918][ T7379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.896288][ T7379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.900266][ T7379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.904173][ T7379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.919852][ T7385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.925434][ T7385] team0: Port device bond0 added [ 74.942496][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.354'. [ 74.947646][ T7393] 9pnet_virtio: no channels available for device syz [ 75.102215][ T5972] Bluetooth: hci3: unexpected event for opcode 0x041b [ 75.205031][ T5972] Bluetooth: hci0: command tx timeout [ 75.521505][ T7415] netlink: 'syz.4.363': attribute type 1 has an invalid length. [ 75.554816][ T6537] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.570084][ T7419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.674773][ T6537] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.744577][ T6537] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.839215][ T7438] [U] Y [ 75.854322][ T6537] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.930218][ T7456] binder: BC_ACQUIRE_RESULT not supported [ 75.933106][ T7456] binder: 7455:7456 ioctl c0306201 2000000003c0 returned -22 [ 75.969183][ T6537] bridge_slave_1: left allmulticast mode [ 75.971254][ T6537] bridge_slave_1: left promiscuous mode [ 75.973160][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.977924][ T5975] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.981849][ T5975] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.982688][ T6537] bridge_slave_0: left allmulticast mode [ 75.985932][ T5975] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.987163][ T6537] bridge_slave_0: left promiscuous mode [ 75.990711][ T5975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.991768][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.995229][ T5975] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.260800][ T6537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.265396][ T6537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.268989][ T6537] bond0 (unregistering): Released all slaves [ 76.275627][ T7450] netlink: 'syz.1.375': attribute type 20 has an invalid length. [ 76.277098][ T6534] tipc: Resetting bearer [ 76.290926][ T6534] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.291074][ T7450] netlink: 'syz.1.375': attribute type 20 has an invalid length. [ 76.294336][ T6534] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.303505][ T6170] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.306835][ T6534] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.327863][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.330040][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.356941][ T6537] tipc: Disabling bearer [ 76.361600][ T6537] tipc: Disabling bearer [ 76.367099][ T6537] tipc: Left network mode [ 76.435922][ T7459] chnl_net:caif_netlink_parms(): no params data found [ 76.521504][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.524643][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.527452][ T7459] bridge_slave_0: entered allmulticast mode [ 76.531182][ T7459] bridge_slave_0: entered promiscuous mode [ 76.538338][ T7476] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 76.551102][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.555447][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.557751][ T7459] bridge_slave_1: entered allmulticast mode [ 76.560372][ T7459] bridge_slave_1: entered promiscuous mode [ 76.593004][ T7481] overlay: ./file0 is not a directory [ 76.622706][ T7459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.627181][ T7459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.638145][ T7488] kAFS: No cell specified [ 76.676611][ T6537] hsr_slave_0: left promiscuous mode [ 76.679024][ T6537] hsr_slave_1: left promiscuous mode [ 76.681120][ T6537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.684977][ T6537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.687908][ T6537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.690233][ T6537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.708819][ T6537] veth1_macvtap: left promiscuous mode [ 76.710834][ T6537] veth0_macvtap: left promiscuous mode [ 76.712726][ T6537] veth1_vlan: left promiscuous mode [ 76.714696][ T6537] veth0_vlan: left promiscuous mode [ 76.852965][ T7499] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.205772][ T6537] team0 (unregistering): Port device team_slave_1 removed [ 77.260999][ T6537] team0 (unregistering): Port device team_slave_0 removed [ 77.283980][ T5972] Bluetooth: hci0: command tx timeout [ 77.703999][ T7459] team0: Port device team_slave_0 added [ 77.706925][ T7497] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 77.714383][ T7459] team0: Port device team_slave_1 added [ 77.751995][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.755355][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.763720][ T7459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.771605][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.775540][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.784225][ T7459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.843554][ T7459] hsr_slave_0: entered promiscuous mode [ 77.845886][ T7459] hsr_slave_1: entered promiscuous mode [ 78.005121][ T5972] Bluetooth: hci1: command tx timeout [ 78.048779][ T7459] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.053548][ T7459] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.071129][ T7459] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.080579][ T7459] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.082221][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 78.082230][ T40] audit: type=1400 audit(1758341092.348:1415): avc: denied { setattr } for pid=7556 comm="syz.4.407" name="NETLINK" dev="sockfs" ino=16760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.151470][ T7459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.163044][ T7459] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.185714][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.188062][ T6514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.196305][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.198517][ T6514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.212673][ T40] audit: type=1400 audit(1758341092.468:1416): avc: denied { execstack } for pid=7581 comm="syz.0.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.221996][ T40] audit: type=1400 audit(1758341092.498:1417): avc: denied { listen } for pid=7585 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 78.241528][ T40] audit: type=1400 audit(1758341092.508:1418): avc: denied { write } for pid=7585 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.269097][ T7596] syz.4.417: attempt to access beyond end of device [ 78.269097][ T7596] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 78.273555][ T7596] gfs2: error -5 reading superblock [ 78.322188][ T7459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.408798][ T7611] mmap: syz.1.419 (7611) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.449479][ T7616] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 78.468560][ T7459] veth0_vlan: entered promiscuous mode [ 78.476282][ T7459] veth1_vlan: entered promiscuous mode [ 78.491544][ T7459] veth0_macvtap: entered promiscuous mode [ 78.495517][ T7459] veth1_macvtap: entered promiscuous mode [ 78.505124][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.516988][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.521923][ T1149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.525131][ T1149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.528003][ T1149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.530777][ T1149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.568041][ T6537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.570496][ T6537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.582446][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.585087][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.635329][ T7629] netlink: 'syz.1.424': attribute type 1 has an invalid length. [ 78.814982][ T6534] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 78.817966][ T6534] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 78.826800][ T40] audit: type=1400 audit(1758341093.098:1419): avc: denied { ioctl } for pid=7646 comm="syz.5.428" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 78.843426][ T839] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 78.860951][ T7650] sctp: [Deprecated]: syz.5.429 (pid 7650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.860951][ T7650] Use struct sctp_sack_info instead [ 78.868154][ T7651] sctp: [Deprecated]: syz.5.429 (pid 7651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.868154][ T7651] Use struct sctp_sack_info instead [ 78.902448][ T40] audit: type=1400 audit(1758341093.168:1420): avc: denied { map } for pid=7652 comm="syz.5.430" path="/dev/vsock" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.911875][ T40] audit: type=1400 audit(1758341093.168:1421): avc: denied { execute } for pid=7652 comm="syz.5.430" path="/dev/vsock" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.982580][ T7657] __nla_validate_parse: 13 callbacks suppressed [ 78.982616][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.5.433'. [ 79.045730][ T40] audit: type=1400 audit(1758341093.318:1422): avc: denied { write } for pid=7660 comm="syz.4.434" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.098062][ T40] audit: type=1400 audit(1758341093.368:1423): avc: denied { watch_mount } for pid=7672 comm="syz.5.437" path="/9" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.101231][ T7673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.109451][ T40] audit: type=1400 audit(1758341093.368:1424): avc: denied { mount } for pid=7672 comm="syz.5.437" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 79.203578][ T6052] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 79.252768][ T60] IPVS: starting estimator thread 0... [ 79.269845][ T7685] program syz.5.440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.327242][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 79.330135][ T7693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.353531][ T7686] IPVS: using max 42 ests per chain, 100800 per kthread [ 79.361482][ T7697] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 79.363378][ T5972] Bluetooth: hci0: command tx timeout [ 79.367167][ T7697] netlink: 136 bytes leftover after parsing attributes in process `syz.4.444'. [ 79.370929][ T7697] netlink: 'syz.4.444': attribute type 2 has an invalid length. [ 79.373592][ T7697] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 79.383193][ T7693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.457177][ T7701] netlink: 'syz.4.446': attribute type 6 has an invalid length. [ 79.460514][ T7701] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.446'. [ 79.493024][ T7703] overlayfs: failed to clone upperpath [ 79.497373][ T7635] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.500018][ T7635] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 79.507951][ T7635] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.509903][ T7635] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 79.558709][ T7635] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.560719][ T7635] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 79.587081][ T7635] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.588992][ T7635] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 79.633406][ T838] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 79.724550][ T7723] netlink: 48 bytes leftover after parsing attributes in process `syz.0.451'. [ 79.727876][ T7723] netlink: 60 bytes leftover after parsing attributes in process `syz.0.451'. [ 79.763448][ T6052] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 79.788648][ T7728] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 79.792465][ T7728] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 79.795178][ T838] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 79.798170][ T838] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 79.801369][ T838] usb 10-1: config 0 interface 0 has no altsetting 0 [ 79.805677][ T838] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.808594][ T838] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.811214][ T838] usb 10-1: Product: syz [ 79.812686][ T838] usb 10-1: Manufacturer: syz [ 79.814600][ T838] usb 10-1: SerialNumber: syz [ 79.818406][ T838] usb 10-1: config 0 descriptor?? [ 79.821276][ T838] hub 10-1:0.0: bad descriptor, ignoring hub [ 79.823303][ T838] hub 10-1:0.0: probe with driver hub failed with error -5 [ 79.828543][ T838] usb 10-1: selecting invalid altsetting 0 [ 80.022723][ T7699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.025795][ T7699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.133423][ T6052] usb 10-1: USB disconnect, device number 2 [ 80.440028][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 80.442969][ T7740] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 80.445645][ T7740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.449336][ T7740] input: syz1 as /devices/virtual/input/input6 [ 80.508300][ T7757] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000007 [ 80.518139][ T7759] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.522259][ T7759] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.558909][ T7757] tipc: Enabling of bearer rejected, failed to enable media [ 80.589015][ T7768] netlink: 5 bytes leftover after parsing attributes in process `syz.0.466'. [ 80.622233][ T7772] ucma_write: process 112 (syz.4.468) changed security contexts after opening file descriptor, this is not allowed. [ 80.627012][ T7772] openvswitch: netlink: Key type 7457 is out of range max 32 [ 80.998277][ T7804] syzkaller0: entered promiscuous mode [ 80.999989][ T7804] syzkaller0: entered allmulticast mode [ 81.263390][ T6052] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 81.425084][ T6052] usb 9-1: config 0 has no interfaces? [ 81.428762][ T6052] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 81.431663][ T6052] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.435220][ T6052] usb 9-1: Product: syz [ 81.436583][ T6052] usb 9-1: Manufacturer: syz [ 81.438082][ T6052] usb 9-1: SerialNumber: syz [ 81.442213][ T6052] usb 9-1: config 0 descriptor?? [ 81.517080][ T7823] 9pnet_fd: Insufficient options for proto=fd [ 81.564185][ T7825] overlay: ./file0 is not a directory [ 81.625701][ T7829] netlink: 'syz.5.485': attribute type 2 has an invalid length. [ 81.650830][ T6052] usb 9-1: USB disconnect, device number 2 [ 81.874130][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 81.877039][ T7843] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 81.879256][ T7843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.983342][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 82.242502][ T7848] binder: BINDER_SET_CONTEXT_MGR already set [ 82.244984][ T7848] binder: 7847:7848 ioctl 4018620d 200000000100 returned -16 [ 82.245652][ T7849] binder: BINDER_SET_CONTEXT_MGR already set [ 82.250123][ T7849] binder: 7847:7849 ioctl 4018620d 200000004a80 returned -16 [ 82.280265][ T7850] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 82.457175][ T7858] 9p: Unknown uid 00000000004294967295 [ 82.507960][ T7859] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 82.510629][ T7859] NCSI netlink: No device for ifindex 0 [ 82.514758][ T7859] netlink: 'syz.4.491': attribute type 8 has an invalid length. [ 82.654570][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 82.930009][ T7866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.932861][ T7866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.963423][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 82.973454][ T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 82.989650][ T7875] netlink: 'syz.4.496': attribute type 1 has an invalid length. [ 84.246922][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 84.246932][ T40] audit: type=1400 audit(1758341098.518:1446): avc: denied { setattr } for pid=7891 comm="syz.4.501" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.276930][ T7897] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=54 sclass=netlink_audit_socket pid=7897 comm=syz.0.503 [ 84.340949][ T7902] tipc: Enabling of bearer rejected, failed to enable media [ 84.348359][ T7902] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 84.641820][ T40] audit: type=1400 audit(1758341098.908:1447): avc: denied { mount } for pid=7908 comm="syz.0.508" name="/" dev="hugetlbfs" ino=19126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 84.672928][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 84.675466][ T24] usb 10-1: no configurations [ 84.676980][ T24] usb 10-1: can't read configurations, error -22 [ 84.747048][ T7920] usb usb8: usbfs: process 7920 (syz.5.510) did not claim interface 0 before use [ 84.751864][ T40] audit: type=1400 audit(1758341099.018:1448): avc: denied { create } for pid=7919 comm="syz.5.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.760100][ T40] audit: type=1400 audit(1758341099.018:1449): avc: denied { ioctl } for pid=7919 comm="syz.5.510" path="socket:[19678]" dev="sockfs" ino=19678 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.853359][ T60] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 84.861111][ T7925] lo speed is unknown, defaulting to 1000 [ 84.863059][ T7925] lo speed is unknown, defaulting to 1000 [ 84.867358][ T7925] lo speed is unknown, defaulting to 1000 [ 84.871587][ T7925] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.879559][ T7925] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 84.894230][ T7925] lo speed is unknown, defaulting to 1000 [ 84.897896][ T7925] lo speed is unknown, defaulting to 1000 [ 84.901465][ T7925] lo speed is unknown, defaulting to 1000 [ 84.907575][ T7925] lo speed is unknown, defaulting to 1000 [ 84.987706][ T7945] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.993566][ T60] usb 9-1: device descriptor read/64, error -71 [ 85.085754][ T7945] __nla_validate_parse: 2 callbacks suppressed [ 85.085769][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.517'. [ 85.092632][ T40] audit: type=1400 audit(1758341099.358:1450): avc: denied { ioctl } for pid=7943 comm="syz.1.517" path="socket:[16319]" dev="sockfs" ino=16319 ioctlcmd=0xae82 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 85.147044][ T7955] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.517'. [ 85.150187][ T7955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.517'. [ 85.263338][ T60] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 85.387498][ T7962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.522'. [ 85.394365][ T7962] netlink: 'syz.0.522': attribute type 10 has an invalid length. [ 85.397493][ T7962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.404889][ T60] usb 9-1: device descriptor read/64, error -71 [ 85.405274][ T7962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.413399][ T7962] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 85.477302][ T7966] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 85.524262][ T60] usb usb9-port1: attempt power cycle [ 85.816809][ T7943] block nbd1: shutting down sockets [ 85.873315][ T60] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 85.893984][ T60] usb 9-1: device descriptor read/8, error -71 [ 86.133356][ T60] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 86.213729][ T7994] netlink: 'syz.1.532': attribute type 15 has an invalid length. [ 86.216336][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.532'. [ 86.336279][ T60] usb 9-1: device descriptor read/8, error -71 [ 86.446025][ T60] usb usb9-port1: unable to enumerate USB device [ 86.933195][ T8005] netlink: 68 bytes leftover after parsing attributes in process `syz.0.537'. [ 86.945623][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.535'. [ 87.518357][ T8006] syz.5.535 (8006) used greatest stack depth: 17832 bytes left [ 87.662559][ T40] audit: type=1400 audit(1758341101.928:1451): avc: denied { read } for pid=8013 comm="syz.5.540" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 87.673130][ T40] audit: type=1400 audit(1758341101.938:1452): avc: denied { open } for pid=8013 comm="syz.5.540" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 87.866087][ T40] audit: type=1400 audit(1758341102.138:1453): avc: denied { ioctl } for pid=8013 comm="syz.5.540" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 88.406169][ T40] audit: type=1326 audit(1758341102.678:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8029 comm="syz.4.544" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73278ec29 code=0x7ffc0000 [ 88.413842][ T40] audit: type=1326 audit(1758341102.678:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8029 comm="syz.4.544" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73278ec29 code=0x7ffc0000 [ 88.685760][ T8044] [ 88.686971][ T8044] ============================= [ 88.688682][ T8044] WARNING: suspicious RCU usage [ 88.690218][ T8044] syzkaller #0 Not tainted [ 88.692336][ T8044] ----------------------------- [ 88.695258][ T8044] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 88.698038][ T8044] [ 88.698038][ T8044] other info that might help us debug this: [ 88.698038][ T8044] [ 88.701190][ T8044] [ 88.701190][ T8044] rcu_scheduler_active = 2, debug_locks = 1 [ 88.703736][ T8044] 1 lock held by syz.4.545/8044: [ 88.705367][ T8044] #0: ffffffff8e5c0c20 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x344/0x780 [ 88.709016][ T8044] [ 88.709016][ T8044] stack backtrace: [ 88.710873][ T8044] CPU: 0 UID: 0 PID: 8044 Comm: syz.4.545 Not tainted syzkaller #0 PREEMPT(full) [ 88.710887][ T8044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.710894][ T8044] Call Trace: [ 88.710898][ T8044] [ 88.710903][ T8044] dump_stack_lvl+0x16c/0x1f0 [ 88.710933][ T8044] lockdep_rcu_suspicious+0x166/0x260 [ 88.710954][ T8044] get_callchain_entry+0x278/0x3f0 [ 88.710967][ T8044] get_perf_callchain+0xdb/0x760 [ 88.710979][ T8044] ? __pfx_get_perf_callchain+0x10/0x10 [ 88.710996][ T8044] __bpf_get_stack+0x4f5/0xa10 [ 88.711009][ T8044] ? __pfx___bpf_get_stack+0x10/0x10 [ 88.711023][ T8044] bpf_get_stack+0x32/0x40 [ 88.711033][ T8044] bpf_get_stack_raw_tp+0x1dd/0x280 [ 88.711048][ T8044] bpf_prog_b8a90dd1efcc4ad9+0x46/0x4e [ 88.711059][ T8044] bpf_prog_test_run_syscall+0x3b0/0x780 [ 88.711075][ T8044] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 88.711089][ T8044] ? fput+0x9b/0xd0 [ 88.711111][ T8044] ? __bpf_prog_get+0x97/0x2a0 [ 88.711123][ T8044] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 88.711138][ T8044] __sys_bpf+0x1050/0x4de0 [ 88.711154][ T8044] ? __pfx___sys_bpf+0x10/0x10 [ 88.711170][ T8044] ? css_rstat_updated+0x1c2/0x510 [ 88.711188][ T8044] ? do_futex+0x122/0x350 [ 88.711207][ T8044] ? __pfx_do_futex+0x10/0x10 [ 88.711230][ T8044] ? exc_page_fault+0x5c/0xb0 [ 88.711249][ T8044] ? xfd_validate_state+0x61/0x180 [ 88.711269][ T8044] __x64_sys_bpf+0x78/0xc0 [ 88.711283][ T8044] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.711296][ T8044] do_syscall_64+0xcd/0x4e0 [ 88.711312][ T8044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.711324][ T8044] RIP: 0033:0x7fe73278ec29 [ 88.711333][ T8044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.711343][ T8044] RSP: 002b:00007fe7335ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.711353][ T8044] RAX: ffffffffffffffda RBX: 00007fe7329d6180 RCX: 00007fe73278ec29 [ 88.711360][ T8044] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 88.711366][ T8044] RBP: 00007fe732811e41 R08: 0000000000000000 R09: 0000000000000000 [ 88.711371][ T8044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.711377][ T8044] R13: 00007fe7329d6218 R14: 00007fe7329d6180 R15: 00007fff53d948a8 [ 88.711390][ T8044] [ 88.903808][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.546'. [ 91.694185][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! VM DIAGNOSIS: 03:22:05 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8564bf90 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc900042cf430 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3623076 R15=dffffc0000000000 RIP=ffffffff8564bfb7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe7335ea6c0 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002532a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff53d94db6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff53d94db6 00007fff53d94dbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe732812e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe732812e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe732812e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe732812e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe732812f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe732812fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7329a74a8 00007fe7329a74a0 00007fe7329a7498 00007fe7329a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe73350d100 00007fe7329a7460 00007fe7329a7478 00007fe7329a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7329a74b8 00007fe7329a74b0 00007fe7329a74a8 00007fe7329a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffff1102178aaa1 RBX=0000000000000001 RCX=ffffffff820759df RDX=ffff888055fe8000 RSI=ffffffff820759ec RDI=0000000000000001 RBP=ffff8880338a60c0 RSP=ffffc90004d1f608 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=00007fb520ca1000 R13=ffff88810bc55508 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff820759f8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f56e324f5c5 CR3=000000002532a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde298f996 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde298f996 00007ffde298f99c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e3212e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e3212e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e3212e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e3212e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e3212f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e3212fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e33a74a8 00007f56e33a74a0 00007f56e33a7498 00007f56e33a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e3f0d100 00007f56e33a7460 00007f56e33a7478 00007f56e33a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e33a74b8 00007f56e33a74b0 00007f56e33a74a8 00007f56e33a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff95e29268 RBX=ffff888046f52f30 RCX=000000005bb66a8f RDX=0000000000000000 RSI=ffff888046f52f58 RDI=ffff888046f52f58 RBP=0000000000000000 RSP=ffffc90003c2f628 R8 =0000000000080000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffff888046f52f58 R13=ffff888046f52440 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff8197b9ae RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fe73360b6c0 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555561079808 CR3=000000002532a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff53d94db6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff53d94db6 00007fff53d94dbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe732812e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe732812e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe732812e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe732812e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe732812f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe732812fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7329a74a8 00007fe7329a74a0 00007fe7329a7498 00007fe7329a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe73350d100 00007fe7329a7460 00007fe7329a7478 00007fe7329a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7329a74b8 00007fe7329a74b0 00007fe7329a74a8 00007fe7329a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffffff8e5c15a0 RCX=ffffc900000f8001 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc900000f7630 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000004 R11=000000000000830d R12=ffffffff816af8a4 R13=0000000000000202 R14=ffff88801daa4880 R15=ffffc900000f771c RIP=ffffffff8197d2ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555561079808 CR3=000000004f937000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000002fefcf8 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcca80f720 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcca80f8a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcca80f8a6 00007ffcca80f8ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb76412e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb76412e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb76412e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb76412e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb76412f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb76412fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000