last executing test programs: 5.245779473s ago: executing program 0 (id=206): r0 = socket(0x8, 0x4, 0x200) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$FUSE(r3, &(0x7f0000001d00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001900)=@updpolicy={0x2b8, 0x19, 0x0, 0x70bd2a, 0x25dfdbff, {{@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in6=@remote, 0x4e24, 0x8, 0x4e20, 0x400, 0xa, 0x20, 0x90, 0x5c, 0x0, r4}, {0x8, 0x4, 0x401, 0x5, 0x422e, 0xab, 0x6, 0x8000000000000001}, {0x6, 0x1ff, 0x8, 0x2}, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2}, [@algo_auth_trunc={0x147, 0x14, {{'sha512-generic\x00'}, 0x7d8, 0x0, "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"}}, @algo_crypt={0x78, 0x2, {{'adiantum(ecb(twofish),anubis-generic,blake2s-128)\x00'}, 0x180, "df77fb1eb8d418c591d17a4db386d25229a9bca9438fcf041dd4fa7df69bcd0132d4b46cb13bb8572373eeffca2523c4"}}, @extra_flags={0x8}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @mark={0xc, 0x15, {0x35075a, 0x1}}, @mark={0xc, 0x15, {0x35075b, 0x400000}}, @iptfs_pkt_size={0x8, 0x29, 0x83}, @iptfs_init_delay={0x8, 0x27, 0x101}, @proto={0x5, 0x19, 0x2b}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x1}, 0x890) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x7ff, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) ioctl$TUNSETIFF(r8, 0x40086610, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1c, 0x0, 0x0, 0x8000, 0x88}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x17, 0x10, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x1, 0x101c}, 0x0) sigaltstack(0x0, &(0x7f00000015c0)={0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1a, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x10, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x20, 0x29, 0x0, @multicast1, @loopback}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 5.110279975s ago: executing program 0 (id=209): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0xb11, 0x70bd28, 0x25dfd3ff}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x24040880) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0]) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x4, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1, 0xfffc, 0x0, 0x0, 0x89, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2a}}, "a815a23da43974ff"}}}}}, 0x0) creat(0x0, 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) 5.042786197s ago: executing program 0 (id=212): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r0, 0xc0106440, &(0x7f0000000600)={0x3, 0x8fa, &(0x7f0000000300)}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x2a, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[], 0x13) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r0, 0x20, &(0x7f0000000580)={&(0x7f0000000400)=""/80, 0x50, 0x0, &(0x7f0000000500)=""/126, 0x7e}}, 0x10) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@tracing={r4, 0x5e}}, 0x20) r6 = accept4$x25(r0, &(0x7f0000000080), &(0x7f0000000100)=0x12, 0x800) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000280)={r6, &(0x7f0000000140)='-\x00', 0x2140, &(0x7f0000000180)={@align=0x5, {0x8e84, 0xce63, 0x700000, 0x8}}, 0xae4, &(0x7f00000001c0), &(0x7f0000000240)=0x5}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {0x0, 0xee00}}, './tracefs\x00'}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, r8, &(0x7f0000000280)) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r11 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00') r12 = openat$binfmt(0xffffffffffffff9c, r11, 0x42, 0x1ff) close(r12) write$qrtrtun(r10, &(0x7f0000000080)="b840c1386d76d5e2d966f1a23f9f176b7182395d26641ab909911380691c38ff", 0x20) 4.930443011s ago: executing program 3 (id=213): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x400c80, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r2, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000200)={0x2, 0x0, 0x98, &(0x7f0000002340)={0x1000000000000, 0x24000, 0x1}}) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000002180)={r5, r0, 0x7}) 4.839902428s ago: executing program 3 (id=214): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x17, &(0x7f0000000080)=@gcm_256={{0x303}, '\x00', "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "71856135", 'N_3\t\x00\x00\x008'}, 0x38) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r4, @ANYBLOB="0e7a569b27c389051f2eb89d76f8e3d460c905a0ea57e1570c5d536d9a", @ANYRES8=r1], 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20004000) 4.79049728s ago: executing program 3 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdir(&(0x7f0000000000)='./bus\x00', 0x10) mount$overlay(0x7000000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) 4.787976795s ago: executing program 0 (id=216): getpid() sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="0100000000000000000017000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000303132e374776137383930313233893536373839fede0d357e06fd8f949163513a3f170201c9f4d4660adeaa31962edba632aeb87777a7ba0a"], 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) syz_usb_connect(0x4, 0x3d7, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4.730543992s ago: executing program 3 (id=217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x9) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x8, 0x0, 0x1a8, 0x80000000}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1001, 0x0, 0x4}}}}}}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000740)={0x2, 'veth0_virt_wifi\x00', {0x3}, 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x101000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg1\x00', 0x1}) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x10000, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000780)={0x1, 0x7, 0x76, &(0x7f0000000600)=""/118}) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) 3.789619891s ago: executing program 3 (id=223): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') preadv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0x0, 0xa3e) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000380)=""/131, 0x83) (async) timer_create(0x5, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f0000000000)) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, 0x0, 0x4000000) (rerun: 64) r5 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f0000000440)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x90) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x10001, 0x9, r5}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030009100000000000000000000000020001000000000000000002000000a0030005006c00000002004000e0000002000000000000000001001400030000000500180007021f0055bc7124b9e01861a0ff693124ce00e298d44bfc9591612be243f2f6ab9870000300060000000e0002"], 0x80}}, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async, rerun: 64) ptrace$peek(0x1, r5, &(0x7f0000000200)) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x1, 0x1, 0xe2ae, 0xb4e, 0x2, 0x8, 0x8, 0x3, 0x2006, 0x0, 0x23, 0xf8}}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) (async, rerun: 32) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) (async) r9 = socket$inet(0x2, 0x3, 0x2f) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) (rerun: 64) sendto$inet(r9, 0x0, 0x0, 0x24008800, &(0x7f0000000340)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0x6) syz_usb_disconnect(r0) socket(0x11, 0x2, 0xffff) 1.718884182s ago: executing program 0 (id=232): unshare(0x2a020480) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r4) exit(0xffff) (async) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x7, 0x0, 0x5f94, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000001000010027bd7000fbd9dfa500000000", @ANYRES32, @ANYBLOB="104e0600d5ba2259280012800900010076657468000000001800028014000100000000000206e9b43d"], 0x7c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x8000) ioctl$KVM_TDX_INIT_VCPU(r2, 0xc008aeba, 0x0) unshare(0x2c000000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r8, 0x301, 0x70bd2b, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x20008000) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x2, 0x0) 1.069918756s ago: executing program 1 (id=238): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r0, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x470f}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000540)={0xce, 0x0, r2}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r1, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="c264307c4b57c5aea04b28e2d591d44c269907b69938195c8fcd2d4b08aa406fb1784ee610bafc23ec56a049fc005f14a8b9ecea550d4d55252eaaa1fd96bbb4c46e948bfe7c2b8ace65b648e1e9a831c94e4213295d9db6dc7b4a434a7fb6bc55faec0131e3f80485a625b4f6887cf459597136a8e2368c98f1d7c56996b8c22f4150d9bd78a75b9686cfddef91af163e23b12732617bef95829829857499d3fc20c1990af2c13c92fa5b597ee1e7a4bd55820c5224293010481253af492e"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x1d, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7ff}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x96a}, @call={0x85, 0x0, 0x0, 0x1e}, @map_val={0x18, 0xa, 0x2, 0x0, r6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @generic={0x8, 0x2, 0x1, 0x4, 0x7}, @ldst={0x2, 0x1, 0x2, 0x7, 0x3, 0x50, 0x8}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r5, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setns(0xc9, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000133f5d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8, r8}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r8, r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000b00000000000000000085000000a50000009500000000000004"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r10, r10}, &(0x7f0000000600), &(0x7f0000000640)=r9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@setneightbl={0x2c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_THRESH2={0x8}]}, 0x2c}}, 0x0) 910.221281ms ago: executing program 1 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x204) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x40, 0x0, 0xe7}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x4a1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x40) 909.68291ms ago: executing program 1 (id=240): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xffffffff7fffffff) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x2000000068ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(0x0, 0x60142, 0x10) copy_file_range(0xffffffffffffffff, 0x0, r4, 0x0, 0x400000, 0x0) (async) landlock_restrict_self(r4, 0x16) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$SG_IO(r6, 0x5309, 0x0) (async) write(r5, &(0x7f0000000000)='3', 0x4e) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@loopback, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x6d42}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xe2}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd29, 0x0, 0x0, 0x1}}, @algo_auth={0x48, 0x1, {{'crc32\x00'}}}, @extra_flags={0x8, 0x18, 0x7}]}, 0x15c}}, 0x0) (async) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffe4) 827.065667ms ago: executing program 0 (id=242): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0xb}, 0x2, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000040), 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x487}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xe, [0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xe, 0x0, 0xfd], 0x80, [0x1, 0x2, 0xfffe, 0x1, 0x0, 0xffff, 0x0, 0x8, 0x2, 0xfffa, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x778, 0x3, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000]}}}}]}, 0x88}}, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000040)=[{0x20}, {0x6}]}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) 770.590703ms ago: executing program 2 (id=243): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0xb11, 0x70bd28, 0x25dfd3ff}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x24040880) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0]) mkdir(&(0x7f0000000000)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) 768.68093ms ago: executing program 3 (id=244): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08780c0856"], 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0xa, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x44004) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x20004000) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000200)="2abd09f90d00d589551407cd47716c95d9bfc291df42ca67fe85b8a109d56cad4de282382ae9b46cb362510456b8a914fa8f2ef56424c3897737d74dee0e1c029016306ac55d9a41815936b6526589e2c0209d0c2588d4d7212244dcb092c7ceef4cad80d572c65897deb9bde29927", 0x6f}, {&(0x7f00000002c0)="61dd2a1affa639b752d1f90000000000000000", 0x13}, {&(0x7f0000000900)="8e744e94e879bd2811315a3896e4e16eacb34bdf050fb2f2016348735ecc8243e30b1d2e4c5854472deadcaaf46f8d7e597ae8c91f75c01e188151d7f32ec1b164acfffa4d12adfe76f2bc612b7627673aff60c419f2df0919359506c3ec9a985b46f2a2051a423a2ce8713a6bd6375052fee24ce1bcffdd9b1c399a2109d1650a742c8965cfee1e30e541a32a6809ad66ec865c75a6f10bb4e2ffbcd58886257698bfd5fe428941e1e09fbe2d5146039789b4130ac40a59ddf6b03bb95b16a5e1e8515d670e375a61de426cfb2afa4fdc46560e7137903357b0734648ee31140354977c91099a2ec4f0aaba9bc60589e59e5213c4ca92a9f8701ca7355d112e6fd6e816b9c585007c78af5f2d2a3d1c71c82ca0669fdab2feac19e085901d3b3f3edd033f0826f26969cf6443598c4da0071a67bdfb27b7e0e6d611368ea0e9389eb95d57a9adb5452b355c4326a50fd4f3f238b59375e4d2633a10cf93945795b3f10a7ac3374498499f17d48e9a824745a3673aa20d33e4462131885338f83294b872606b5618b66840e59b26206826143fef27db81175502aac0fbe8da8de68506b3c27d2d3b2902d00a7189b67b1b2dda6eb5a93cbb824597e857e27056d7ea07604462e0cdd1354da7bf4acfb813404370633d19c1f988a5b99f050f3071b14dd24273f365313efca7b8679682626cbeff4610599c8cb9b5fe7ce6bd85688bfcc83b9a705e707fbdc45c8a39a3c72329fcbfe430fe1e25ea6122a5b996656336d31a698cc5c8aab385b963dc206d32ec257dd0c1f0144f2d754787617a0dedfdf6aeb874c261c1c39d45aa3f953828f4cacbf648dfb9c10e7e7f61f034842288dab273bc86162d9cd0f4b002410ae092f6192cb539a7e1bcfee356d17d8d6573efbf8fea3b1dc1f115a016d292731a5ed7e7218a6f9a084034135cd78514250f8d02d4d9f8091263d5372350158d464a20a5a1874771bf0893f60b2212c20dd0df88f8e368a3f37f03be8f33c254b936e81c43407bea0acf6eb091afda2d3fc9a840525b4aa63a2bd021a8b3751cf70ec378337ea74731fbd2303f8d0c1b2241bd41d0523a7d2b77e34fc3ea550e1d9e068c45f44d5420ba7620732f1b8c1980910bf63f92dc6092e68b1cf496dcbb71a70baa9de3753cf0fc73ea77df7504ae7d2f18ff85e0bf0ac83b4c1046185f00c1c141616c327e69f9fa56d9af6c203ead8f50f6c55769213ba9bd7e62fcb1c3ee798d26bb332f0d226112eb417fe7e4d2ff401f1ea3774500576fa47185a8cd30ebe646ca21f4d227a440ff0b312c77b58095d6cf9acf64835ab86cab78075ec52078b9ab5c43223369cb7ae5c87e51c4e3dde51f9110d7dc21908d6a5765740b82962bc8afc4240756f78865560d2b9754725cf6e42aef6b95d1f9d6ef6c2ff084c169b14c50fb27b8fc36", 0x3ff}], 0x3, 0x0, 0x0, 0x4008084}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r7 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000800000/0x800000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x278}}], 0x1, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0xb}, {0x0, 0x9}, {0x6, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x60}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x8}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x20040054) 710.68522ms ago: executing program 2 (id=245): setreuid(0xffffffffffffffff, 0xee00) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2a, 0x25dfdbff, {0x6c}}, 0x14}}, 0x0) 710.279287ms ago: executing program 1 (id=246): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x560f, &(0x7f00000002c0)={0xb}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x6480, 0x0) setns(0xc9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000040)={'dummy0\x00', @random="010000201000"}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) r4 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'geneve0\x00', 0x1}) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="00000805"], 0xb) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f00000002c0)={0x30, 0x0, 0x0, 0x0, 0x4, 0x8, 0x9, 0x0}) 586.406467ms ago: executing program 1 (id=247): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000300)='1\x00', 0x2) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x1, 0x31, "58b20da7e7e7076f7ac9eab8b7cf58d3e090e278c5e6284d17449d62c4bf184a0a5c9c62568e00dd642310712371c815d0"}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x20008104) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x12d) write(r4, &(0x7f0000000000)='3', 0x1) 430.626534ms ago: executing program 1 (id=248): r0 = open(0x0, 0x149800, 0x100) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x59d5}}}, 0xd) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x10000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000080)={r2}) 430.367379ms ago: executing program 2 (id=249): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) inotify_init1(0x800) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f00000001c0), 0xff, 0x2100) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 359.080514ms ago: executing program 2 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000040)={0x30, r1, 0x20, 0x70bd23, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c884}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x141000, 0x0) 353.91202ms ago: executing program 2 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000080)={0x8, 'vlan0\x00', {'pimreg0\x00'}, 0x9}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) r8 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0xfb}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) close_range(r8, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r6}, 0x94) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, 0x12214, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 0s ago: executing program 2 (id=252): r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="141b0000020201010000000000000f0003000800"], 0x14}, 0x1, 0x0, 0x0, 0x20060017}, 0x40) mkdirat(r0, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) link(&(0x7f0000000000)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = socket(0x10, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019200)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff03000020000000000b000000000000000400000000000000080000000000000088bc0000ff0f0000041000000000000005000000000000000500000000000000060000000000000003000000000000002e010000000000000700000008000000fafffff70040000000000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="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"], 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000019080)='./file1\x00', &(0x7f0000019100), 0x4a080, &(0x7f0000019140)={'trans=virtio,', {[{@nodevmap}, {@noxattr}, {@fscache}, {@cache_readahead}, {@version_9p2000}, {@access_user}, {@access_uid={'access', 0x3d, r7}}, {@debug={'debug', 0x3d, 0x4f}}, {@cache_mmap}, {@version_9p2000}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0}}], 0x1, 0x20040804) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:39604' (ED25519) to the list of known hosts. [ 40.128881][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 40.128896][ T43] audit: type=1400 audit(1790963307.186:138): avc: denied { name_bind } for pid=5719 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.160534][ T43] audit: type=1400 audit(1790963307.216:139): avc: denied { execute } for pid=5720 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.161113][ T43] audit: type=1400 audit(1790963307.216:140): avc: denied { execute_no_trans } for pid=5720 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.918498][ T43] audit: type=1400 audit(1790963309.976:141): avc: denied { mounton } for pid=5720 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.920455][ T43] audit: type=1400 audit(1790963309.976:142): avc: denied { mount } for pid=5720 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.924288][ T5720] cgroup: Unknown subsys name 'net' [ 42.926197][ T43] audit: type=1400 audit(1790963309.986:143): avc: denied { unmount } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.078297][ T5720] cgroup: Unknown subsys name 'cpuset' [ 43.082101][ T5720] cgroup: Unknown subsys name 'rlimit' [ 43.301227][ T43] audit: type=1400 audit(1790963310.356:144): avc: denied { setattr } for pid=5720 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.303468][ T43] audit: type=1400 audit(1790963310.356:145): avc: denied { create } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.303509][ T43] audit: type=1400 audit(1790963310.356:146): avc: denied { write } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.303541][ T43] audit: type=1400 audit(1790963310.356:147): avc: denied { read } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 43.368006][ T5725] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 44.125317][ T5720] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.773341][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 48.773358][ T43] audit: type=1400 audit(1790963315.826:158): avc: denied { execmem } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.958605][ T43] audit: type=1400 audit(1790963316.016:159): avc: denied { create } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.959693][ T43] audit: type=1400 audit(1790963316.016:160): avc: denied { read write } for pid=5731 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.961642][ T43] audit: type=1400 audit(1790963316.016:161): avc: denied { open } for pid=5731 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.971740][ T43] audit: type=1400 audit(1790963316.026:162): avc: denied { ioctl } for pid=5731 comm="syz-executor" path="socket:[1504]" dev="sockfs" ino=1504 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.017670][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 49.019239][ T5742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.019666][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.019815][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.020161][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 49.020487][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.021540][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.021662][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 49.021785][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.022087][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.022222][ T5742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.022418][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.023941][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 49.024144][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.024233][ T5742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.024505][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.024804][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.025596][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.025654][ T5742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.026433][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.033460][ T43] audit: type=1400 audit(1790963316.086:163): avc: denied { read } for pid=5738 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.033959][ T43] audit: type=1400 audit(1790963316.096:164): avc: denied { open } for pid=5738 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.037322][ T43] audit: type=1400 audit(1790963316.096:165): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.053882][ T43] audit: type=1400 audit(1790963316.106:166): avc: denied { module_request } for pid=5738 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 49.072867][ T43] audit: type=1400 audit(1790963316.126:167): avc: denied { sys_module } for pid=5732 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.599008][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.599201][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.599387][ T5732] bridge_slave_0: entered allmulticast mode [ 49.600375][ T5732] bridge_slave_0: entered promiscuous mode [ 49.615727][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.615835][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.615936][ T5732] bridge_slave_1: entered allmulticast mode [ 49.617256][ T5732] bridge_slave_1: entered promiscuous mode [ 49.690143][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.713150][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.762026][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.762247][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.762399][ T5731] bridge_slave_0: entered allmulticast mode [ 49.763210][ T5731] bridge_slave_0: entered promiscuous mode [ 49.765232][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.765304][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.765362][ T5731] bridge_slave_1: entered allmulticast mode [ 49.766151][ T5731] bridge_slave_1: entered promiscuous mode [ 49.768809][ T5732] team0: Port device team_slave_0 added [ 49.804423][ T5732] team0: Port device team_slave_1 added [ 49.821984][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.858567][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.902032][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.902115][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.902260][ T5733] bridge_slave_0: entered allmulticast mode [ 49.903954][ T5733] bridge_slave_0: entered promiscuous mode [ 49.921219][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.921242][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.921266][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.924387][ T5731] team0: Port device team_slave_0 added [ 49.938005][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.938078][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.938350][ T5733] bridge_slave_1: entered allmulticast mode [ 49.939683][ T5733] bridge_slave_1: entered promiscuous mode [ 49.942110][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.942123][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.942141][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.945046][ T5731] team0: Port device team_slave_1 added [ 50.032999][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.033081][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.033191][ T5738] bridge_slave_0: entered allmulticast mode [ 50.034578][ T5738] bridge_slave_0: entered promiscuous mode [ 50.036976][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.037051][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.037914][ T5738] bridge_slave_1: entered allmulticast mode [ 50.039826][ T5738] bridge_slave_1: entered promiscuous mode [ 50.044144][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.047778][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.048542][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.048561][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.048590][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.094259][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.094274][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.094300][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.108850][ T5733] team0: Port device team_slave_0 added [ 50.115247][ T5732] hsr_slave_0: entered promiscuous mode [ 50.116041][ T5732] hsr_slave_1: entered promiscuous mode [ 50.138070][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.140652][ T5733] team0: Port device team_slave_1 added [ 50.167699][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.168381][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.168399][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.168433][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.171086][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.171103][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.171128][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.235707][ T5738] team0: Port device team_slave_0 added [ 50.260852][ T5731] hsr_slave_0: entered promiscuous mode [ 50.261598][ T5731] hsr_slave_1: entered promiscuous mode [ 50.262147][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 50.262226][ T5731] Cannot create hsr debugfs directory [ 50.270867][ T5738] team0: Port device team_slave_1 added [ 50.317639][ T5733] hsr_slave_0: entered promiscuous mode [ 50.318455][ T5733] hsr_slave_1: entered promiscuous mode [ 50.319034][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 50.319053][ T5733] Cannot create hsr debugfs directory [ 50.375274][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.375291][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.375312][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.396920][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.396935][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.396957][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.567086][ T5738] hsr_slave_0: entered promiscuous mode [ 50.568827][ T5738] hsr_slave_1: entered promiscuous mode [ 50.569431][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 50.569449][ T5738] Cannot create hsr debugfs directory [ 50.779704][ T5732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.787285][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.788083][ T5732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.795247][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.816680][ T5732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.821427][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.822201][ T5732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.827002][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.875357][ T5731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.880667][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.881596][ T5731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.884600][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.885819][ T5731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.890547][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.891281][ T5731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.895155][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.002046][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.007413][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.008943][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.013150][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.016627][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.024165][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.027859][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.032651][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.104044][ T5091] Bluetooth: hci3: command tx timeout [ 51.104050][ T5735] Bluetooth: hci0: command tx timeout [ 51.104426][ T5091] Bluetooth: hci1: command tx timeout [ 51.104433][ T5735] Bluetooth: hci2: command tx timeout [ 51.128795][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.131206][ T5738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.135890][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.141015][ T5738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.145740][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.146510][ T5738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.149840][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.151615][ T5738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.156529][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.201686][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.235391][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.235599][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.243686][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.254411][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.254556][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.273613][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.293073][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.293161][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.319938][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.320029][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.341413][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.390353][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.406597][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.406670][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.410064][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.417087][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.417133][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.441546][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.458658][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.458751][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.463179][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.463395][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.658898][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.687889][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.700088][ T5732] veth0_vlan: entered promiscuous mode [ 51.716214][ T5732] veth1_vlan: entered promiscuous mode [ 51.751127][ T5731] veth0_vlan: entered promiscuous mode [ 51.762608][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.766076][ T5732] veth0_macvtap: entered promiscuous mode [ 51.768081][ T5731] veth1_vlan: entered promiscuous mode [ 51.778823][ T5732] veth1_macvtap: entered promiscuous mode [ 51.797905][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.807552][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.828417][ T5731] veth0_macvtap: entered promiscuous mode [ 51.831934][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.845835][ T5731] veth1_macvtap: entered promiscuous mode [ 51.862105][ T5733] veth0_vlan: entered promiscuous mode [ 51.892503][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.894115][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.894397][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.895977][ T5733] veth1_vlan: entered promiscuous mode [ 51.902774][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.944837][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.944857][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.993672][ T5738] veth0_vlan: entered promiscuous mode [ 51.995925][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.995943][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.996023][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.000882][ T5733] veth0_macvtap: entered promiscuous mode [ 52.005635][ T5738] veth1_vlan: entered promiscuous mode [ 52.019742][ T5733] veth1_macvtap: entered promiscuous mode [ 52.028119][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.028131][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.050582][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.063067][ T5732] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.079665][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.079813][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.079828][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.086301][ T5738] veth0_macvtap: entered promiscuous mode [ 52.099567][ T5738] veth1_macvtap: entered promiscuous mode [ 52.124664][ T5809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.124748][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.137446][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.160152][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.175081][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.175449][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.175668][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.175771][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.175801][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.175833][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.175858][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.210924][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.210937][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.245721][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.245759][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.245797][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.277433][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.277451][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.301256][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.301269][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.321879][ T5888] Invalid logical block size (4) [ 52.346074][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.346092][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.353790][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.414478][ T5891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=5891 comm=syz.0.6 [ 52.536305][ T5898] process 'syz.2.7' launched '/dev/fd/5' with NULL argv: empty string added [ 52.603976][ T5902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8'. [ 52.715731][ T5912] netlink: 'syz.1.12': attribute type 10 has an invalid length. [ 52.715795][ T5912] ipvlan0: entered allmulticast mode [ 52.715811][ T5912] veth0_vlan: entered allmulticast mode [ 52.723580][ T5912] team0: Device ipvlan0 failed to register rx_handler [ 52.798456][ T5918] warning: `syz.1.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.816971][ T5919] tmpfs: Bad value for 'huge' [ 52.841192][ T5921] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.189054][ T5735] Bluetooth: hci0: command tx timeout [ 53.189088][ T5735] Bluetooth: hci3: command tx timeout [ 53.189108][ T5735] Bluetooth: hci2: command tx timeout [ 53.622361][ T5919] syz.2.13 (5919): drop_caches: 2 [ 53.673409][ T2205] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.786724][ T5950] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.787746][ T43] kauditd_printk_skb: 93 callbacks suppressed [ 53.787761][ T43] audit: type=1400 audit(1790963320.846:261): avc: denied { ioctl } for pid=5947 comm="syz.0.22" path="socket:[9753]" dev="sockfs" ino=9753 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.833663][ T43] audit: type=1400 audit(1790963320.886:262): avc: denied { mount } for pid=5952 comm="syz.2.28" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 53.833691][ T43] audit: type=1400 audit(1790963320.886:263): avc: denied { mount } for pid=5952 comm="syz.2.28" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.833711][ T43] audit: type=1400 audit(1790963320.886:264): avc: denied { mounton } for pid=5951 comm="syz.0.27" path="/4/file0" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 53.836315][ T2205] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 53.841738][ T2205] usb 8-1: config index 0 descriptor too short (expected 47, got 46) [ 53.841764][ T2205] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.841797][ T2205] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 53.841828][ T2205] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.858984][ T5954] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 53.859100][ T5954] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 53.868017][ T43] audit: type=1400 audit(1790963320.926:265): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 53.877813][ T5954] CIFS: VFS: Error connecting to socket. Aborting operation. [ 53.877894][ T5954] CIFS: VFS: cifs_mount failed w/return code = -111 [ 53.886528][ T43] audit: type=1400 audit(1790963320.946:266): avc: denied { read } for pid=5955 comm="syz.1.29" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 53.887039][ T43] audit: type=1400 audit(1790963320.946:267): avc: denied { open } for pid=5955 comm="syz.1.29" path="/8/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 53.889685][ T43] audit: type=1400 audit(1790963320.946:268): avc: denied { ioctl } for pid=5955 comm="syz.1.29" path="/8/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 53.889798][ T5956] device-mapper: ioctl: name not supplied when creating device [ 53.977622][ T43] audit: type=1400 audit(1790963321.036:269): avc: denied { create } for pid=5967 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.998890][ T43] audit: type=1400 audit(1790963321.056:270): avc: denied { create } for pid=5967 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 54.016784][ T5968] lo speed is unknown, defaulting to 1000 [ 54.016832][ T5974] Bluetooth: MGMT ver 1.23 [ 54.017125][ T5968] lo speed is unknown, defaulting to 1000 [ 54.024547][ T5968] lo speed is unknown, defaulting to 1000 [ 54.026730][ T5968] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 54.026764][ T5968] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 54.026809][ T5968] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 54.032737][ T5968] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 54.059611][ T5968] lo speed is unknown, defaulting to 1000 [ 54.061623][ T5968] lo speed is unknown, defaulting to 1000 [ 54.069320][ T5968] lo speed is unknown, defaulting to 1000 [ 54.071411][ T5968] lo speed is unknown, defaulting to 1000 [ 54.371128][ T5980] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 54.393774][ T5735] Bluetooth: hci1: command tx timeout [ 55.264321][ T5735] Bluetooth: hci2: command tx timeout [ 55.264346][ T5735] Bluetooth: hci3: command tx timeout [ 55.264360][ T5735] Bluetooth: hci0: command tx timeout [ 55.601070][ T5997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 55.707946][ T6003] netlink: 'syz.1.39': attribute type 12 has an invalid length. [ 55.734118][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.734229][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.734261][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.734290][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.905490][ T2205] cxacru 8-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 55.906591][ T2205] cxacru 8-1:1.0: probe with driver cxacru failed with error -22 [ 56.046543][ T6008] SELinux: failed to load policy [ 56.064109][ T66] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 56.140842][ T6012] input: syz0 as /devices/virtual/input/input5 [ 56.424147][ T2205] usb 8-1: USB disconnect, device number 2 [ 56.466486][ T66] Bluetooth: hci1: command tx timeout [ 56.512837][ T6014] nvmet: adding nsid 1 to subsystem testsubsys [ 56.534809][ T6017] overlayfs: workdir and upperdir must reside under the same mount [ 56.546219][ T6017] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 56.701073][ T6023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 56.778909][ T6028] can0: slcan on ptm0. [ 56.801506][ T6027] overlayfs: missing 'lowerdir' [ 56.816974][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.817318][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.865832][ T6035] netlink: 168 bytes leftover after parsing attributes in process `syz.1.51'. [ 57.163642][ T2325] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.313825][ T2325] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 57.314797][ T2325] usb 6-1: config index 0 descriptor too short (expected 47, got 46) [ 57.314818][ T2325] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.314852][ T2325] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 57.314881][ T2325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.354030][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 57.354056][ T66] Bluetooth: hci3: command tx timeout [ 57.354069][ T66] Bluetooth: hci2: command tx timeout [ 57.633591][ T6051] ip_tables: iptables: counters copy to user failed while replacing table [ 57.704462][ T6051] Could not find key with description: [syznek_sig=syz] [ 57.704479][ T6051] process_request_key_err: No key [ 57.704486][ T6051] Could not find valid key in user session keyring for sig specified in mount option: [syznek_sig=syz] [ 57.704495][ T6051] One or more global auth toks could not properly register; rc = [-2] [ 57.704522][ T6051] Error validating options; rc = [-2] [ 57.704624][ T6052] Could not find key with description: [syznek_sig=syz] [ 57.704637][ T6052] process_request_key_err: No key [ 57.704645][ T6052] Could not find valid key in user session keyring for sig specified in mount option: [syznek_sig=syz] [ 57.704654][ T6052] One or more global auth toks could not properly register; rc = [-2] [ 57.704673][ T6052] Error validating options; rc = [-2] [ 57.853432][ T6063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.861904][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 58.908914][ T6088] SELinux: policydb version 0 does not match my version range 15-35 [ 58.908943][ T6088] SELinux: failed to load policy [ 58.955211][ T43] kauditd_printk_skb: 28029 callbacks suppressed [ 58.955231][ T43] audit: type=1400 audit(1790963326.016:28299): avc: denied { map } for pid=6089 comm="syz.0.67" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 58.956395][ T6090] binder: 6089:6090 ioctl c0205866 200000000dc0 returned -22 [ 58.956818][ T43] audit: type=1400 audit(1790963326.016:28300): avc: denied { create } for pid=6089 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.957559][ T43] audit: type=1400 audit(1790963326.016:28301): avc: denied { create } for pid=6089 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.958244][ T43] audit: type=1400 audit(1790963326.016:28302): avc: denied { setopt } for pid=6089 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.989784][ T6092] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 59.001945][ T5091] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 59.082460][ T43] audit: type=1400 audit(1790963326.136:28303): avc: denied { create } for pid=6095 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.083218][ T43] audit: type=1400 audit(1790963326.136:28304): avc: denied { setopt } for pid=6095 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.089605][ T43] audit: type=1400 audit(1790963326.146:28305): avc: denied { getopt } for pid=6095 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.089998][ T43] audit: type=1400 audit(1790963326.146:28306): avc: denied { ioctl } for pid=6095 comm="syz.2.70" path="socket:[9210]" dev="sockfs" ino=9210 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.185466][ T43] audit: type=1400 audit(1790963326.246:28307): avc: denied { bind } for pid=6101 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.187202][ T43] audit: type=1400 audit(1790963326.246:28308): avc: denied { write } for pid=6101 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.344838][ T6110] overlayfs: failed to resolve 'work': -2 [ 59.347139][ T2325] cxacru 6-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 59.347281][ T2325] cxacru 6-1:1.0: probe with driver cxacru failed with error -22 [ 59.553467][ T6117] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 59.837471][ T6027] can0 (unregistered): slcan off ptm0. [ 59.917847][ T5824] usb 6-1: USB disconnect, device number 2 [ 60.029408][ T6138] fuse: Unknown parameter '0000000000000000000000300000000000000000000003' [ 60.075356][ T6147] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 60.474160][ T5824] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.644554][ T5824] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 60.645455][ T5824] usb 5-1: config index 0 descriptor too short (expected 47, got 46) [ 60.645470][ T5824] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.645489][ T5824] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 60.645509][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.649144][ T6173] evm: overlay not supported [ 60.761678][ T6179] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 61.031087][ T6188] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 61.117118][ T6190] bridge0: port 3(syz_tun) entered blocking state [ 61.117216][ T6190] bridge0: port 3(syz_tun) entered disabled state [ 61.117418][ T6190] syz_tun: entered allmulticast mode [ 61.118856][ T6190] syz_tun: entered promiscuous mode [ 61.119580][ T6190] bridge0: port 3(syz_tun) entered blocking state [ 61.119787][ T6190] bridge0: port 3(syz_tun) entered forwarding state [ 61.137150][ T6192] FAULT_INJECTION: forcing a failure. [ 61.137150][ T6192] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.137181][ T6192] CPU: 2 UID: 0 PID: 6192 Comm: syz.1.103 Not tainted syzkaller #0 PREEMPT(full) [ 61.137202][ T6192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.137212][ T6192] Call Trace: [ 61.137219][ T6192] [ 61.137226][ T6192] dump_stack_lvl+0x100/0x190 [ 61.137284][ T6192] should_fail_ex.cold+0x5/0xa [ 61.137311][ T6192] strncpy_from_user+0x3b/0x2d0 [ 61.137345][ T6192] path_setxattrat+0x127/0x3b0 [ 61.137377][ T6192] ? __pfx_path_setxattrat+0x10/0x10 [ 61.137408][ T6192] ? ksys_write+0x190/0x250 [ 61.137430][ T6192] ? ksys_write+0x190/0x250 [ 61.137470][ T6192] ? xfd_validate_state+0x129/0x190 [ 61.137497][ T6192] __x64_sys_setxattr+0xc6/0x140 [ 61.137525][ T6192] ? do_syscall_64+0xae/0x790 [ 61.137553][ T6192] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.137574][ T6192] do_syscall_64+0x123/0x790 [ 61.137596][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.137618][ T6192] RIP: 0033:0x7f3129f9e159 [ 61.137634][ T6192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.137651][ T6192] RSP: 002b:00007f312ad83028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 61.137670][ T6192] RAX: ffffffffffffffda RBX: 00007f312a225fa0 RCX: 00007f3129f9e159 [ 61.137682][ T6192] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 61.137699][ T6192] RBP: 00007f312a03506b R08: 0000000000000003 R09: 0000000000000000 [ 61.137712][ T6192] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 61.137723][ T6192] R13: 00007f312a226038 R14: 00007f312a225fa0 R15: 00007fff5e1a3488 [ 61.137751][ T6192] [ 61.223569][ T6196] netlink: 'syz.1.106': attribute type 27 has an invalid length. [ 61.259668][ T6196] bond0: (slave bond_slave_1): Releasing backup interface [ 61.334691][ T30] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 61.596525][ T30] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 62.054211][ T6198] ceph: No mds server is up or the cluster is laggy [ 62.103084][ T6219] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.715657][ T5824] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 62.716897][ T5824] cxacru 5-1:1.0: probe with driver cxacru failed with error -22 [ 63.020525][ T6242] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.020549][ T6242] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.057051][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 63.079972][ T6242] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.080007][ T6242] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.171525][ T6242] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.171567][ T6242] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.238411][ T6242] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.238438][ T6242] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.239139][ T2325] usb 5-1: USB disconnect, device number 2 [ 63.316622][ T6247] Bluetooth: hci0: invalid length 0, exp 2 for type 26 [ 63.385572][ T5809] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.385608][ T5809] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.385640][ T5809] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.385660][ T5809] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.413482][ T5809] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.413514][ T5809] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.413545][ T5809] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.413567][ T5809] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.728432][ T6256] netlink: 'syz.0.118': attribute type 1 has an invalid length. [ 63.728453][ T6256] netlink: 224 bytes leftover after parsing attributes in process `syz.0.118'. [ 63.845077][ T6261] netlink: 'syz.0.119': attribute type 5 has an invalid length. [ 63.851393][ T6261] ip6erspan0: entered promiscuous mode [ 64.213370][ T5810] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.254002][ T43] kauditd_printk_skb: 51 callbacks suppressed [ 64.254019][ T43] audit: type=1400 audit(1790963331.316:28358): avc: denied { open } for pid=6267 comm="syz.0.121" path="/dev/ttyq5" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 64.263583][ T43] audit: type=1400 audit(1790963331.326:28359): avc: denied { watch } for pid=6269 comm="syz.2.122" path="/30" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.320067][ T6271] kvm [6269]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 64.320243][ T6271] kvm [6269]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 64.376309][ T5810] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 64.380267][ T5810] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9 [ 64.380296][ T5810] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 64.391254][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.391278][ T5810] usb 6-1: Product: syz [ 64.391290][ T5810] usb 6-1: Manufacturer: syz [ 64.391303][ T5810] usb 6-1: SerialNumber: syz [ 64.405364][ T6266] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 64.409123][ T5810] symbolserial 6-1:1.0: symbol converter detected [ 64.419331][ T5810] usb 6-1: symbol converter now attached to ttyUSB0 [ 64.434896][ T6279] Bluetooth: hci0: unsupported parameter 255 [ 64.434910][ T6279] Bluetooth: hci0: unsupported parameter 255 [ 64.471375][ T6281] Illegal XDP return value 4190425031 on prog (id 15) dev syz_tun, expect packet loss! [ 64.556698][ T6285] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 64.608419][ T43] audit: type=1400 audit(1790963331.666:28360): avc: denied { mounton } for pid=6265 comm="syz.1.120" path="/35/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 64.613109][ T43] audit: type=1400 audit(1790963331.666:28361): avc: denied { relabelfrom } for pid=6286 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.613150][ T43] audit: type=1400 audit(1790963331.666:28362): avc: denied { relabelto } for pid=6286 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.633012][ T2205] usb 6-1: USB disconnect, device number 3 [ 64.650424][ T2205] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 64.654563][ T2205] symbolserial 6-1:1.0: device disconnected [ 64.796394][ T43] audit: type=1400 audit(1790963331.856:28363): avc: denied { create } for pid=6288 comm="syz.0.129" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.798556][ T43] audit: type=1400 audit(1790963331.856:28364): avc: denied { setattr } for pid=6288 comm="syz.0.129" name="file0" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.208892][ T43] audit: type=1400 audit(1790963332.266:28365): avc: denied { create } for pid=6294 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 65.209833][ T43] audit: type=1400 audit(1790963332.266:28366): avc: denied { bind } for pid=6294 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 65.213061][ T43] audit: type=1400 audit(1790963332.266:28367): avc: denied { mounton } for pid=6294 comm="syz.1.131" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 65.213550][ T6295] 9pnet_virtio: no channels available for device ./cgroup [ 65.316371][ T6302] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 65.434360][ T6319] netlink: 'syz.2.138': attribute type 1 has an invalid length. [ 65.453162][ T6319] bond1: entered promiscuous mode [ 65.454614][ T6319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.470779][ T6319] ipvlan2: entered allmulticast mode [ 65.470799][ T6319] bond1: entered allmulticast mode [ 65.490247][ T6319] bond1: (slave bridge1): making interface the new active one [ 65.490268][ T6319] bridge1: entered promiscuous mode [ 65.490468][ T6319] bridge1: entered allmulticast mode [ 65.492473][ T6319] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 65.504688][ T6325] Bluetooth: hci0: unsupported parameter 255 [ 65.504701][ T6325] Bluetooth: hci0: unsupported parameter 255 [ 65.538134][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 65.541093][ T6330] netlink: 52 bytes leftover after parsing attributes in process `syz.2.141'. [ 65.550219][ T6330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=6330 comm=syz.2.141 [ 65.550307][ T6330] netlink: 52 bytes leftover after parsing attributes in process `syz.2.141'. [ 65.873410][ T5810] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.033361][ T5810] usb 7-1: Using ep0 maxpacket: 8 [ 66.033826][ T5810] usb 7-1: New USB device found, idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 66.034263][ T5810] usb 7-1: config 0 has no interfaces? [ 66.035809][ T5810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.035821][ T5810] usb 7-1: Product: syz [ 66.035828][ T5810] usb 7-1: Manufacturer: syz [ 66.035835][ T5810] usb 7-1: SerialNumber: syz [ 66.037367][ T5810] usb 7-1: config 0 descriptor?? [ 66.081802][ T6337] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 66.128790][ T6342] qnx4: unable to read the superblock [ 66.129758][ T6342] qnx4: unable to read the superblock [ 66.130484][ T6342] qnx4: unable to read the superblock [ 66.131167][ T6342] qnx4: unable to read the superblock [ 66.132089][ T6342] qnx4: unable to read the superblock [ 66.139474][ T6342] qnx4: unable to read the superblock [ 66.140400][ T6342] qnx4: unable to read the superblock [ 66.141238][ T6342] qnx4: unable to read the superblock [ 66.142175][ T6342] qnx4: unable to read the superblock [ 66.142993][ T6342] qnx4: unable to read the superblock [ 66.144005][ T6342] qnx4: unable to read the superblock [ 66.144963][ T6342] qnx4: unable to read the superblock [ 66.147288][ T6342] qnx4: unable to read the superblock [ 66.148116][ T6342] qnx4: unable to read the superblock [ 66.148908][ T6342] qnx4: unable to read the superblock [ 66.149717][ T6342] qnx4: unable to read the superblock [ 66.150513][ T6342] qnx4: unable to read the superblock [ 66.151376][ T6342] qnx4: unable to read the superblock [ 66.152160][ T6342] qnx4: unable to read the superblock [ 66.153993][ T6342] qnx4: unable to read the superblock [ 66.154811][ T6342] qnx4: unable to read the superblock [ 66.155618][ T6342] qnx4: unable to read the superblock [ 66.156374][ T6342] qnx4: unable to read the superblock [ 66.157221][ T6342] qnx4: unable to read the superblock [ 66.158028][ T6342] qnx4: unable to read the superblock [ 66.158886][ T6342] qnx4: unable to read the superblock [ 66.159726][ T6342] qnx4: unable to read the superblock [ 66.160515][ T6342] qnx4: unable to read the superblock [ 66.162424][ T6342] qnx4: unable to read the superblock [ 66.163809][ T6342] qnx4: unable to read the superblock [ 66.164832][ T6342] qnx4: unable to read the superblock [ 66.166057][ T6342] qnx4: unable to read the superblock [ 66.166948][ T6342] qnx4: unable to read the superblock [ 66.167768][ T6342] qnx4: unable to read the superblock [ 66.169111][ T6342] qnx4: unable to read the superblock [ 66.169920][ T6342] qnx4: unable to read the superblock [ 66.170763][ T6342] qnx4: unable to read the superblock [ 66.171552][ T6342] qnx4: unable to read the superblock [ 66.172389][ T6342] qnx4: unable to read the superblock [ 66.173208][ T6342] qnx4: unable to read the superblock [ 66.175508][ T6342] qnx4: unable to read the superblock [ 66.177113][ T6342] qnx4: unable to read the superblock [ 66.177833][ T6342] qnx4: unable to read the superblock [ 66.178280][ T6342] qnx4: unable to read the superblock [ 66.178791][ T6342] qnx4: unable to read the superblock [ 66.179228][ T6342] qnx4: unable to read the superblock [ 66.179800][ T6342] qnx4: unable to read the superblock [ 66.180249][ T6342] qnx4: unable to read the superblock [ 66.182847][ T6342] qnx4: unable to read the superblock [ 66.183874][ T6342] qnx4: unable to read the superblock [ 66.184744][ T6342] qnx4: unable to read the superblock [ 66.185596][ T6342] qnx4: unable to read the superblock [ 66.186308][ T6342] qnx4: unable to read the superblock [ 66.187068][ T6342] qnx4: unable to read the superblock [ 66.187896][ T6342] qnx4: unable to read the superblock [ 66.188824][ T6342] qnx4: unable to read the superblock [ 66.190864][ T6342] qnx4: unable to read the superblock [ 66.191907][ T6342] qnx4: unable to read the superblock [ 66.193428][ T6342] qnx4: unable to read the superblock [ 66.194297][ T6342] qnx4: unable to read the superblock [ 66.195153][ T6342] qnx4: unable to read the superblock [ 66.195904][ T6342] qnx4: unable to read the superblock [ 66.196685][ T6342] qnx4: unable to read the superblock [ 66.197581][ T6342] qnx4: unable to read the superblock [ 66.198435][ T6342] qnx4: unable to read the superblock [ 66.268445][ T5810] usb 7-1: USB disconnect, device number 2 [ 66.510962][ T6349] (syz.0.147,6349,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 66.510991][ T6349] (syz.0.147,6349,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 66.889261][ T1349] hid-generic 0005:16C0:05DF.0002: unknown main item tag 0x0 [ 66.902820][ T1349] hid-generic 0005:16C0:05DF.0002: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 66.940624][ T6371] ip6t_hbh: Not strict - not implemented [ 66.953218][ T6371] vlan1: entered promiscuous mode [ 66.953563][ T6371] vlan1: entered allmulticast mode [ 66.953577][ T6371] veth0_vlan: entered allmulticast mode [ 67.025129][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'. [ 67.071612][ T6384] netlink: 48 bytes leftover after parsing attributes in process `syz.1.159'. [ 67.078276][ T6382] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 67.196557][ T5091] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 67.201584][ T6382] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 67.201623][ T6382] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.213343][ T6382] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.217898][ T6382] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 67.217975][ T6382] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.219946][ T6382] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.221704][ T6382] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 67.221774][ T6382] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.225977][ T6382] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.231113][ T6382] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 67.231300][ T6382] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.267540][ T6382] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.416222][ T6407] syzkaller0: entered promiscuous mode [ 67.416237][ T6407] syzkaller0: entered allmulticast mode [ 67.528303][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 67.544410][ T6412] ovs_dp0: entered promiscuous mode [ 67.579135][ T66] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 67.590251][ T6415] netlink: 'syz.0.171': attribute type 1 has an invalid length. [ 67.630581][ T6415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.636547][ T6415] bond1: (slave bond2): making interface the new active one [ 67.637116][ T6415] bond1: (slave bond2): Enslaving as an active interface with an up link [ 67.645495][ T6415] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 67.645518][ T6415] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.649098][ T6415] vhci_hcd vhci_hcd.0: Device attached [ 67.649791][ T6419] vhci_hcd: connection closed [ 67.652718][ T13] vhci_hcd vhci_hcd.0: stop threads [ 67.652998][ T13] vhci_hcd vhci_hcd.0: release socket [ 67.653022][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 68.355484][ T66] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 68.409008][ T66] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 68.409275][ T66] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 68.410895][ T66] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 68.972368][ T6440] netlink: 44 bytes leftover after parsing attributes in process `syz.0.178'. [ 69.035825][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.179'. [ 69.036393][ T6446] netlink: 'syz.0.179': attribute type 10 has an invalid length. [ 69.036880][ T6446] syz_tun: entered promiscuous mode [ 69.040406][ T6446] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 69.047396][ T6446] syzkaller0: entered promiscuous mode [ 69.047413][ T6446] syzkaller0: entered allmulticast mode [ 69.264180][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.264234][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 69.264234][ T5091] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.265841][ T6382] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 69.278673][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 69.278690][ T43] audit: type=1400 audit(1790963336.336:28386): avc: denied { setopt } for pid=6447 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.305155][ T6448] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 69.305697][ T6448] batman_adv: batadv0: Adding interface: gretap1 [ 69.305710][ T6448] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.305738][ T6448] batman_adv: batadv0: Interface activated: gretap1 [ 69.376164][ T6453] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 69.422888][ T6458] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 69.427374][ T43] audit: type=1326 audit(1790963336.486:28387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3129f9e159 code=0x7ffc0000 [ 69.428247][ T43] audit: type=1326 audit(1790963336.486:28388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3129f9e159 code=0x7ffc0000 [ 69.433479][ T43] audit: type=1326 audit(1790963336.496:28389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3129f9e159 code=0x7ffc0000 [ 69.455312][ T43] audit: type=1326 audit(1790963336.516:28390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3129f9e159 code=0x7ffc0000 [ 69.455448][ T43] audit: type=1326 audit(1790963336.516:28391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3129f9e159 code=0x7ffc0000 [ 69.456538][ T43] audit: type=1326 audit(1790963336.516:28392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3129f9e159 code=0x7ffc0000 [ 69.457237][ T43] audit: type=1326 audit(1790963336.516:28393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3129f9e159 code=0x7ffc0000 [ 69.457263][ T43] audit: type=1326 audit(1790963336.516:28394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.185" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3129f9e159 code=0x7ffc0000 [ 69.457283][ T43] audit: type=1326 audit(1790963336.516:28395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.1.185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3129f9e159 code=0x7ffc0000 [ 69.507363][ T6466] tmpfs: Unknown parameter 'ioode3²' [ 69.512144][ T6466] serial 00:04: in use; can't configure [ 69.513534][ T6466] capability: warning: `syz.3.186' uses deprecated v2 capabilities in a way that may be insecure [ 69.521181][ T6464] can0: slcan on pts0. [ 69.553332][ T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.575150][ T6464] can0 (unregistered): slcan off pts0. [ 69.580157][ T6468] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.700321][ T6472] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 69.706487][ T50] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 69.711271][ T50] usb 7-1: config index 0 descriptor too short (expected 47, got 46) [ 69.711294][ T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.711327][ T50] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 69.711352][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.859996][ T6478] syzkaller0: entered promiscuous mode [ 69.860018][ T6478] syzkaller0: entered allmulticast mode [ 69.873573][ T66] Bluetooth: hci0: SCO packet too small [ 69.993318][ T6493] FAULT_INJECTION: forcing a failure. [ 69.993318][ T6493] name failslab, interval 1, probability 0, space 0, times 1 [ 69.993339][ T6493] CPU: 2 UID: 0 PID: 6493 Comm: syz.0.197 Not tainted syzkaller #0 PREEMPT(full) [ 69.993365][ T6493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.993372][ T6493] Call Trace: [ 69.993377][ T6493] [ 69.993381][ T6493] dump_stack_lvl+0x100/0x190 [ 69.993412][ T6493] should_fail_ex.cold+0x5/0xa [ 69.993429][ T6493] should_failslab+0xc2/0x120 [ 69.993448][ T6493] __kmalloc_node_noprof+0xff/0x880 [ 69.993461][ T6493] ? lockdep_init_map_type+0x5c/0x250 [ 69.993474][ T6493] ? blk_mq_alloc_tag_set+0x477/0x1330 [ 69.993493][ T6493] blk_mq_alloc_tag_set+0x477/0x1330 [ 69.993509][ T6493] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.993525][ T6493] ? idr_alloc+0xdd/0x130 [ 69.993537][ T6493] ? __pfx_idr_alloc+0x10/0x10 [ 69.993552][ T6493] loop_add+0x3b7/0xb60 [ 69.993565][ T6493] ? __pfx_loop_add+0x10/0x10 [ 69.993584][ T6493] ? __fget_files+0x34/0x3d0 [ 69.993608][ T6493] loop_control_ioctl+0xae/0x620 [ 69.993622][ T6493] ? __pfx_loop_control_ioctl+0x10/0x10 [ 69.993636][ T6493] ? selinux_file_ioctl+0x13b/0x290 [ 69.993652][ T6493] ? selinux_file_ioctl+0xb6/0x290 [ 69.993667][ T6493] ? __pfx_loop_control_ioctl+0x10/0x10 [ 69.993680][ T6493] __x64_sys_ioctl+0x18e/0x210 [ 69.993695][ T6493] do_syscall_64+0x123/0x790 [ 69.993708][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.993721][ T6493] RIP: 0033:0x7ffad539e159 [ 69.993730][ T6493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.993741][ T6493] RSP: 002b:00007ffad61c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.993752][ T6493] RAX: ffffffffffffffda RBX: 00007ffad5625fa0 RCX: 00007ffad539e159 [ 69.993759][ T6493] RDX: 00000000070002a0 RSI: 0000000000004c80 RDI: 0000000000000004 [ 69.993765][ T6493] RBP: 00007ffad543506b R08: 0000000000000000 R09: 0000000000000000 [ 69.993771][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.993778][ T6493] R13: 00007ffad5626038 R14: 00007ffad5625fa0 R15: 00007ffe48cc2f78 [ 69.993791][ T6493] [ 69.995906][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.197'. [ 69.999834][ T6492] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 69.999947][ T6492] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 70.126304][ T6501] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 70.290540][ T6505] netlink: 'syz.3.202': attribute type 4 has an invalid length. [ 70.390852][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 70.546665][ T6510] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 70.546705][ T6511] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 70.546996][ T6510] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 70.549041][ T6520] netlink: 36 bytes leftover after parsing attributes in process `syz.1.203'. [ 70.593141][ T6524] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks [ 70.593159][ T6524] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 70.671381][ T6529] /dev/sg0: Can't lookup blockdev [ 70.674707][ T6532] /dev/sg0: Can't lookup blockdev [ 70.713079][ T6534] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 70.825141][ T6540] xt_hashlimit: size too large, truncated to 1048576 [ 70.873367][ T50] cxacru 7-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 70.873514][ T50] cxacru 7-1:1.0: probe with driver cxacru failed with error -22 [ 70.892566][ T50] usb 7-1: USB disconnect, device number 3 [ 71.140052][ T6554] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.141944][ T6554] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.343434][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.343521][ T5735] Bluetooth: hci0: command 0x0419 tx timeout [ 71.343561][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.427726][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.427765][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.478024][ T6560] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 71.478052][ T6560] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 71.478074][ T6560] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 71.478099][ T6560] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 71.478130][ T6560] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 71.478157][ T6560] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 71.478183][ T6560] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 71.478209][ T6560] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 71.914722][ T6576] ======================================================= [ 71.914722][ T6576] WARNING: The mand mount option has been deprecated and [ 71.914722][ T6576] and is ignored by this kernel. Remove the mand [ 71.914722][ T6576] option from the mount to silence this warning. [ 71.914722][ T6576] ======================================================= [ 72.030533][ T6581] raw_sendmsg: syz.3.223 forgot to set AF_INET. Fix it! [ 72.445103][ T6615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.228'. [ 72.493851][ T50] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.654119][ T50] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 72.655024][ T50] usb 6-1: config index 0 descriptor too short (expected 47, got 46) [ 72.655041][ T50] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.655068][ T50] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 72.655093][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.240071][ T6649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5648 sclass=netlink_route_socket pid=6649 comm=syz.2.229 [ 73.424450][ T5735] Bluetooth: hci0: command 0x0419 tx timeout [ 73.424474][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.424532][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.822011][ T50] cxacru 6-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 73.822097][ T50] cxacru 6-1:1.0: probe with driver cxacru failed with error -22 [ 73.834140][ T50] usb 6-1: USB disconnect, device number 4 [ 74.581625][ T6691] overlayfs: upper fs does not support file handles, falling back to index=off. [ 74.581641][ T6691] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 74.626499][ T43] kauditd_printk_skb: 70 callbacks suppressed [ 74.626516][ T43] audit: type=1400 audit(1790963341.686:28464): avc: denied { nlmsg_read } for pid=6694 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 74.914241][ T43] audit: type=1400 audit(1790963341.976:28465): avc: denied { write } for pid=6703 comm="syz.1.240" name="sda" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.914506][ T6704] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 74.943021][ T6710] jffs2: notice: (6710) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 74.955387][ T43] audit: type=1400 audit(1790963342.006:28466): avc: denied { setattr } for pid=6709 comm="syz.0.242" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.010452][ T6716] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.026755][ T66] Bluetooth: hci1: unexpected event for opcode 0x080c [ 75.041134][ T6706] FAULT_INJECTION: forcing a failure. [ 75.041134][ T6706] name fail_futex, interval 1, probability 0, space 0, times 1 [ 75.041154][ T6706] CPU: 0 UID: 0 PID: 6706 Comm: syz.1.240 Not tainted syzkaller #0 PREEMPT(full) [ 75.041169][ T6706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.041175][ T6706] Call Trace: [ 75.041180][ T6706] [ 75.041184][ T6706] dump_stack_lvl+0x100/0x190 [ 75.041213][ T6706] should_fail_ex.cold+0x5/0xa [ 75.041229][ T6706] get_futex_key+0xf72/0x14f0 [ 75.041246][ T6706] ? __pfx_get_futex_key+0x10/0x10 [ 75.041262][ T6706] ? __mutex_unlock_slowpath+0x35d/0x930 [ 75.041281][ T6706] futex_wake+0xf4/0x5e0 [ 75.041294][ T6706] ? __pfx_futex_wake+0x10/0x10 [ 75.041307][ T6706] ? lock_acquire+0x1d1/0x380 [ 75.041319][ T6706] ? detach_task_ctx_data+0x83/0x490 [ 75.041342][ T6706] do_futex+0x2b2/0x440 [ 75.041358][ T6706] ? __pfx_do_futex+0x10/0x10 [ 75.041373][ T6706] ? __might_fault+0xc5/0x140 [ 75.041387][ T6706] mm_exit_exec_release+0x256/0x2f0 [ 75.041401][ T6706] do_exit+0x707/0x2a50 [ 75.041418][ T6706] ? __pfx_do_exit+0x10/0x10 [ 75.041432][ T6706] ? do_raw_spin_lock+0x128/0x260 [ 75.041447][ T6706] ? find_held_lock+0x2b/0x80 [ 75.041464][ T6706] ? get_signal+0x7e0/0x21e0 [ 75.041483][ T6706] do_group_exit+0xd5/0x2a0 [ 75.041505][ T6706] get_signal+0x1ec7/0x21e0 [ 75.041530][ T6706] ? putname+0xb1/0x110 [ 75.041557][ T6706] ? __pfx_get_signal+0x10/0x10 [ 75.041578][ T6706] ? do_futex+0x190/0x440 [ 75.041596][ T6706] arch_do_signal_or_restart+0x91/0x7e0 [ 75.041614][ T6706] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 75.041634][ T6706] ? __x64_sys_openat+0x12d/0x210 [ 75.041658][ T6706] exit_to_user_mode_loop+0x139/0x700 [ 75.041673][ T6706] ? rcu_is_watching+0x13/0xc0 [ 75.041689][ T6706] do_syscall_64+0x661/0x790 [ 75.041702][ T6706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.041714][ T6706] RIP: 0033:0x7f3129f9e159 [ 75.041724][ T6706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.041734][ T6706] RSP: 002b:00007f31281d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 75.041745][ T6706] RAX: fffffffffffffe00 RBX: 00007f312a226188 RCX: 00007f3129f9e159 [ 75.041752][ T6706] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f312a226188 [ 75.041759][ T6706] RBP: 00007f312a226180 R08: 0000000000000000 R09: 0000000000000000 [ 75.041768][ T6706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.041777][ T6706] R13: 00007f312a226218 R14: 00007fff5e1a33a0 R15: 00007fff5e1a3488 [ 75.041799][ T6706] [ 75.059580][ T43] audit: type=1400 audit(1790963342.116:28467): avc: denied { create } for pid=6717 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.060340][ T43] audit: type=1400 audit(1790963342.116:28468): avc: denied { connect } for pid=6717 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.060822][ T43] audit: type=1400 audit(1790963342.116:28469): avc: denied { setopt } for pid=6717 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.075714][ T43] audit: type=1400 audit(1790963342.136:28470): avc: denied { write } for pid=6709 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.105410][ T43] audit: type=1400 audit(1790963342.166:28471): avc: denied { append } for pid=6721 comm="syz.1.246" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.124546][ T43] audit: type=1400 audit(1790963342.186:28472): avc: denied { bind } for pid=6717 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.130713][ T43] audit: type=1400 audit(1790963342.186:28473): avc: denied { write } for pid=6717 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.280366][ T6718] Zero length message leads to an empty skb [ 75.513384][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 75.804451][ T6749] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 75.805622][ T6749] bond3 (unregistering): Released all slaves [ 75.833914][ T5731] ------------[ cut here ]------------ [ 75.833924][ T5731] kernel BUG at fs/jffs2/nodelist.c:462! [ 75.833937][ T5731] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 75.834664][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 75.834682][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'. [ 75.847280][ T5731] CPU: 3 UID: 0 PID: 5731 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 75.850164][ T5731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.853269][ T5731] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 75.855178][ T5731] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 f2 73 81 fe 90 <0f> 0b e8 aa de f4 fe e9 5b fe ff ff e8 70 de f4 fe e9 59 ff ff ff [ 75.861310][ T5731] RSP: 0018:ffffc900039b7a98 EFLAGS: 00010293 [ 75.863296][ T5731] RAX: 0000000000000000 RBX: ffff888038e42000 RCX: 0000000000000000 [ 75.865839][ T5731] RDX: ffff888036abcb00 RSI: ffffffff838ad45e RDI: ffff88803566fee0 [ 75.868347][ T5731] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed10071c846c [ 75.870914][ T5731] R10: ffff888038e42363 R11: 0000000000000000 R12: ffff88803accbc80 [ 75.874132][ T5731] R13: dffffc0000000000 R14: ffff88803566fec0 R15: ffff88803accbd30 [ 75.877097][ T5731] FS: 0000555569beb500(0000) GS:ffff8880d5e4f000(0000) knlGS:0000000000000000 [ 75.879910][ T5731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.882002][ T5731] CR2: 000000110c3b509b CR3: 000000004f6a9000 CR4: 0000000000352ef0 [ 75.884545][ T5731] Call Trace: [ 75.885633][ T5731] [ 75.886603][ T5731] jffs2_do_clear_inode+0x3ca/0x470 [ 75.888271][ T5731] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 75.889980][ T5731] evict+0x3c2/0xad0 [ 75.891241][ T5731] ? list_lru_del+0xba/0x2f0 [ 75.892709][ T5731] ? list_lru_del+0xba/0x2f0 [ 75.894179][ T5731] ? __pfx_evict+0x10/0x10 [ 75.895615][ T5731] ? do_raw_spin_unlock+0x145/0x1e0 [ 75.897265][ T5731] ? find_held_lock+0x2b/0x80 [ 75.898840][ T5731] ? find_held_lock+0x2b/0x80 [ 75.900335][ T5731] dispose_list+0x117/0x1e0 [ 75.901780][ T5731] evict_inodes+0x473/0x710 [ 75.903238][ T5731] ? __pfx_evict_inodes+0x10/0x10 [ 75.904834][ T5731] ? sync_blockdev+0x51/0x70 [ 75.906306][ T5731] generic_shutdown_super+0xc8/0x360 [ 75.907994][ T5731] kill_mtd_super+0x1d/0x80 [ 75.909439][ T5731] jffs2_kill_sb+0x7c/0xb0 [ 75.910859][ T5731] deactivate_locked_super+0xbd/0x130 [ 75.912548][ T5731] deactivate_super+0xea/0x110 [ 75.914062][ T5731] cleanup_mnt+0x21f/0x450 [ 75.915505][ T5731] task_work_run+0x150/0x240 [ 75.916979][ T5731] ? __pfx_task_work_run+0x10/0x10 [ 75.918737][ T5731] exit_to_user_mode_loop+0x1d8/0x700 [ 75.920446][ T5731] ? rcu_is_watching+0x13/0xc0 [ 75.921964][ T5731] do_syscall_64+0x661/0x790 [ 75.923461][ T5731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.925325][ T5731] RIP: 0033:0x7ffad539f397 [ 75.926772][ T5731] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 75.932745][ T5731] RSP: 002b:00007ffe48cc21e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 75.935365][ T5731] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ffad539f397 [ 75.937835][ T5731] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe48cc22a0 [ 75.940343][ T5731] RBP: 00007ffe48cc22a0 R08: 00007ffe48cc32a0 R09: 00000000ffffffff [ 75.942819][ T5731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe48cc3330 [ 75.945285][ T5731] R13: 00007ffad54344bb R14: 000000000001276a R15: 00007ffe48cc3370 [ 75.947769][ T5731] [ 75.948785][ T5731] Modules linked in: [ 75.950324][ T5731] ---[ end trace 0000000000000000 ]--- [ 75.952676][ T5731] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 75.952711][ T5731] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 f2 73 81 fe 90 <0f> 0b e8 aa de f4 fe e9 5b fe ff ff e8 70 de f4 fe e9 59 ff ff ff [ 75.952727][ T5731] RSP: 0018:ffffc900039b7a98 EFLAGS: 00010293 [ 75.952742][ T5731] RAX: 0000000000000000 RBX: ffff888038e42000 RCX: 0000000000000000 [ 75.952751][ T5731] RDX: ffff888036abcb00 RSI: ffffffff838ad45e RDI: ffff88803566fee0 [ 75.952762][ T5731] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed10071c846c [ 75.952772][ T5731] R10: ffff888038e42363 R11: 0000000000000000 R12: ffff88803accbc80 [ 75.952783][ T5731] R13: dffffc0000000000 R14: ffff88803566fec0 R15: ffff88803accbd30 [ 75.952794][ T5731] FS: 0000555569beb500(0000) GS:ffff8880d5d4f000(0000) knlGS:0000000000000000 [ 75.952826][ T5731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.952839][ T5731] CR2: 000000110c287db4 CR3: 000000004f6a9000 CR4: 0000000000352ef0 [ 75.952851][ T5731] Kernel panic - not syncing: Fatal exception [ 75.992737][ T5731] Kernel Offset: disabled [ 75.994147][ T5731] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:49:03 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff8880329a0000 RSI=ffffffff81ff83fe RDI=ffff8880329a0000 RBP=ffff88806a741900 RSP=ffffc900037174d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed10065342b3 R13=0000000000000003 R14=ffffed100d4e8321 R15=0000000000000001 RIP=ffffffff81ff8400 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555573cf7500 ffffffff 00c00000 GS =0000 ffff8880d5b4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f869e3556c8 CR3=000000005029a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 337a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd74d5f656 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd74d5f656 00007ffd74d5f65c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f869d63564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f869d63568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f869d6357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f869d635680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff888036c044f8 RCX=1ffffffff228b160 RDX=1ffff11006d808a4 RSI=ffffffff81e3be6f RDI=ffff888036c044f8 RBP=ffffffff81e3be6f RSP=ffffc900033e7c18 R8 =0000000000000004 R9 =fffff5200067cf7d R10=0000000000000003 R11=0000000000000000 R12=0000000000000001 R13=0000000000000282 R14=0000000000000004 R15=0000000000000000 RIP=ffffffff81e77a78 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fd1bf709c80 ffffffff 00c00000 GS =0000 ffff8880d5c4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000340 CR3=000000003b5fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000081fff Opmask02=00000000ffffdfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a3b00000cbd 0000000500001500 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a3b00000cbd ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000a3b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 16170f120a1a1311 00010004157f1c03 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692074616d726f66 2064616200707865 6765722073756f69 76657270206f6e00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 450c584d415e434a 0c484d4e005c5449 4b495e0c5f594345 5a495e5c0c434200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000082c550c3 RBX=ffffffff82c550c3 RCX=ffffffff82c550c3 RDX=00000000000010c3 RSI=ffffffff82c550c3 RDI=0000000000000002 RBP=0000000000000000 RSP=00007ffe9f007d08 R8 =00007f392b810000 R9 =00007f392b812000 R10=0000000082c550c7 R11=0000000000000002 R12=00007f392b826038 R13=000000000004ad33 R14=ffffffff82c550c3 R15=00007f392c355720 RIP=00007f392b4517c3 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558d4cb500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c287db4 CR3=0000000026d2e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e616c7876000100 0a80120028008000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9f0081b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9f0081b6 00007ffe9f0081bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f392b63564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f392b63568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f392b6357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f392b635680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f392b7f2600 00007f392b7f25e0 00007f392b7f25e8 00007f392b7f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f392b7f25f8 00007f392b7f25c8 00007f392b7f2600 00007f392b7f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b180b5 RDI=ffffffff9bc75f60 RBP=ffffffff9bc75f20 RSP=ffffc900039b72b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3a6b6e696c74656e R12=0000000000000000 R13=0000000000000020 R14=0000000000000006 R15=ffffc900039b75d0 RIP=ffffffff85b180df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555569beb500 ffffffff 00c00000 GS =0000 ffff8880d5e4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3b509b CR3=000000004f6a9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 337a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd74d5f656 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd74d5f656 00007ffd74d5f65c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f869d63564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f869d63568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f869d6357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f869d635680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 00000000000001c0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000