last executing test programs: 32.911989931s ago: executing program 3 (id=9): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x1, {@in6_addr=@private1, 0x86dd}}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r5, 0xa02943b28d5af8a2, 0x6, 0x5d, 0x9, 0x8, @mcast1, @mcast1, 0x1, 0x1, 0x1, 0x6}}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x4800003e, r7, 0x0) r9 = dup2(r8, r7) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, &(0x7f0000000480)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@arena={0x21, 0x0, 0x0, 0x20, 0x60000, 0x1, 0xfc24bdf7, '\x00', r6, r9, 0x3, 0x1, 0x4}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newsa={0x14c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x67}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @offload={0xc}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 32.80229936s ago: executing program 3 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000180)) (async) r3 = syz_open_pts(r2, 0x42) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xf) (async) ioctl$TCSBRK(r3, 0x400455c8, 0x1) (async, rerun: 32) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xc0) (async, rerun: 32) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0xc0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090228bd7000fedbdf2501000000050002000a00000014000700ff000000000000010600000000000001050004000200000008000b00", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 30.071488258s ago: executing program 3 (id=21): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r2, 0x5872f73e48181a1, 0xb6, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x48880) syz_ublk_setup_io_uring(0x27a0, &(0x7f0000000140)={0x0, 0xf9c2, 0x80000, 0x2, 0x1b3}, &(0x7f00000001c0), 0x0, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x8, 0x8, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5699, &(0x7f0000000280)={0x0, 0x106f, 0x1, 0x2, 0x274}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000400)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000480)={0x0, 0x7fff, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) syz_open_pts(r3, 0x381) keyctl$revoke(0x3, 0x0) mkdir(&(0x7f0000000440)='./sys_mount\x00', 0x1ff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x4000000004002, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000680), 0x3, 0x8800) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f00000006c0)) r6 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mount(0x0, &(0x7f0000000700)='./sys_mount\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000780), 0x80000) syz_open_procfs(0x0, &(0x7f00000007c0)='fd/3\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000880)='bfq', 0x3) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2202, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 29.801317344s ago: executing program 3 (id=31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001c40)={'syzkaller1\x00', @multicast}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0xb023, 0x80, 0x2, 0xda}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x955, 0x0, 0x2, 0x15f, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc840, 0x4, 0x0, 0x16b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25f, 0x2, 0x0, 0x25d}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1617, 0x2002, 0x0, 0x1df}}], 0x4, &(0x7f0000001680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5480}, 0x0, 0x0, '\x00', {0x3, 0x6c8, 0x0, &(0x7f0000000680)=@buf_1k="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"}}, &(0x7f0000001700)) r3 = io_uring_setup(0x8, &(0x7f0000000140)={0x0, 0xfffffffa, 0x80, 0x2, 0x91e, 0x0, r2}) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000280)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f00000002c0)={0x3c, 0x3, 0x1, '\x00', 0x9}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000300)={0x5, 0x4, 0x1, '\x00', 0x7e9}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000340)={0x8, 0x86, 0x2, '\x00', 0x7e9}, 0x1) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x2, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000001b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020026bd2200fbdbdf00810000005c007a8008000400f3ffffff0c00e2f75790048012fc0d150c0003007e50022977d5d740140001017a9d554e6da82826ee2136f9720b3fe0240001b562af10d5e674e4007d4eb75bcabdca22bf91b7a46464530600000009420fd4000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8090}, 0x4008890) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) unlinkat(r4, &(0x7f0000001b40)='./sys/bus/i2c/devices/i2c-0/new_device/file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000001c80)='./file1\x00', 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f0000001cc0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000001d40)='.\x00', &(0x7f0000001d80)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000001dc0)='./bus\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001e80)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000001ec0)='./file0\x00', 0x40000, 0x73) getdents64(r6, 0x0, 0x0) r7 = openat(r4, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device/file0\x00', 0x414800, 0xd4) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f0000001c00)={r8}) 29.602407122s ago: executing program 3 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4) 29.342263135s ago: executing program 3 (id=35): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f00000000c0), 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000940)='./md0\x00', 0x6180, 0x0) openat$md_node(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000980)='./md0\x00', 0x2, 0x0) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) 29.315280723s ago: executing program 32 (id=35): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f00000000c0), 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000940)='./md0\x00', 0x6180, 0x0) openat$md_node(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000980)='./md0\x00', 0x2, 0x0) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) 6.690875362s ago: executing program 2 (id=307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r2, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x11b}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000004300010000ffe900feffffff020000000e0001006172705f63616368650000001800068008000100ba"], 0x3c}}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x5, 0x1, 0x62, @dev={0xfe, 0x80, '\x00', 0x1b}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x7800, 0x10001, 0x4}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r11, &(0x7f0000000580), &(0x7f00000005c0)=@tcp6=r10, 0x1}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000007c0)={'syz_tun\x00', 0x0}) r15 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r15, &(0x7f0000000580)={0x1d, r14}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r12, r14, 0x25, 0x2, @void}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000840)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000880)={'erspan0\x00', 0x0, 0x80, 0x7a0, 0x9, 0xfffffffe, {{0xf, 0x4, 0x3, 0x3, 0x3c, 0x66, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1f, 0x87, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @broadcast, @loopback, @multicast1]}, @end, @noop, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000e80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000940)=ANY=[@ANYBLOB="dc040000", @ANYRES16=r6, @ANYBLOB="000029bd7000fcdbdf25180000000500247890ae0371bdd30500000000002000018008000100", @ANYRES32=r9, @ANYBLOB="1400020076657468315f746f5f627269646765003000028008000200080000001c0003801000018008000100ffffff7f04000300080001800400030008000200850900004c00018014000200726f736530000000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="14000200767863616e3100000000000000000000080003000100000008000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x840}, 0x41) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6.368464378s ago: executing program 2 (id=311): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000380), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000480)={0x0}) close(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}, @in6={0xa, 0x4e21, 0x100000, @private0}], 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000003000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000300)="3e2e6626260faa66ba2100ec2e0f01190f019dea0b0000c4e125df9e0f7e00000f7813260f01ca640f017593c4e1915c03650f32", 0x34}], 0x1, 0x0, 0x0, 0x0) r8 = eventfd(0x50) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000340)={0x2, r8}) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000240)={0x2, 0x4e22, @private=0xa010102}, 0x10) setsockopt$inet_tcp_int(r9, 0x6, 0x17, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r10, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0x8) 6.190371166s ago: executing program 2 (id=316): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000000140)={0x0, 0xffff, 0x40, &(0x7f0000000100)=@ublk_ctrl_dev_info_existing}) ioctl$UBLK_U_CMD_STOP_DEV(r0, 0xc0207507, &(0x7f00000001c0)={r1}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000a80)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000ac0)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffff9}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x80c4) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x24, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x810) r5 = syz_open_dev$I2C(&(0x7f0000000b00), 0x1, 0x0) ioctl$I2C_PEC(r5, 0x708, 0x40) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000b40)={0x1, 0x1, 0x0, 0x0}) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x113a83, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000400)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x6, 0x6], [0x2, 0x2, 0x1, 0x3, 0x8002, 0x80000001, 0x0, 0x2, 0xfffffffffffffe01, 0x802, 0x9, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0x200, 0xdd, 0x0, 0x1, 0x2a9, 0x3, 0xcb9, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x80000100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1000000008, 0x6aa, 0x100, 0x1, 0x83, 0x538a, 0x9, 0xda, 0x4, 0x0, 0x4, 0xc, 0x7, 0x8000, 0x8000000000000000, 0x9, 0x0, 0x14, 0x5bc, 0x200000000001, 0x7fffffff, 0x4, 0x8, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xe, 0x0, 0x3, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000001, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0xd7, 0x16d, 0x7fffffffffffffff, 0x6, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x300000003, 0x4, 0x7, 0x402, 0x3, 0x8, 0x5, 0x0, 0x3, 0x40, 0xb128, 0x7, 0xe, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000840)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0}, 0x68) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000008c0)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000940)={0x0, 0x970, 0x1f280, 0x0, 0x399}) openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file2\x00', 0x143042, 0x80) io_uring_enter(r7, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002d00050c000000000000000008000000", @ANYRES32=r6, @ANYBLOB="4b172363f2c3605b5cc932381366f869231ddad1c21da16904d70c6cb933d53c8edddd35abe7ff58", @ANYRES32=0xee00, @ANYBLOB="0c00008008000100460a0000"], 0x2c}], 0x1}, 0x0) 6.121339085s ago: executing program 2 (id=317): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x1e8, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008810}, 0x200000c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_SMI(r0, 0xaeb7) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r3, &(0x7f0000001580)=""/4108, 0x100c) syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x1e8, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008810}, 0x200000c0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) ioctl$KVM_SMI(r0, 0xaeb7) (async) add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, 0xffffffffffffffff) (async) keyctl$read(0xb, r3, &(0x7f0000001580)=""/4108, 0x100c) (async) 6.061572792s ago: executing program 2 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x1000000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x800, 0xc2) faccessat2(r1, &(0x7f0000000340)='./file0\x00', 0x0, 0x1300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f00000001c0)='7', 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c94}}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633"], 0x6f4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r6, &(0x7f00000006c0)='ra', 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r7) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x34, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8084) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x4) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x200080, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x27b}, [@IFLA_IFNAME={0x14, 0x3, 'bond_slave_0\x00'}]}, 0x34}}, 0x40800) 6.010986343s ago: executing program 2 (id=322): r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000600)=""/24, &(0x7f0000000640)=0x18) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xe0b, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x40}}, 0x0) (async) sendto$packet(r1, &(0x7f00000004c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x874, &(0x7f0000000500)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) (async, rerun: 64) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) (async, rerun: 64) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(r6, &(0x7f0000000140)={0x27, r8, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r10, &(0x7f00000006c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) (async) mkdir(&(0x7f0000000700)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8, &(0x7f0000000800)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0/file1\x00', 0x42, 0x1ff) (rerun: 64) linkat(0xffffffffffffff9c, &(0x7f0000000880)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./file0/file2\x00', 0x1000) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000580)=0x3) (async, rerun: 32) ioctl$TIOCSSOFTCAR(r9, 0x5412, &(0x7f00000005c0)=0x13) (async, rerun: 32) close(r7) getsockopt$sock_int(r6, 0x1, 0x4, 0x0, &(0x7f00000001c0)) 4.900487582s ago: executing program 4 (id=333): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001040)={'netdevsim0\x00', &(0x7f0000001080)=@ethtool_sfeatures={0x4c}}) (async) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 4.83181953s ago: executing program 4 (id=334): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x205, 0x88201) close_range(r0, r0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0), 0x57, 0x10, &(0x7f0000000b00), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000b80)=r1, 0x4) (async) sendmsg$sock(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="67f1", 0xfdef}], 0x1}, 0x40840) (async) r4 = fcntl$dupfd(r0, 0x0, r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) 4.831477703s ago: executing program 4 (id=335): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x20) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x110) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@delchain={0x24, 0x66, 0xc23, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x7, 0xfff3}, {}, {0xb, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x804c}, 0x20004800) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0100000003"], 0x48) r7 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x5499, 0x505100) write$snddsp(r7, &(0x7f0000000540)="e4f0a51f3c431f15f6b011c85e6eb96eff9e75d9e7d8dfd22b137b713bce4d1baee663d93e604f917bfb99a49518c5d0010fbd1f2bee4181bab00f1a950a84c5a1fc0b0d6edcc9a2aeba278c430b6dba5dae8c5abc65522ae40b960db23c5a94d6724b3153a3e24e00e29ebbfa7b168a", 0x70) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) getpeername$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r8, &(0x7f00000003c0), 0x0, 0x4}, 0x20) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0x80}, {0x6, 0x4}]}, 0x10) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$poke(0x420f, r9, 0x0, 0x101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x54}, {0x6}]}) 4.770067267s ago: executing program 4 (id=336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xff}, [{}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @pic={0x4, 0x0, 0xff, 0x4, 0x0, 0x1, 0x3, 0xf, 0x9, 0x2, 0xf, 0xc, 0xfd, 0xa, 0x6, 0x5}}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x21a70d1, 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='\x00', 0x9801) move_mount(r3, &(0x7f00000015c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000700)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @adapter={0x400fff, 0x62e98893, 0x2, 0xfffffbff, 0x2}}]}) ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x6, 0xb, &(0x7f0000000000)=0x7fffffff}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000140)={0x1f, 0x15, 0x7, 0x17, 0xa, 0x4, 0x3, 0xe, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x40400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001640)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfffa}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x1, 0x2, {0x3, 0xbc}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x4040010) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000004c0)={0xc, 0x0, 0xfec00000}) r12 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000500)={0x0, &(0x7f0000000540)=[@code={0xa, 0x2a, {"b80000c0fec7401020000000c70011000000c74010000000ff"}}], 0x2a}) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000580)={0x0, 0x0}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 4.556732881s ago: executing program 4 (id=340): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000000)=[@wrmsr={0x65, 0x20, {0x37e, 0x4}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control16=0x4, 0x4, 0x8001}}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x1e, @gpa=0x2}}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x32, @unmapped=0x2ddd0009}}, @wr_drn={0x68, 0x20, {0x1, 0xffffffff}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xffffffff, 0x2, 0x1}}, @wrmsr={0x65, 0x20, {0xd90, 0x8000000000000001}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x18, 0x0, 0x7fffffffffffffff, 0x8}}, @nested_load_syzos={0x136, 0xb8, {0x2, 0x4, [@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x2c59, 0xff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host16=0xc08, 0x8000000000000000, 0x7f, 0x2}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x1}]}}, @wr_crn={0x67, 0x20}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x5ef, 0x8, 0x5, 0x400}}, @nested_load_code={0x12e, 0x95, {0x0, "260f019e0700000066440f3838ac88983c0000b924090000b800000000ba000000000f30f30f1aedb962020000b8b7000000ba000000000f30b9190600000f32b969030000b803800000ba000000000f30c42130c26752bab934090000b80b000000ba000000000f3066baf80cb82c08888def66bafc0cb800000080ef"}}, @wr_drn={0x68, 0x20, {0x4, 0x9}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_load_code={0x12e, 0x54, {0x1, "c443357f3900420f01cf2e45f6510cc4437d05ec0e66440f1b8b0050000043c0887800000000470fc777d266440f07c4234d6af307b9b00000400f32"}}, @wr_crn={0x67, 0x20, {0x0, 0x6}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_set_state_pages={0x140, 0x28, {0x0, 0xa, @arbitrary=0x8000000000000000}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x7, 0x2}}, @nested_load_syzos={0x136, 0xc8, {0x1, 0xae32, [@enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x1}}, @set_irq_handler={0xc8, 0x20, {0x2d, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee0000, 0x5ea}}, @nested_vmlaunch={0x12f, 0x18, 0x1}]}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x64, 0x0, 0x0, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x0, 0x6, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_vmresume={0x130, 0x18}, @uexit={0x0, 0x18, 0xfffffffffffffffd}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x37, 0x3, 0x7f, 0x9}}], 0x5d9}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r2, &(0x7f0000000780)) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x42000, 0x0) r4 = dup(r3) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000802, r2, &(0x7f0000000840)={0x0, 0xa8, 0x401, 0xe448, 0x5, 0x2, 0x7, 0x1000, 0x81}) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000008c0), 0x2, 0x0) quotactl_fd$Q_SYNC(r5, 0xffffffff80000102, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000900)=0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000940)={0x1, @in6={{0xa, 0x4e20, 0x0, @mcast2, 0xe8}}, 0x2, 0x9}, &(0x7f0000000a00)=0x90) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) connect$bt_sco(r4, &(0x7f0000000e40)={0x1f, @none}, 0x8) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000f80)={@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, {&(0x7f0000000e80)=""/133, 0x85}, &(0x7f0000000f40), 0x4}, 0xa0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040), 0x100, 0x0) r8 = openat$cgroup_devices(r4, &(0x7f0000001080)='devices.deny\x00', 0x2, 0x0) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000010c0)={r1, @rand_addr=0x64010102, @empty}, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000001100)=0x0) connect$nfc_llcp(r4, &(0x7f0000001140)={0x27, r9, 0xffffffffffffffff, 0x7, 0x3c, 0x7, "efe0fa133da7dc51b898759c2db55253b7b4969c712c590707069a2986d98bd8869c2686ff7557f4f8e3853cac37dd78ed7364b46a7b00c11d1126fff3644b", 0x30}, 0x60) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) write$cgroup_devices(r8, &(0x7f00000011c0)={'c', ' *:* ', 'rm\x00'}, 0x9) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) pipe2$9p(&(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) write$P9_RLERRORu(r10, &(0x7f0000001240)={0xe, 0x7, 0x2, {{0x1, '\''}, 0x55ce}}, 0xe) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r11, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r12 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000001b80), 0x0, 0x0) renameat(r4, &(0x7f0000001380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r12, &(0x7f0000001bc0)='./file0\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 4.309280603s ago: executing program 4 (id=343): mount$overlay(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000240), 0x8, &(0x7f00000002c0)={[{@redirect_dir_off}, {@userxattr}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r1], 0x48}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) epoll_create1(0x0) 4.286247972s ago: executing program 33 (id=343): mount$overlay(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000240), 0x8, &(0x7f00000002c0)={[{@redirect_dir_off}, {@userxattr}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r1], 0x48}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) epoll_create1(0x0) 3.49806348s ago: executing program 0 (id=355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x7c, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x541800, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, &(0x7f0000000180)=0x5e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x0, 0x0, 0x2080, {0x40000, 0x100000, {0x3}, 0x0, 0x3}, {"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", "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"}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7400000040000901feffffff00000000027c000004"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) r5 = socket(0x6, 0x4, 0x5) r6 = add_key$keyring(&(0x7f00000027c0), &(0x7f0000002800)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000002840)={0x35}, 0x10) write(r7, &(0x7f0000002880)="1c0000001a009b8a14e5f40700426e2400000000fe00000000000000", 0x23) syz_genetlink_get_family_id$mptcp(0x0, r7) syz_emit_ethernet(0x46, &(0x7f00000028c0)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000002940), r7) add_key$user(&(0x7f00000001c0), &(0x7f0000002700)={'syz', 0x1}, &(0x7f0000002740)="d85b5f515c762b6dde39789e0c0b56bbfca275b84065b7fa79ff8ea2fb7ac502133961e4d6a02d7297dd6783a578823507bf6dfb4cf9a1492443f0cf89c18777ea6e6cf966681256c0bb5fc58e991d8f52576d2976381ba6186855db6fa9b29d5b29247c73", 0x65, r6) connect(r5, &(0x7f0000000440)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x800}, 0x80) mount$9p_virtio(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x4, &(0x7f0000002600)=ANY=[@ANYBLOB="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"]) 3.240119489s ago: executing program 0 (id=356): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r2, 0x5872f73e48181a1, 0xb6, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x48880) syz_ublk_setup_io_uring(0x27a0, &(0x7f0000000140)={0x0, 0xf9c2, 0x80000, 0x2, 0x1b3}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x8, 0x8, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5699, &(0x7f0000000280)={0x0, 0x106f, 0x1, 0x2, 0x274}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000400)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000480)={0x0, 0x7fff, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) syz_open_pts(r3, 0x381) keyctl$revoke(0x3, 0x0) mkdir(&(0x7f0000000440)='./sys_mount\x00', 0x1ff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x4000000004002, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000680), 0x3, 0x8800) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f00000006c0)) r6 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mount(0x0, &(0x7f0000000700)='./sys_mount\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000780), 0x80000) syz_open_procfs(0x0, &(0x7f00000007c0)='fd/3\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000880)='bfq', 0x3) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2202, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 2.342192052s ago: executing program 0 (id=362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0x11}, {0x0, 0xffff}, {0x10, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x101}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4054) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) 2.120961713s ago: executing program 0 (id=364): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) setns(0xc9, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$inet(0x2, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c000000000000001701000077511702e1df4770b44bb650d4dd5834d071bb6ec2597c8f75e6a345c78d174184a46ebdb707b669"], 0xc}}], 0x1, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8db9}, {0x6, 0x11, 0x1}}]}, 0x44}}, 0x4000010) ioctl(r0, 0x208001, &(0x7f0000000440)='cqn0\x00\x00') bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x3, 0x3ffdcf, 0xaf0}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x44}}, 0x2000800) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x4e23, 0xfffffffe, @mcast1, 0x87}}, 0x0, 0x0, 0x3a, 0x0, "276148cd1259e41d8f0ffd4be8b6d180a19ecb3e60c92e9fe908c95534a69b91fe9e2770ba387440609895d7fbb1c08bdfd96493f4fc1810d150cc3f2bbd548044dcec63bc8b2168c59e27175814071e"}, 0xd8) syz_emit_ethernet(0x5e, &(0x7f0000000740)={@local, @random="95000a1100", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df342", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x6, 0x400, 0x0, 0x0, {[@md5sig={0x13, 0x12, "6d84a22012be73afefa596f1a731aeae"}]}}}}}}}}, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000400)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89f0, &(0x7f0000000440)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000240)='14', 0x2) io_setup(0x5, &(0x7f00000002c0)) 1.987503738s ago: executing program 5 (id=344): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000180)={0x20071026}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000240)="09000000010001", 0x7) (async, rerun: 32) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x8, @meta={0x4531434d, 0x3ad5ea6c, 0xf727, 0x4ded, 0x6cb9981d}}) r2 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_iommufd/times\x00', 0x1, 0x0) close(r2) 1.912067564s ago: executing program 5 (id=368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000140)=0x638, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) (async) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r5, {0xfff1, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x74}}, @TCA_CHAIN={0x8, 0xb, 0x7fff0000}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r5, {0xfff1, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x74}}, @TCA_CHAIN={0x8, 0xb, 0x7fff0000}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_test={0x1a, 0xfffffffd, 0x5, 0x4, [0x8, 0x4, 0x3, 0xffffffffffff0000]}}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_test={0x1a, 0xfffffffd, 0x5, 0x4, [0x8, 0x4, 0x3, 0xffffffffffff0000]}}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000000600)={0xf, {"a2e3ad214fc752f90b5e09094bf70e0dd038e7ff7fc6e5539b1b48078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d07420736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e2c5070000179c6f30e065cd5b91cd0ae17d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3bb469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be8afb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918070000003f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860421c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2f09000000000000007747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847354b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d27c9a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042ffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e218eb4035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f06f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378fd4dd891e937c2ea5410e05130050000f1000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9d1a3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca503705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdfa1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102b0c7829389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442748af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d8224fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d784cfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000001c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000f400", 0x1000}}, 0x1006) io_uring_setup(0x68fd, &(0x7f0000001640)={0x0, 0x7469, 0x1000, 0x3, 0x3e, 0x0, r10}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) close_range(r1, 0xffffffffffffffff, 0x0) 1.899304873s ago: executing program 5 (id=369): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r2, 0x5872f73e48181a1, 0xb6, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x48880) syz_ublk_setup_io_uring(0x27a0, &(0x7f0000000140)={0x0, 0xf9c2, 0x80000, 0x2, 0x1b3}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x8, 0x8, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5699, &(0x7f0000000280)={0x0, 0x106f, 0x1, 0x2, 0x274}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000400)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000480)={0x0, 0x7fff, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) syz_open_pts(r3, 0x381) keyctl$revoke(0x3, 0x0) mkdir(&(0x7f0000000440)='./sys_mount\x00', 0x1ff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x4000000004002, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000680), 0x3, 0x8800) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f00000006c0)) r6 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mount(0x0, &(0x7f0000000700)='./sys_mount\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000780), 0x80000) syz_open_procfs(0x0, &(0x7f00000007c0)='fd/3\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000880)='bfq', 0x3) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2202, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 1.221054271s ago: executing program 5 (id=370): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000480)=0x4) (async) move_pages(0x0, 0x90249c01dd736e4b, &(0x7f00000004c0)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000500), 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="28000000171401fbfc79"], 0x28}, 0x1, 0x0, 0x0, 0x24044891}, 0x8054) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000540)=@arm64={0x9, 0x81, 0x0, '\x00', 0x10}) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfd000/0x400000)=nil) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd70770f5ac29374109c6e6eecd49d2fe300fddbdf250b0000000e0001006e4a7464657673696d0000000f0002006e657464657673696d30000008000b00ffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x84) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0xc0a85320, &(0x7f0000000640)={0x80}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r9, 0x118, 0x1, &(0x7f0000000200)=0x171, 0x4) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="007beb3a180400406806001c0012800b00010067726574617000000c00028008000700ffffffff0800040000"], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) 728.112406ms ago: executing program 1 (id=374): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000880), 0x1, 0x0) (rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r4 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r6, 0x800, 0x1, 0x3, 0x7, {0x3, 0x8, 0x28, 0x7, 0x8000, 0x7, 0x800, 0x7, 0x2, 0xffff, 0x9, 0x4, 0x9, 0x2277, "caa6e2ce762a6523ae63fbec1fb6a828f1b170682a01396c2929128c9a966e26"}}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000001c0)={0x0, 0x0, r5, r6, 0x80, 0x5, 0x9, 0x0, {0xd, 0x1, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x2, 0x403, 0x409aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) (rerun: 64) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8140) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x808081, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) (async) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x110, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) r9 = syz_open_dev$usbfs(&(0x7f00000006c0), 0x204, 0x2) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r9, 0x108000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) (rerun: 32) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) (async) r11 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/class/input/input0/id/vendor\x00', 0x0, 0x0) read(r11, &(0x7f0000000800)=""/100, 0x64) (async) close_range(r10, 0xffffffffffffffff, 0x0) 728.00982ms ago: executing program 0 (id=375): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000f00)=0x56c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000f80)="09000400e70014000000fe7bfb256fca6f83c84e12000067bdc592aaf1803595", 0x20, 0x42894, &(0x7f0000000fc0)={0x11, 0x1b, r2, 0x1, 0x29, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) 641.172423ms ago: executing program 0 (id=376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/nullb/nullb1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nullb/nullb1/power\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nullb/nullb1/power\x00', 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x15) ioctl(r2, 0x404c4701, &(0x7f0000000500)="0100000000000000010000000100000001000000010000000000000020000000200000000100000001") write(r1, &(0x7f0000000840)='0', 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x8, 0x220800) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000001c80)={{0x3, 0x1, 0x7, 0x6, 0xb, 0xad20}, 0x36e, [0x8, 0x1, 0x1, 0x6, 0x7, 0xfffffc00, 0x5, 0xfffff001, 0x1, 0x2, 0x0, 0x0, 0xfffffff0, 0xa84, 0x400, 0x1, 0x872b, 0xf71, 0x8, 0x58, 0x3, 0x2f6, 0x538c, 0x80000000, 0x6, 0x7, 0x8, 0xd8, 0x21c8, 0x5, 0x3, 0x5, 0x2, 0x8000, 0x80000000, 0xffffff83, 0x2, 0x8, 0x1, 0x4, 0x8, 0x8, 0x80, 0x7, 0x5, 0x4, 0x7, 0x1, 0x1, 0x80000000, 0xa, 0x6, 0x0, 0xb3, 0xe, 0x0, 0x3ff, 0x3ff, 0x5, 0x3, 0x6, 0x8, 0x80000000, 0x2a, 0x81, 0x2, 0xb, 0x7, 0x6, 0xffff, 0x4, 0xb, 0x9, 0x1, 0x1000, 0xf35, 0x1, 0x9, 0x8eb, 0x6, 0x1, 0xa8f, 0x1000, 0x81, 0xfffffff7, 0x4, 0x8, 0xfffffffe, 0x2, 0x2, 0x1, 0xffffffff, 0x433, 0x8, 0x8, 0xfff, 0x6, 0x4, 0x6, 0x7, 0xffff, 0x5, 0x0, 0x2, 0x9, 0x5, 0x4, 0x2, 0x1, 0x2da0cb52, 0x225, 0x7fff, 0x800, 0x7, 0x6, 0x9e, 0xb, 0x7, 0xc00, 0x4, 0x200, 0x8, 0x1, 0x5, 0x7f0, 0x800009, 0x0, 0x2, 0x7, 0x4, 0x3, 0x26f, 0x6, 0x8, 0x8001, 0x3, 0x5, 0x5, 0xffff8000, 0x0, 0x80000001, 0x6, 0x4, 0x1000, 0x3, 0x8001, 0x7, 0x49e49d14, 0xffff, 0x6, 0xa00000, 0x6, 0x8001, 0xfffffff9, 0x6, 0x9, 0x2, 0x9, 0x7, 0x8, 0x74, 0x480, 0x0, 0x7, 0xdc, 0x10001, 0x188f, 0x4b66c17e, 0x400, 0x1, 0xfffffff8, 0x8, 0x5, 0x5, 0x12780000, 0x3, 0x3, 0x3, 0x0, 0x6, 0x4, 0x9, 0x2, 0x7, 0x62924a16, 0x4d, 0x9, 0x9, 0x100, 0x716, 0x9, 0x8, 0x3, 0x2, 0xc, 0xfffff800, 0x86, 0x1, 0x5, 0x2, 0x100, 0x2, 0x80000001, 0x1, 0x0, 0x2028e021, 0x2, 0x6, 0xbb5, 0x0, 0x6, 0x1, 0x40, 0x29d, 0xc, 0x3, 0x9, 0xfffff801, 0xfffffffd, 0x628, 0x2, 0xfffffffa, 0x9, 0xb, 0x0, 0xfffffffa, 0x8, 0x10, 0x4, 0x3, 0xffffff72, 0xfffffff9, 0x5, 0xa1, 0x2, 0x400, 0x4fa7c9c, 0xffff, 0x4, 0x0, 0xfffffffd, 0x5, 0xfffffffd, 0x7, 0xe, 0x4, 0x7ff, 0x6, 0x6eb0, 0x10001, 0x80, 0x1, 0x0, 0x5bd, 0x2, 0x7f, 0x4, 0xa, 0x2, 0x80000001, 0x7, 0x7, 0x0, 0x4, 0x6, 0xfffffffb, 0x5, 0x4, 0x4738, 0xfffffffa, 0x2, 0x100, 0x5, 0x4, 0x0, 0x8, 0x4, 0xffffffff, 0x8, 0x5, 0x8001, 0x0, 0xf6b5, 0x1, 0x5, 0xff, 0x5772f32a, 0x3ade, 0x3, 0xf, 0x3, 0x920, 0x100, 0x6, 0x128, 0x7, 0x8, 0xe867, 0x4, 0x8000, 0xaf4, 0x9000, 0x4, 0x8, 0x6, 0x8ec2, 0x7, 0x7, 0x100003ff, 0x4, 0x2, 0xea, 0xf721, 0x7, 0x0, 0x1, 0x21de, 0xc, 0xfff, 0x9, 0xffffc04b, 0x5, 0x8, 0x80, 0xbb, 0x81, 0x4, 0xe, 0xfffffc01, 0x6, 0x0, 0x5, 0x7fff, 0x4, 0xf4fd, 0xffffffff, 0x8, 0x46, 0x94b6, 0x0, 0x7fff, 0x9, 0x800, 0x7, 0x4, 0x3ff, 0x4, 0x4, 0x100400, 0x6, 0x7, 0x1, 0xc, 0x3, 0x3, 0xfffffffa, 0x80000000, 0xe, 0x7, 0x9, 0x0, 0x9e5f, 0x9, 0xffffffff, 0x4, 0x2, 0x747eb8ca, 0x4, 0x10, 0x1, 0xfffffffb, 0x6, 0x0, 0x8000, 0x5, 0x0, 0x1, 0x0, 0x5, 0x4, 0x5, 0x6, 0x7fff, 0x7, 0xe, 0x8, 0x81, 0x10, 0x3, 0x7, 0x41, 0x4, 0x7fff, 0xffffffff, 0x9, 0x4b, 0x7fff, 0x695b, 0x5, 0x2, 0x80000001, 0x1, 0x1, 0xffffffff, 0x7, 0xfffffffd, 0x10001, 0x4, 0x6, 0x6, 0x0, 0x81, 0x70000000, 0x400, 0x10001, 0x7fffffff, 0x2, 0x7, 0x6, 0x3, 0xaf6b0d, 0x7fffffff, 0x5, 0x0, 0x4, 0xfffffff8, 0x5, 0x401, 0x800, 0x4, 0x5, 0x4, 0x1, 0xd, 0x7c9, 0xa, 0x0, 0x6, 0x4, 0x4a68, 0x4, 0x2, 0x3, 0x7, 0x2, 0x81, 0x3, 0x6, 0x15, 0x8, 0x7, 0x0, 0x0, 0x9, 0x101, 0x7, 0x7, 0x0, 0x10, 0x10, 0x80000000, 0xfffffffa, 0x7, 0x81, 0x9, 0x8, 0x2, 0xfc000000, 0x2, 0x10001, 0x3, 0xd, 0xe, 0x3, 0x4544, 0x7, 0x3, 0x0, 0xfffffff9, 0x10001, 0x7, 0x6, 0x7, 0x0, 0x200, 0x0, 0x7fff, 0x80000001, 0x7, 0x9, 0x8, 0x9d, 0x6, 0xc58, 0x9, 0x80000000, 0x9, 0x0, 0x3ff, 0xfffffff7, 0x1, 0x3, 0x5, 0x571, 0x0, 0x3, 0x0, 0x4, 0xfff, 0xe, 0x5, 0x6, 0x0, 0x0, 0x8, 0x1, 0x125, 0x10, 0x10000, 0x0, 0xffffff00, 0x6, 0x100, 0x5, 0x92c, 0x8, 0x0, 0x7, 0x7, 0x8, 0x1, 0x8, 0x100, 0x9, 0x5, 0x2, 0x5, 0x0, 0x0, 0x7, 0xa141, 0x3, 0x6, 0x81, 0x538, 0xfffffff8, 0x380000, 0x0, 0xd2, 0x4, 0x4, 0xa, 0xd, 0xff, 0x32, 0x8, 0x9, 0x6, 0x80, 0x5, 0x5, 0x3, 0xfffffffc, 0x5, 0x800, 0x0, 0x7, 0xd, 0x7, 0x800, 0x6654, 0x8, 0x28000, 0xffffa98e, 0x2, 0x1, 0x2, 0x2, 0xfffffffc, 0x18, 0x3, 0x200, 0x4, 0x0, 0x800004, 0x4, 0x81, 0x0, 0x55bb, 0xfffffff9, 0x1000000, 0x6, 0xee23, 0x5825, 0x8001, 0x5, 0x3, 0x1, 0x0, 0xad6, 0x7, 0x7, 0x4, 0x6, 0x9, 0xde, 0x5, 0x8, 0x9, 0x3, 0x7, 0x4, 0x5, 0x0, 0x400, 0x7fff, 0xd, 0x7, 0xf0000000, 0x8, 0x4, 0x5, 0xa, 0x4ae3, 0xf265, 0x80000000, 0x3, 0x4, 0xd1d0, 0x80000001, 0x3, 0x7, 0x46ed, 0x5, 0x0, 0x7f, 0x8, 0x90, 0x5, 0x86, 0x0, 0xfd69, 0x7, 0x3, 0x0, 0x6, 0x7792, 0x81, 0x3, 0x8db0, 0x7, 0x0, 0x101, 0xc, 0xe6, 0x0, 0x86, 0x0, 0x5, 0x2, 0x9, 0x2, 0xfffffff8, 0x9, 0x3, 0x7, 0xe, 0x8, 0xcb, 0x5, 0x0, 0x3, 0x2, 0x7, 0xffff0e16, 0x1000000, 0xff, 0x2, 0x979, 0x4, 0x8, 0x40, 0x4, 0x7fef, 0x2, 0x6, 0xffffffff, 0x6, 0x4b9b, 0x9, 0x40, 0x0, 0x7fff, 0x80, 0x9, 0x101, 0x26, 0x8000000, 0x7, 0x4, 0x9, 0x0, 0x8, 0x5, 0x7, 0xfb52, 0x5, 0x7f, 0x3, 0x6, 0x0, 0x4, 0x400, 0x2, 0xfffffff7, 0x80000000, 0x4, 0xf, 0x8, 0xfff, 0x4, 0xfff, 0x0, 0x1, 0x3, 0x0, 0x7b3, 0x5, 0x2, 0x3, 0x1, 0xffffff00, 0x8, 0x0, 0x70000, 0x6, 0x400, 0x2, 0x4164, 0xf, 0x1000, 0xfffffff8, 0x57, 0x1, 0x2, 0x7, 0x9, 0x0, 0x5cd, 0x5, 0xffff0000, 0x1, 0x1ff, 0xfffff6f6, 0x8, 0xe, 0x6d9a906f, 0xffffff81, 0x8, 0x2, 0x0, 0xfffffffd, 0x800, 0x80000000, 0x7, 0x8, 0xf, 0x7, 0x1, 0x9, 0x10000, 0x7, 0x6, 0x4, 0xe, 0x8000, 0x8, 0x2c, 0x6, 0x4, 0x2, 0x7, 0x8001, 0x8, 0x7ff, 0x57b, 0x7, 0x7ff, 0xfed1, 0x79, 0x7ff, 0x7, 0x6, 0x8, 0x9, 0x1, 0x99, 0x5d, 0x1, 0x1, 0x9, 0x5, 0x8, 0xffffffff, 0x9217, 0xef, 0x6, 0xbe1, 0x81, 0xfffffffc, 0x5, 0x2, 0x6, 0x9, 0xfffffffc, 0x6, 0x4, 0x6, 0xa, 0xfffff428, 0x88ec, 0x90b8, 0x4, 0x9, 0x0, 0x1, 0x2, 0x81, 0x6, 0x5, 0x7, 0x2, 0x1, 0x3, 0x4, 0x1066, 0x2, 0xcce, 0xf4, 0xffffff1d, 0xd, 0x68, 0x90, 0x2d85b436, 0x10000, 0xa, 0x9, 0x78, 0x8, 0x200, 0x8, 0x5e, 0x0, 0xffffff09, 0x565, 0x9, 0x356e06c7, 0xb, 0x2, 0x7fffffff, 0xad, 0x1, 0x9, 0xc, 0x2, 0x1000, 0x2, 0x9, 0x80, 0xd36, 0x8, 0x5, 0x8, 0x80000000, 0x6735, 0x800, 0x100, 0xfffffcd5, 0x7fea, 0xfffffff7, 0x0, 0x9, 0x100, 0xe, 0x1, 0x5, 0x6, 0xfff, 0x1, 0x8, 0x3ff, 0xffffffff, 0x0, 0xfffffeff, 0x10000, 0x5, 0x5, 0x3, 0x7, 0xb, 0x8571, 0xffffffff, 0x4, 0x0, 0x9, 0x4, 0x1, 0x4, 0xfa, 0x4a9, 0xdf9, 0x1696, 0x1000, 0x5, 0x6eb, 0x0, 0x1ff, 0x1, 0x6, 0x9, 0x100, 0x502e, 0x9, 0x6c2, 0x7, 0x1, 0xc22, 0x9, 0x23, 0x10000, 0x101, 0x2, 0x1, 0xffff095a, 0x81, 0x2, 0x1c, 0x1000000, 0x8, 0x9, 0x6, 0x0, 0x9, 0xe4cc, 0x1, 0x80000001, 0x2, 0x43fd60f8, 0x3, 0x5, 0x7fff, 0x1, 0x2, 0x0, 0x1, 0x8, 0xffffff00, 0x6, 0x6, 0xfffff0c0, 0x4, 0x5, 0x8, 0x7, 0x7, 0x6, 0x9, 0x9, 0x8, 0x2, 0x9, 0x7, 0x7, 0x6, 0x7, 0x1, 0x2, 0x5, 0x10000, 0x2, 0x576, 0xc2, 0x5, 0x2, 0x8, 0x1ff, 0xb9, 0xf2c, 0x10001, 0x4, 0xb8d, 0x0, 0x2, 0x2, 0x9, 0x7, 0x7, 0x4, 0x3, 0x320, 0x6, 0x10001, 0x800, 0x7, 0x9, 0x3, 0x7, 0x7, 0x2bbd, 0x9, 0x2, 0x6, 0x40001644, 0x5, 0x2, 0x5, 0xe, 0x2, 0x8, 0x8, 0x80000001, 0x7, 0x4, 0x2]}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f00000004000000040000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000bd9e83c96163fad20312564e979f777b188baa6686b4f138d940f94097e6214cbd226bba029addea0903", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r5], 0x0, 0x0}, 0x94) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000640)='veth1_macvtap\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000600)="000000000000000002", 0x0}, 0x50) write$tun(r0, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0xfce) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) pselect6(0x40, &(0x7f0000000c00)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x800, 0x800, 0x6, 0x8000001000000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000c40)={0x1f, 0x0, 0x381, 0x5, 0x4, 0x9e22, 0x0, 0x100}, 0x0, 0x0) ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, &(0x7f0000000240)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) capset(0x0, &(0x7f0000000140)={0xffc, 0x10ffff, 0xffffff88}) capset(&(0x7f0000000180)={0x19980330}, 0x0) 582.251269ms ago: executing program 1 (id=377): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000200)={0x2, 0xffffffffffffffff, 'id0\x00'}) mkdirat(r0, &(0x7f0000000340)='./file0/file0\x00', 0x178) creat(&(0x7f0000000400)='./file0/file0\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000008c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000900)=[@text64={0x40, &(0x7f0000000940)="b9800000c00f3235000800000f30805000fd450f01f40f017137400f1ee7c403957ca7fd5856025bb805000000b9620000000f01c1debfdbc40000400fc73dadc30000400f78741d01", 0x49}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000009c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x0) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x418103, 0xa, 0xf}, 0x18) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000008c000000000000efcbb428416319e48db06726583a0003bb6a89eb6cfd9a332814332795408428c2a107bd6561"], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000080000080000000000000000000000000009c02f2164f7e0e185e17f8e66aafbc048138433adb5417ca6de950502e7b934a272ce5215da827f568716fbe77217982f005aae021f04bdc1b109ccdeaef30687d039fb06f29a0b62d92d72042e931ccb4e2f66e0f678842c395a9e5226e9a82fab96cbc8f1ceb394d04ef67acb3974aa6dd01cedfeeeb9ac09bef61f507ddc2fc815c63b9a933df013812a499f3add29947", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x1c, &(0x7f0000000b80)=ANY=[@ANYBLOB="1808000000000102000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff000000008d09000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000080)={'ipvlan1\x00', 0x400}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) lstat(&(0x7f0000000280)='./file0/file1\x00', &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) r10 = openat(r5, &(0x7f0000000b00)='driver_override\x00', 0x18100, 0x0) write(r10, &(0x7f0000000b40)="4e0ccfbf51be4f637da48a03b9de034f6837d6c30fd87a7e12a41eb52b3272b99fe7cc21f9bb5225d34fa00a", 0x2c) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2c0800, 0x0) close(r11) 227.893324ms ago: executing program 1 (id=378): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_team\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x80804, &(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000340)=0x205, 0x4) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000380)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, &(0x7f00000003c0)="1c0000001a005f0214f9f407000904001f000000fe1f000000000000", 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='gid_map\x00') lseek(r3, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc4, &(0x7f0000000080)=""/196, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) 223.997403ms ago: executing program 1 (id=379): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket(0x1e, 0x4, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_test', 0x88002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) setns(0xc9, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000480)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000500), 0x12) listen(r4, 0x5) write$tun(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="000008050010010b"], 0xa) write$tun(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="00000805001001", @ANYRES32=r3], 0xa) 2.328204ms ago: executing program 1 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}]}]}, 0x50}, 0x1, 0x1000000}, 0x4) 0s ago: executing program 1 (id=381): unshare(0x4020400) mkdir(&(0x7f0000000000)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x8, &(0x7f00000000c0)='usrquota') r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000300)={@remote, r1}, 0x14) close(r0) chdir(&(0x7f0000000100)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x803, 0x5, 0x7fffffff, 0x7, 0x0, 0x6, 0x6, 0x2, 0x4}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x8, 0x4, 0x1, 0x3}) r6 = openat$selinux_policy(0xffffff9c, &(0x7f00000004c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r6, 0x0) connect$bt_l2cap(r6, &(0x7f0000000500)={0x1f, 0x6, @any, 0x4}, 0xe) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000480)={r5, 0x2000, 0x6, 0x360f8, 0x104, 0x0, 0x7e3b}) r7 = syz_pidfd_open(r4, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KIOCSOUND(r8, 0x4b2f, 0x4f78) setns(r7, 0x24020000) close_range(r3, 0xffffffffffffffff, 0x0) r9 = mmap$KVM_DIRTY_RING(&(0x7f0000ffe000/0x2000)=nil, 0x52000, 0x0, 0x50, 0xffffffffffffffff, 0x40000) unshare(0x200) munmap$KVM_DIRTY_RING(r9, 0x3000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:54342' (ED25519) to the list of known hosts. [ 39.796962][ T42] audit: type=1400 audit(1793875515.977:138): avc: denied { name_bind } for pid=5764 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.827353][ T42] audit: type=1400 audit(1793875516.007:139): avc: denied { execute } for pid=5765 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.827781][ T42] audit: type=1400 audit(1793875516.007:140): avc: denied { execute_no_trans } for pid=5765 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.080348][ T42] audit: type=1400 audit(1793875518.257:141): avc: denied { mounton } for pid=5765 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.081976][ T42] audit: type=1400 audit(1793875518.257:142): avc: denied { mount } for pid=5765 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.083806][ T5765] cgroup: Unknown subsys name 'net' [ 42.227760][ T5765] cgroup: Unknown subsys name 'cpuset' [ 42.232370][ T5765] cgroup: Unknown subsys name 'rlimit' [ 42.446304][ T5769] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.142192][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.404707][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 46.404728][ T42] audit: type=1400 audit(1793875522.577:154): avc: denied { execmem } for pid=5772 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.595653][ T42] audit: type=1400 audit(1793875522.777:155): avc: denied { create } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.595688][ T42] audit: type=1400 audit(1793875522.777:156): avc: denied { read write } for pid=5776 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.596541][ T42] audit: type=1400 audit(1793875522.777:157): avc: denied { open } for pid=5776 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.602736][ T42] audit: type=1400 audit(1793875522.777:158): avc: denied { ioctl } for pid=5776 comm="syz-executor" path="socket:[8242]" dev="sockfs" ino=8242 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.629784][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.630166][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.630957][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.631447][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.632297][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.632509][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.633588][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.633855][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.633964][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.634223][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.636760][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.636876][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.637204][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.637661][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.638467][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.639197][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.639246][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.639723][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.641219][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.641659][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.642837][ T42] audit: type=1400 audit(1793875522.827:159): avc: denied { read } for pid=5788 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.643872][ T42] audit: type=1400 audit(1793875522.827:160): avc: denied { open } for pid=5788 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.645648][ T42] audit: type=1400 audit(1793875522.827:161): avc: denied { mounton } for pid=5788 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.654846][ T42] audit: type=1400 audit(1793875522.837:162): avc: denied { module_request } for pid=5788 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.658826][ T42] audit: type=1400 audit(1793875522.837:163): avc: denied { mounton } for pid=5776 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.821784][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.822236][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.822863][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.840934][ T5777] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.848332][ T5776] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.860419][ T5778] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.925786][ T5788] infiniband rxe0: set active [ 46.926945][ T5788] infiniband rxe0: added rxe_eth0 [ 46.927669][ T1360] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.935030][ T5788] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 46.935062][ T5788] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 46.935100][ T5788] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 46.952472][ T5788] RDS/IB: rxe0: added [ 46.952599][ T5788] smc: adding ib device rxe0 with port count 1 [ 46.952635][ T5788] smc: ib device rxe0 port 1 has no pnetid [ 46.961202][ T1360] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.971697][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.050073][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.139570][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.154237][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.154742][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.154817][ T5777] bridge_slave_0: entered allmulticast mode [ 47.155622][ T5777] bridge_slave_0: entered promiscuous mode [ 47.172855][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.172899][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.173067][ T5777] bridge_slave_1: entered allmulticast mode [ 47.173913][ T5777] bridge_slave_1: entered promiscuous mode [ 47.225147][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.225241][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.225324][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.225566][ T5776] bridge_slave_0: entered allmulticast mode [ 47.226235][ T5776] bridge_slave_0: entered promiscuous mode [ 47.237754][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.237834][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.237929][ T5778] bridge_slave_0: entered allmulticast mode [ 47.239203][ T5778] bridge_slave_0: entered promiscuous mode [ 47.242492][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.252259][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.252332][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.252432][ T5776] bridge_slave_1: entered allmulticast mode [ 47.253660][ T5776] bridge_slave_1: entered promiscuous mode [ 47.255584][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.255659][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.255758][ T5778] bridge_slave_1: entered allmulticast mode [ 47.257090][ T5778] bridge_slave_1: entered promiscuous mode [ 47.278858][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.285220][ T5777] team0: Port device team_slave_0 added [ 47.307060][ T5777] team0: Port device team_slave_1 added [ 47.309590][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.311765][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.313679][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.338332][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.354825][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.354836][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.354863][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.356586][ T5778] team0: Port device team_slave_0 added [ 47.366225][ T5778] team0: Port device team_slave_1 added [ 47.374148][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.374161][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.374183][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.385125][ T5776] team0: Port device team_slave_0 added [ 47.385732][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.385813][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.385835][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.405576][ T5776] team0: Port device team_slave_1 added [ 47.406046][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.406055][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.406069][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.457877][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.457890][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.457904][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.461071][ T5777] hsr_slave_0: entered promiscuous mode [ 47.461689][ T5777] hsr_slave_1: entered promiscuous mode [ 47.468265][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.468275][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.468289][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.533915][ T5778] hsr_slave_0: entered promiscuous mode [ 47.535247][ T5778] hsr_slave_1: entered promiscuous mode [ 47.535810][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 47.535823][ T5778] Cannot create hsr debugfs directory [ 47.552195][ T5776] hsr_slave_0: entered promiscuous mode [ 47.552986][ T5776] hsr_slave_1: entered promiscuous mode [ 47.553513][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 47.553526][ T5776] Cannot create hsr debugfs directory [ 47.815912][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.815982][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.816042][ T5788] bridge_slave_0: entered allmulticast mode [ 47.816857][ T5788] bridge_slave_0: entered promiscuous mode [ 47.818129][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.818195][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.818351][ T5788] bridge_slave_1: entered allmulticast mode [ 47.818982][ T5788] bridge_slave_1: entered promiscuous mode [ 47.825557][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.830224][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.839124][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.840039][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.844136][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.844555][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.849967][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.852760][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.860737][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.862558][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.886210][ T5788] team0: Port device team_slave_0 added [ 47.888491][ T5788] team0: Port device team_slave_1 added [ 47.915852][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.915865][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.915880][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.916836][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.916844][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.916858][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.936461][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.940019][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.940492][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.950405][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.954394][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.954488][ T5777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.954993][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.955085][ T5777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.963192][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.966651][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.967040][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.971200][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.976173][ T5788] hsr_slave_0: entered promiscuous mode [ 47.976587][ T5788] hsr_slave_1: entered promiscuous mode [ 47.976950][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 47.976962][ T5788] Cannot create hsr debugfs directory [ 48.028755][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.029553][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.060994][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.062986][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.070109][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.071874][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.078901][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.082075][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.090462][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.093688][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.185254][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.215476][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.217527][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.217973][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.220080][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.223891][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.227098][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.229064][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.229471][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.231716][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.237184][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.237281][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.243482][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.245060][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.245104][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.271497][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.279344][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.280009][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.284707][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.288004][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.288047][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.316336][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.328220][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.328269][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.351443][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.351530][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.364280][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.390828][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.398576][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.398622][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.403002][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.403044][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.556575][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.583301][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.589787][ T5777] veth0_vlan: entered promiscuous mode [ 48.601544][ T5777] veth1_vlan: entered promiscuous mode [ 48.622869][ T5776] veth0_vlan: entered promiscuous mode [ 48.628752][ T5777] veth0_macvtap: entered promiscuous mode [ 48.631312][ T5776] veth1_vlan: entered promiscuous mode [ 48.632197][ T5777] veth1_macvtap: entered promiscuous mode [ 48.637120][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.643464][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.649175][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.659509][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.665835][ T5786] Bluetooth: hci1: command tx timeout [ 48.665842][ T5781] Bluetooth: hci2: command tx timeout [ 48.665846][ T67] Bluetooth: hci3: command tx timeout [ 48.666258][ T5786] Bluetooth: hci0: command tx timeout [ 48.681463][ T5776] veth0_macvtap: entered promiscuous mode [ 48.702152][ T5776] veth1_macvtap: entered promiscuous mode [ 48.712998][ T5778] veth0_vlan: entered promiscuous mode [ 48.725259][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.730388][ T5778] veth1_vlan: entered promiscuous mode [ 48.741966][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.751799][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.751825][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.757548][ T5788] veth0_vlan: entered promiscuous mode [ 48.774957][ T5788] veth1_vlan: entered promiscuous mode [ 48.784168][ T5778] veth0_macvtap: entered promiscuous mode [ 48.786481][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.786493][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.798064][ T5778] veth1_macvtap: entered promiscuous mode [ 48.818641][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.819020][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.819032][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.824396][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.827353][ T5788] veth0_macvtap: entered promiscuous mode [ 48.835557][ T5788] veth1_macvtap: entered promiscuous mode [ 48.848979][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.848992][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.856563][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.856678][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.857642][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.866333][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.883336][ T5777] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.930149][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.930162][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.940498][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.940510][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.946514][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.946555][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.946588][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.946606][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.946625][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.946642][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.946660][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.946678][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.946703][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.946721][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.946739][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.946757][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.946775][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.946793][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.956654][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.956667][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.981121][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.981134][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.003609][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.003836][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.004338][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.194176][ T1360] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 49.212964][ T5950] ceph: No mds server is up or the cluster is laggy [ 49.428007][ T5955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=5955 comm=syz.0.1 [ 50.180346][ T5998] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.180402][ T5998] block device autoloading is deprecated and will be removed. [ 50.744792][ T5786] Bluetooth: hci3: command tx timeout [ 50.744822][ T5786] Bluetooth: hci2: command tx timeout [ 50.744834][ T5786] Bluetooth: hci1: command tx timeout [ 50.744846][ T5786] Bluetooth: hci0: command tx timeout [ 51.449894][ T6016] FAULT_INJECTION: forcing a failure. [ 51.449894][ T6016] name failslab, interval 1, probability 0, space 0, times 1 [ 51.449914][ T6016] CPU: 3 UID: 0 PID: 6016 Comm: syz.2.20 Not tainted syzkaller #0 PREEMPT(full) [ 51.449928][ T6016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.449952][ T6016] Call Trace: [ 51.449964][ T6016] [ 51.449969][ T6016] dump_stack_lvl+0x100/0x190 [ 51.449994][ T6016] should_fail_ex.cold+0x5/0xa [ 51.450014][ T6016] should_failslab+0xc2/0x120 [ 51.450029][ T6016] __kvmalloc_node_noprof+0x113/0x9b0 [ 51.450049][ T6016] ? do_raw_spin_lock+0x128/0x260 [ 51.450060][ T6016] ? alloc_fdtable+0x17f/0x2d0 [ 51.450076][ T6016] alloc_fdtable+0x17f/0x2d0 [ 51.450090][ T6016] dup_fd+0xa1e/0xd90 [ 51.450108][ T6016] ? __x64_sys_futex+0x34f/0x4d0 [ 51.450125][ T6016] __x64_sys_close_range+0x2e5/0x430 [ 51.450143][ T6016] ? __pfx___x64_sys_close_range+0x10/0x10 [ 51.450164][ T6016] do_syscall_64+0x123/0x790 [ 51.450178][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.450190][ T6016] RIP: 0033:0x7fab6719fb19 [ 51.450200][ T6016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.450211][ T6016] RSP: 002b:00007fab67f85028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 51.450224][ T6016] RAX: ffffffffffffffda RBX: 00007fab67426180 RCX: 00007fab6719fb19 [ 51.450231][ T6016] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 51.450238][ T6016] RBP: 00007fab67237b70 R08: 0000000000000000 R09: 0000000000000000 [ 51.450245][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.450252][ T6016] R13: 00007fab67426218 R14: 00007fab67426180 R15: 00007ffe26b0f2e8 [ 51.450267][ T6016] [ 51.466060][ T67] Bluetooth: hci4: command 0x1003 tx timeout [ 51.466057][ T5138] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 51.507934][ T42] kauditd_printk_skb: 87 callbacks suppressed [ 51.507948][ T42] audit: type=1400 audit(1793875527.687:251): avc: denied { mounton } for pid=6013 comm="syz.2.20" path="/7/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 52.109837][ T5950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 52.154510][ T42] audit: type=1400 audit(1793875528.327:252): avc: denied { unmount } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 52.290970][ T42] audit: type=1400 audit(1793875528.467:253): avc: denied { setopt } for pid=6032 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.363557][ T42] audit: type=1400 audit(1793875528.537:254): avc: denied { write } for pid=6036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.424919][ T5138] Bluetooth: hci0: Malformed Event: 0x13 [ 52.429610][ T42] audit: type=1400 audit(1793875528.607:255): avc: denied { write } for pid=6046 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.508901][ T42] audit: type=1400 audit(1793875528.687:256): avc: denied { write } for pid=6057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.547822][ T42] audit: type=1400 audit(1793875528.727:257): avc: denied { ioctl } for pid=6060 comm="syz.1.32" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11540 ioctlcmd=0x80306e85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.554430][ T42] audit: type=1400 audit(1793875528.727:258): avc: denied { read } for pid=6060 comm="syz.1.32" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 52.554462][ T42] audit: type=1400 audit(1793875528.727:259): avc: denied { open } for pid=6060 comm="syz.1.32" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 52.554484][ T42] audit: type=1400 audit(1793875528.727:260): avc: denied { ioctl } for pid=6060 comm="syz.1.32" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0xc02064b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 52.558384][ T6062] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.559611][ T6068] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 52.736299][ T1360] libceph: mon0 (1)[c::]:6789 socket error on write [ 52.783432][ T6080] ceph: No mds server is up or the cluster is laggy [ 52.835533][ T5138] Bluetooth: hci0: command tx timeout [ 52.835556][ T5138] Bluetooth: hci1: command tx timeout [ 52.835569][ T5138] Bluetooth: hci3: command tx timeout [ 52.916055][ T6083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=6083 comm=syz.1.34 [ 53.004746][ T5138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.006516][ T5138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.008125][ T5138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.009836][ T5138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.010267][ T5138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.058169][ T5850] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.109102][ T5850] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.197532][ T5850] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.223325][ T6092] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.245442][ T5850] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.392553][ T5850] bridge_slave_1: left allmulticast mode [ 53.392577][ T5850] bridge_slave_1: left promiscuous mode [ 53.393057][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.400264][ T5850] bridge_slave_0: left allmulticast mode [ 53.400280][ T5850] bridge_slave_0: left promiscuous mode [ 53.400416][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.479003][ T5850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.480906][ T5850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.481754][ T5850] bond0 (unregistering): Released all slaves [ 53.602574][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.602657][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.602712][ T6092] bridge_slave_0: entered allmulticast mode [ 53.603698][ T6092] bridge_slave_0: entered promiscuous mode [ 53.605298][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.605364][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.605418][ T6092] bridge_slave_1: entered allmulticast mode [ 53.606061][ T6092] bridge_slave_1: entered promiscuous mode [ 53.625743][ T6092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.627225][ T6092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.659314][ T6092] team0: Port device team_slave_0 added [ 53.660802][ T6092] team0: Port device team_slave_1 added [ 53.673158][ T6092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.673173][ T6092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.673195][ T6092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.674749][ T6092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.674758][ T6092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.674772][ T6092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.706427][ T6092] hsr_slave_0: entered promiscuous mode [ 53.706903][ T6092] hsr_slave_1: entered promiscuous mode [ 53.707202][ T6092] debugfs: 'hsr0' already exists in 'hsr' [ 53.707211][ T6092] Cannot create hsr debugfs directory [ 53.810197][ T5850] hsr_slave_0: left promiscuous mode [ 53.810631][ T5850] hsr_slave_1: left promiscuous mode [ 53.811034][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.811051][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.811659][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.811669][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.818627][ T5850] veth1_macvtap: left promiscuous mode [ 53.818655][ T5850] veth0_macvtap: left promiscuous mode [ 53.818719][ T5850] veth1_vlan: left promiscuous mode [ 53.818756][ T5850] veth0_vlan: left promiscuous mode [ 53.943425][ T5850] team0 (unregistering): Port device team_slave_1 removed [ 53.950376][ T5850] team0 (unregistering): Port device team_slave_0 removed [ 54.904735][ T5138] Bluetooth: hci3: command tx timeout [ 54.904809][ T67] Bluetooth: hci0: command tx timeout [ 54.904843][ T5138] Bluetooth: hci1: command tx timeout [ 55.074952][ T5138] Bluetooth: hci2: command tx timeout [ 55.731824][ T6080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 55.744189][ T6092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.757467][ T6092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.757905][ T6092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.771222][ T6092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.778084][ T6092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.792809][ T6129] netlink: 'syz.2.41': attribute type 11 has an invalid length. [ 55.815622][ T6092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.816407][ T6092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.819369][ T6092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.908529][ T6149] Zero length message leads to an empty skb [ 55.908673][ T6149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.44'. [ 55.934741][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 55.947517][ T6092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.960636][ T6092] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.966204][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.966254][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.970405][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.970448][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.131606][ T5491] 8021q: adding VLAN 0 to HW filter on device eth3 [ 56.283601][ T6092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.296951][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 56.320946][ T5491] 8021q: adding VLAN 0 to HW filter on device eth4 [ 56.438292][ T6092] veth0_vlan: entered promiscuous mode [ 56.443121][ T6092] veth1_vlan: entered promiscuous mode [ 56.459687][ T6092] veth0_macvtap: entered promiscuous mode [ 56.462147][ T6092] veth1_macvtap: entered promiscuous mode [ 56.472452][ T5491] 8021q: adding VLAN 0 to HW filter on device eth5 [ 56.476378][ T6092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.478290][ T6092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.504742][ T5934] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.504771][ T5934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.504790][ T5934] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.504809][ T5934] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.542265][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.542280][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.562639][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.562653][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.577955][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 56.601484][ T6213] hsr_slave_1 (unregistering): left promiscuous mode [ 56.610013][ T6212] netlink: 59 bytes leftover after parsing attributes in process `syz.1.54'. [ 56.615719][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 56.615730][ T42] audit: type=1400 audit(1793875532.787:283): avc: denied { mounton } for pid=6092 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 56.627975][ T6212] i2c i2c-0: new_device: Instantiated device rt1719 at 0x04 [ 56.684246][ T42] audit: type=1400 audit(1793875532.857:284): avc: denied { mount } for pid=6221 comm="syz.4.55" name="/" dev="9p" ino=71827645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.687704][ T42] audit: type=1400 audit(1793875532.867:285): avc: denied { write } for pid=6221 comm="syz.4.55" name="/" dev="9p" ino=71827645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.687959][ T42] audit: type=1400 audit(1793875532.867:286): avc: denied { add_name } for pid=6221 comm="syz.4.55" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.688208][ T42] audit: type=1400 audit(1793875532.867:287): avc: denied { create } for pid=6221 comm="syz.4.55" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.688384][ T42] audit: type=1400 audit(1793875532.867:288): avc: denied { associate } for pid=6221 comm="syz.4.55" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.690405][ T42] audit: type=1400 audit(1793875532.867:289): avc: denied { read write } for pid=6221 comm="syz.4.55" name="file0" dev="9p" ino=71827783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.690624][ T42] audit: type=1400 audit(1793875532.867:290): avc: denied { open } for pid=6221 comm="syz.4.55" path="/1/file0/file0" dev="9p" ino=71827783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.806732][ T42] audit: type=1400 audit(1793875532.987:291): avc: denied { write } for pid=6221 comm="syz.4.55" name="/" dev="9p" ino=71827645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.807004][ T42] audit: type=1400 audit(1793875532.987:292): avc: denied { create } for pid=6221 comm="syz.4.55" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 56.828837][ T6229] netlink: 'syz.1.57': attribute type 3 has an invalid length. [ 56.829878][ T6227] Invalid auth_tok structure returned from key query [ 56.829887][ T6227] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 56.829894][ T6227] One or more global auth toks could not properly register; rc = [-22] [ 56.829917][ T6227] Error validating options; rc = [-22] [ 57.144894][ T5138] Bluetooth: hci2: command tx timeout [ 57.152708][ T6248] device-mapper: table: 248:0: integrity: Not enough provided sectors for requested mapping size (-EINVAL) [ 57.152861][ T6248] device-mapper: ioctl: error adding target to table [ 57.190659][ T6257] 9p: Bad value for 'rfdno' [ 57.191235][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.65'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 57.514209][ T6275] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 57.559686][ T6275] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 57.597655][ T6278] 9pnet_virtio: no channels available for device syz [ 57.605699][ T6280] overlayfs: failed to resolve './file0': -2 [ 57.625345][ T6284] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 57.691219][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.73'. [ 57.840043][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 57.840066][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74'. [ 57.854308][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 57.854330][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74'. [ 57.865221][ T5850] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.865836][ T5850] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.866254][ T5934] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.875128][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.992953][ T6314] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 58.777784][ T6349] block nbd2: Unsupported socket: should be TCP or UNIX. [ 58.838052][ T6357] Cannot find del_set index 0 as target [ 59.225969][ T5138] Bluetooth: hci2: command tx timeout [ 59.234738][ T5649] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.386674][ T5649] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 59.388182][ T5649] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 59.388219][ T5649] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 59.388236][ T5649] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 59.388260][ T5649] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 59.395168][ T5649] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 59.395209][ T5649] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 59.395226][ T5649] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 59.395243][ T5649] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 59.398798][ T5649] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.398817][ T5649] usb 6-1: Product: syz [ 59.398829][ T5649] usb 6-1: Manufacturer: syz [ 59.398840][ T5649] usb 6-1: SerialNumber: syz [ 59.426757][ T5649] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 59.437345][ T5649] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 59.442075][ T5649] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 59.477691][ T6386] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 59.628312][ T6374] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 59.961325][ T6404] 9pnet_virtio: no channels available for device syz [ 60.047430][ T5649] bridge0: entered promiscuous mode [ 60.800404][ T6404] loop5: detected capacity change from 0 to 7 [ 60.806421][ T6404] Dev loop5: unable to read RDB block 7 [ 60.806442][ T6404] loop5: unable to read partition table [ 60.806528][ T6404] loop5: partition table beyond EOD, truncated [ 60.808765][ T6404] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 60.971173][ T6439] ip_tables: iptables: counters copy to user failed while replacing table [ 60.971770][ T6439] netlink: 'syz.0.121': attribute type 3 has an invalid length. [ 60.971786][ T6439] netlink: 64 bytes leftover after parsing attributes in process `syz.0.121'. [ 61.034122][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.035593][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.036170][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.037762][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.038337][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.038879][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.039375][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.039880][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.040500][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.040990][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.041487][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.041513][ T6445] ip_tables: iptables: counters copy to user failed while replacing table [ 61.041981][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.042735][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.043253][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.043733][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.044217][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.044751][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.045711][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.046201][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.046674][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.047123][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.047805][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.048501][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.048974][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.049526][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.050000][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.050518][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.050993][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.051447][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.052020][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.053225][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.053725][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.055966][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.056477][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.056973][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.057434][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.058147][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.058597][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.059085][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.059604][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.060098][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.060646][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.061101][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.061550][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.062176][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.062731][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.063201][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.063665][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.064153][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.066173][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.066784][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.067261][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.067733][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.068255][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.068714][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.069160][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.069665][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.070180][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.070704][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.071163][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.071612][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.072140][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.072630][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.073125][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.073577][ T6444] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 61.284678][ T5649] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 61.287838][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.304748][ T5138] Bluetooth: hci2: command tx timeout [ 61.350454][ T6459] /dev/nullb0: Can't open blockdev [ 61.376872][ T6459] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 61.415028][ T5649] usb 9-1: device descriptor read/64, error -71 [ 61.446566][ T6471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.684845][ T5649] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 61.814652][ T5649] usb 9-1: device descriptor read/64, error -71 [ 61.936373][ T5649] usb usb9-port1: attempt power cycle [ 61.970256][ T5150] usb 6-1: USB disconnect, device number 2 [ 61.985895][ T5150] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 61.990446][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 61.990466][ T42] audit: type=1400 audit(1793875538.167:373): avc: denied { unmount } for pid=5777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 61.991242][ T5150] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 61.991651][ T5150] ti_usb_3410_5052 6-1:2.0: device disconnected [ 62.091305][ T42] audit: type=1400 audit(1793875538.267:374): avc: denied { unmount } for pid=5788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 62.121620][ T42] audit: type=1400 audit(1793875538.297:375): avc: denied { write } for pid=6485 comm="syz.0.131" name="comedi2" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.121931][ T42] audit: type=1400 audit(1793875538.297:376): avc: denied { open } for pid=6485 comm="syz.0.131" path="/dev/comedi2" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.122791][ T42] audit: type=1400 audit(1793875538.297:377): avc: denied { ioctl } for pid=6485 comm="syz.0.131" path="/dev/comedi2" dev="devtmpfs" ino=1311 ioctlcmd=0x40946400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.124235][ T6486] netlink: 68 bytes leftover after parsing attributes in process `syz.0.131'. [ 62.294856][ T5649] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 62.315911][ T5649] usb 9-1: device descriptor read/8, error -71 [ 62.384773][ T5150] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.535376][ T5150] usb 6-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 62.536346][ T5150] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 62.536372][ T5150] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 62.536400][ T5150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.542602][ T6484] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.563875][ T5649] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 62.570300][ T5150] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.589955][ T5649] usb 9-1: device descriptor read/8, error -71 [ 62.695553][ T5649] usb usb9-port1: unable to enumerate USB device [ 62.749968][ T5649] usb 6-1: USB disconnect, device number 3 [ 62.801729][ T6495] Device name cannot be null; rc = [-22] [ 62.804838][ T6495] FAULT_INJECTION: forcing a failure. [ 62.804838][ T6495] name failslab, interval 1, probability 0, space 0, times 0 [ 62.804859][ T6495] CPU: 2 UID: 0 PID: 6495 Comm: syz.2.132 Not tainted syzkaller #0 PREEMPT(full) [ 62.804874][ T6495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.804893][ T6495] Call Trace: [ 62.804913][ T6495] [ 62.804919][ T6495] dump_stack_lvl+0x100/0x190 [ 62.804982][ T6495] should_fail_ex.cold+0x5/0xa [ 62.805010][ T6495] should_failslab+0xc2/0x120 [ 62.805028][ T6495] __kmalloc_cache_noprof+0x91/0x6d0 [ 62.805045][ T6495] ? __alloc_workqueue+0xc54/0x1900 [ 62.805074][ T6495] __alloc_workqueue+0xc54/0x1900 [ 62.805100][ T6495] alloc_workqueue_noprof+0xc7/0x130 [ 62.805118][ T6495] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 62.805139][ T6495] ? __ceph_monc_want_map+0x189/0x360 [ 62.805161][ T6495] ceph_get_tree+0x43d/0x2020 [ 62.805180][ T6495] ? security_capable+0x80/0x260 [ 62.805197][ T6495] vfs_get_tree+0x92/0x320 [ 62.805215][ T6495] path_mount+0x7d0/0x2850 [ 62.805236][ T6495] ? __pfx_path_mount+0x10/0x10 [ 62.805253][ T6495] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.805275][ T6495] ? putname+0xb1/0x110 [ 62.805290][ T6495] ? kmem_cache_free+0x127/0x6c0 [ 62.805311][ T6495] ? __x64_sys_mount+0x293/0x310 [ 62.805328][ T6495] __x64_sys_mount+0x293/0x310 [ 62.805348][ T6495] ? __pfx___x64_sys_mount+0x10/0x10 [ 62.805371][ T6495] do_syscall_64+0x123/0x790 [ 62.805385][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.805398][ T6495] RIP: 0033:0x7fab6719fb19 [ 62.805408][ T6495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.805419][ T6495] RSP: 002b:00007fab67fc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 62.805431][ T6495] RAX: ffffffffffffffda RBX: 00007fab67425fa0 RCX: 00007fab6719fb19 [ 62.805439][ T6495] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000240 [ 62.805446][ T6495] RBP: 00007fab67237b70 R08: 0000000000000000 R09: 0000000000000000 [ 62.805453][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.805459][ T6495] R13: 00007fab67426038 R14: 00007fab67425fa0 R15: 00007ffe26b0f2e8 [ 62.805475][ T6495] [ 62.953795][ T6484] tmpfs: Bad value for 'mpol' [ 63.038135][ T6504] netlink: 36 bytes leftover after parsing attributes in process `syz.2.135'. [ 63.038418][ T6503] netlink: 36 bytes leftover after parsing attributes in process `syz.2.135'. [ 63.085197][ T42] audit: type=1400 audit(1793875539.267:378): avc: denied { allowed } for pid=6506 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.087964][ T42] audit: type=1400 audit(1793875539.267:379): avc: denied { setopt } for pid=6507 comm="syz.0.137" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.088698][ T42] audit: type=1400 audit(1793875539.267:380): avc: denied { ioctl } for pid=6507 comm="syz.0.137" path="socket:[13654]" dev="sockfs" ino=13654 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.209618][ T42] audit: type=1400 audit(1793875539.387:381): avc: denied { append } for pid=6516 comm="syz.0.139" name="001" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 63.334662][ T856] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 63.484690][ T856] usb 9-1: device descriptor read/64, error -71 [ 63.488214][ T42] audit: type=1400 audit(1793875539.667:382): avc: denied { create } for pid=6521 comm="syz.1.140" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.724813][ T856] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 63.866064][ T856] usb 9-1: device descriptor read/64, error -71 [ 63.986093][ T856] usb usb9-port1: attempt power cycle [ 64.319176][ T6540] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 65.040242][ T6590] netlink: 104 bytes leftover after parsing attributes in process `syz.0.158'. [ 65.343771][ T6608] qrtr: Invalid version 0 [ 65.344184][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 65.344198][ T6608] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 65.484536][ T6625] process 'syz.0.167' launched './file2' with NULL argv: empty string added [ 65.825466][ T6643] netlink: 32 bytes leftover after parsing attributes in process `syz.4.168'. [ 65.996165][ T6658] ip6t_REJECT: ECHOREPLY is not supported [ 66.026413][ T6665] netlink: 'syz.2.175': attribute type 3 has an invalid length. [ 66.026427][ T6665] netlink: 'syz.2.175': attribute type 1 has an invalid length. [ 66.687824][ T6691] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 66.694282][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 66.814694][ T5850] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.883984][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884025][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884073][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884101][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884129][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884157][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884184][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884212][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884240][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884267][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884294][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884323][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884350][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884377][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884404][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884431][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884458][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884484][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884513][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.884540][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.889182][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.889251][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.889299][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.889345][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891106][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891193][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891243][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891289][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891341][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891388][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891434][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891480][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891526][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891572][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891618][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891669][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891715][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891761][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891806][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891851][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891897][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891943][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.891988][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.892057][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.892105][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.892152][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.892198][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.892241][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.892286][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.892333][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.892409][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.892474][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.892521][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.892565][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.892609][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.896291][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.896349][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.896395][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.896442][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.896488][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.896533][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.896578][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.896624][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.896675][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.896721][ T5138] Bluetooth: hci2: unexpected subevent 0x05 length: 5 < 12 [ 66.952469][ T6724] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 66.968573][ T6729] ip_tables: iptables: counters copy to user failed while replacing table [ 66.971814][ T6725] ======================================================= [ 66.971814][ T6725] WARNING: The mand mount option has been deprecated and [ 66.971814][ T6725] and is ignored by this kernel. Remove the mand [ 66.971814][ T6725] option from the mount to silence this warning. [ 66.971814][ T6725] ======================================================= [ 66.974913][ T6729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2324 sclass=netlink_route_socket pid=6729 comm=syz.2.192 [ 66.981168][ T6732] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.194' sets config #0 [ 67.011189][ T6735] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 67.012073][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 67.012095][ T42] audit: type=1400 audit(1793875543.187:434): avc: denied { mount } for pid=6734 comm="syz.2.195" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.012924][ T42] audit: type=1400 audit(1793875543.187:435): avc: denied { search } for pid=6734 comm="syz.2.195" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.013075][ T42] audit: type=1400 audit(1793875543.187:436): avc: denied { search } for pid=6734 comm="syz.2.195" name="nvmet" dev="configfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.013172][ T42] audit: type=1400 audit(1793875543.187:437): avc: denied { search } for pid=6734 comm="syz.2.195" name="ports" dev="configfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.014926][ T42] audit: type=1400 audit(1793875543.187:438): avc: denied { write search } for pid=6734 comm="syz.2.195" name="ports" dev="configfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.015511][ T42] audit: type=1400 audit(1793875543.197:439): avc: denied { add_name } for pid=6734 comm="syz.2.195" name="1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.015932][ T42] audit: type=1400 audit(1793875543.197:440): avc: denied { create } for pid=6734 comm="syz.2.195" name="1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 67.027332][ T42] audit: type=1400 audit(1793875543.207:441): avc: denied { unmount } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.082332][ T6742] netlink: 'syz.2.197': attribute type 1 has an invalid length. [ 67.095765][ T6742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.099902][ T42] audit: type=1400 audit(1793875543.277:442): avc: denied { write } for pid=6740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.112397][ T6742] bond1: (slave dummy0): making interface the new active one [ 67.113824][ T6742] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 67.115540][ T6742] netlink: 'syz.2.197': attribute type 2 has an invalid length. [ 67.115552][ T6742] netlink: 132 bytes leftover after parsing attributes in process `syz.2.197'. [ 67.118860][ T6742] netlink: 'syz.2.197': attribute type 10 has an invalid length. [ 67.118872][ T6742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.197'. [ 67.119306][ T6742] dummy0: entered promiscuous mode [ 67.131225][ T6742] bond1: (slave dummy0): Releasing active interface [ 67.156898][ T42] audit: type=1400 audit(1793875543.327:443): avc: denied { write } for pid=6748 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.302135][ T6774] mmap: syz.2.205 (6774) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.303906][ T6778] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 67.313346][ T6778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.464773][ T5138] Bluetooth: hci1: command 0x0406 tx timeout [ 67.591771][ T6805] CacheFiles: Failed to register: -95 [ 67.593597][ T6805] Cache volume key already in use (9p,syz,) [ 67.703139][ T6802] jffs2: notice: (6802) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 67.719535][ T6802] gadgetfs: bound to dummy_udc driver [ 67.789393][ T6817] device-mapper: table: 248:2: crypt: Error allocating crypto tfm (-EINVAL) [ 67.789419][ T6817] device-mapper: ioctl: error adding target to table [ 67.954712][ T5865] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 67.955017][ C0] gadgetfs: connected [ 67.955418][ T5865] gadgetfs: disconnected [ 68.114947][ C0] gadgetfs: connected [ 68.115894][ T5865] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 68.116214][ T5865] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 68.116246][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.120866][ C0] gadgetfs: configuration #1 [ 68.213432][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 68.276796][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 68.369881][ T6801] gadgetfs: suspended from state 3 [ 68.369987][ T6801] gadgetfs: disconnected [ 68.372124][ T29] usb 5-1: USB disconnect, device number 2 [ 68.859051][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 68.911874][ T6885] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 68.992202][ T6891] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 69.329023][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 69.435904][ T6910] netlink: 'syz.1.238': attribute type 10 has an invalid length. [ 69.441220][ T6910] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 69.447747][ T6910] team0: Port device wlan0 added [ 69.461644][ T6914] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 69.463339][ T6914] VFS: Can't find a romfs filesystem on dev nullb0. [ 69.463339][ T6914] [ 69.479517][ T6916] 9pnet_virtio: no channels available for device syz [ 69.516139][ T6922] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 70.637337][ T6941] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.304695][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.304778][ T6902] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 71.388637][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.397093][ T34] cfg80211: failed to load regulatory.db [ 72.148732][ T6902] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.155582][ T6902] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.160654][ T6902] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.160686][ T6902] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.162269][ T6902] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.162300][ T6902] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.163771][ T6902] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.167149][ T6902] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.167203][ T6902] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.282677][ T6947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'. [ 72.312108][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 72.312123][ T42] audit: type=1326 audit(1793875548.487:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.2.250" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab6719fb19 code=0x0 [ 72.331996][ T42] audit: type=1400 audit(1793875548.507:477): avc: denied { block_suspend } for pid=6951 comm="syz.4.251" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.405644][ T42] audit: type=1400 audit(1793875548.587:478): avc: denied { bind } for pid=6951 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.459322][ T42] audit: type=1400 audit(1793875548.637:479): avc: denied { mounton } for pid=6951 comm="syz.4.251" path="/proc/123/ns/cgroup" dev="proc" ino=14111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 72.472337][ T42] audit: type=1400 audit(1793875548.647:480): avc: denied { bind } for pid=6948 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.726737][ T6961] Invalid source name [ 72.726758][ T6961] UBIFS error (pid: 6961): cannot open "/dev/sg0", error -22 [ 73.108850][ T42] audit: type=1400 audit(1793875549.287:481): avc: denied { audit_control } for pid=6968 comm="syz.0.255" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.109102][ T42] audit: type=1400 audit(1793875549.287:482): avc: denied { getopt } for pid=6968 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.147794][ T6971] ip_tables: iptables: counters copy to user failed while replacing table [ 73.199720][ T6975] xt_l2tp: v2 doesn't support IP mode [ 73.255149][ T42] audit: type=1400 audit(1793875549.437:483): avc: denied { listen } for pid=6974 comm="syz.0.259" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 73.610918][ T42] audit: type=1400 audit(1793875549.787:484): avc: denied { mount } for pid=6979 comm="syz.1.260" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 73.611536][ T42] audit: type=1400 audit(1793875549.787:485): avc: denied { read } for pid=6979 comm="syz.1.260" name="available_tracers" dev="tracefs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 73.664333][ T6954] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 73.689324][ T6986] can0: slcan on ttyS3. [ 73.730226][ T6998] xt_cgroup: invalid path, errno=-2 [ 73.731367][ T6997] fuse: Bad value for 'user_id' [ 73.731377][ T6997] fuse: Bad value for 'user_id' [ 73.731793][ T6997] fuseblk: Unknown parameter 'gQg$X-}Ea0x0000000000000004' [ 73.776989][ T7013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.268'. [ 73.780841][ T7007] Invalid source name [ 73.780851][ T7007] UBIFS error (pid: 7007): cannot open "/dev/sg0", error -22 [ 73.781308][ T7007] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7007 comm=syz.2.268 [ 73.825340][ T6986] can0 (unregistered): slcan off ttyS3. [ 73.992523][ T7040] x_tables: ip_tables: udp match: only valid for protocol 17 [ 74.100563][ T7053] netlink: 76 bytes leftover after parsing attributes in process `syz.2.278'. [ 74.127855][ T7050] macvtap1: entered promiscuous mode [ 74.130084][ T7050] vlan0: entered promiscuous mode [ 74.133060][ T7050] team0: Device macvtap1 failed to register rx_handler [ 74.135257][ T7050] vlan0: left promiscuous mode [ 74.152911][ T7057] netlink: 'syz.2.279': attribute type 1 has an invalid length. [ 74.170051][ T7057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.184828][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 74.184858][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.184888][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 74.188491][ T7057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.188823][ T7057] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 74.189386][ T7057] bond2: (slave gre1): Error -95 calling set_mac_address [ 74.344110][ T7065] netlink: 'syz.2.281': attribute type 10 has an invalid length. [ 74.352833][ T7065] team0 (unregistering): Port device team_slave_0 removed [ 74.359506][ T7065] team0 (unregistering): Port device team_slave_1 removed [ 74.400886][ T7068] FAULT_INJECTION: forcing a failure. [ 74.400886][ T7068] name failslab, interval 1, probability 0, space 0, times 0 [ 74.400951][ T7068] CPU: 3 UID: 0 PID: 7068 Comm: syz.1.282 Not tainted syzkaller #0 PREEMPT(full) [ 74.400967][ T7068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.400983][ T7068] Call Trace: [ 74.401003][ T7068] [ 74.401008][ T7068] dump_stack_lvl+0x100/0x190 [ 74.401067][ T7068] should_fail_ex.cold+0x5/0xa [ 74.401102][ T7068] should_failslab+0xc2/0x120 [ 74.401120][ T7068] kmem_cache_alloc_noprof+0x92/0x6a0 [ 74.401140][ T7068] ? __pfx_vma_merge_new_range+0x10/0x10 [ 74.401157][ T7068] ? vm_area_dup+0x27/0x9d0 [ 74.401172][ T7068] vm_area_dup+0x27/0x9d0 [ 74.401185][ T7068] copy_vma+0x761/0x1710 [ 74.401206][ T7068] ? __pfx_copy_vma+0x10/0x10 [ 74.401236][ T7068] ? lock_acquire+0x1d1/0x380 [ 74.401266][ T7068] ? __vma_start_write+0x11c/0x280 [ 74.401281][ T7068] copy_vma_and_data+0x298/0x850 [ 74.401301][ T7068] ? __pfx_copy_vma_and_data+0x10/0x10 [ 74.401324][ T7068] ? __vma_start_write+0x17f/0x280 [ 74.401335][ T7068] ? __pfx___vma_start_write+0x10/0x10 [ 74.401358][ T7068] move_vma+0x2a0/0x11e0 [ 74.401373][ T7068] ? shmem_get_unmapped_area+0x141/0x960 [ 74.401393][ T7068] ? __pfx_move_vma+0x10/0x10 [ 74.401408][ T7068] ? security_mmap_addr+0x71/0x1e0 [ 74.401421][ T7068] ? __get_unmapped_area+0x255/0x3e0 [ 74.401443][ T7068] ? vrm_set_new_addr+0x1f5/0x2a0 [ 74.401460][ T7068] mremap_to+0x234/0x530 [ 74.401477][ T7068] ? __pfx_mremap_to+0x10/0x10 [ 74.401495][ T7068] __do_sys_mremap+0xc6b/0x17f0 [ 74.401513][ T7068] ? __pfx_futex_wait+0x10/0x10 [ 74.401538][ T7068] ? __pfx___do_sys_mremap+0x10/0x10 [ 74.401555][ T7068] ? rcu_read_lock_any_held+0x6a/0x90 [ 74.401570][ T7068] ? ksys_write+0x190/0x250 [ 74.401585][ T7068] ? do_futex+0x190/0x440 [ 74.401613][ T7068] ? __pfx_do_futex+0x10/0x10 [ 74.401634][ T7068] ? xfd_validate_state+0x129/0x190 [ 74.401655][ T7068] do_syscall_64+0x123/0x790 [ 74.401674][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.401687][ T7068] RIP: 0033:0x7f3384b9fb19 [ 74.401697][ T7068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.401709][ T7068] RSP: 002b:00007f3382dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 74.401722][ T7068] RAX: ffffffffffffffda RBX: 00007f3384e26090 RCX: 00007f3384b9fb19 [ 74.401730][ T7068] RDX: 0000000000600000 RSI: 0000000000009000 RDI: 0000200000000000 [ 74.401738][ T7068] RBP: 00007f3384c37b70 R08: 0000200000a00000 R09: 0000000000000000 [ 74.401747][ T7068] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 74.401755][ T7068] R13: 00007f3384e26128 R14: 00007f3384e26090 R15: 00007ffc6400c9e8 [ 74.401770][ T7068] [ 74.437824][ T7072] erofs (device loop2): cannot find valid erofs superblock [ 74.527916][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.285'. [ 74.569068][ T7074] nbd: couldn't find a device at index 0 [ 74.569280][ T7074] netlink: 1432 bytes leftover after parsing attributes in process `syz.1.284'. [ 74.704067][ T7089] BIDI support in bsg has been removed. [ 74.807880][ T67] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 74.809632][ T7096] Bluetooth: MGMT ver 1.23 [ 74.900290][ T7100] FAULT_INJECTION: forcing a failure. [ 74.900290][ T7100] name failslab, interval 1, probability 0, space 0, times 0 [ 74.900334][ T7100] CPU: 2 UID: 0 PID: 7100 Comm: syz.1.291 Not tainted syzkaller #0 PREEMPT(full) [ 74.900356][ T7100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.900378][ T7100] Call Trace: [ 74.900402][ T7100] [ 74.900408][ T7100] dump_stack_lvl+0x100/0x190 [ 74.900466][ T7100] should_fail_ex.cold+0x5/0xa [ 74.900504][ T7100] should_failslab+0xc2/0x120 [ 74.900529][ T7100] kmem_cache_alloc_noprof+0x92/0x6a0 [ 74.900558][ T7100] ? __asan_memcpy+0x3c/0x60 [ 74.900586][ T7100] ? __kernfs_new_node+0xd2/0xa10 [ 74.900611][ T7100] __kernfs_new_node+0xd2/0xa10 [ 74.900635][ T7100] ? __pfx___kernfs_new_node+0x10/0x10 [ 74.900653][ T7100] ? lock_acquire+0x1d1/0x380 [ 74.900679][ T7100] ? kernfs_root+0x23/0x2a0 [ 74.900696][ T7100] ? find_held_lock+0x2b/0x80 [ 74.900709][ T7100] ? kernfs_root+0xee/0x2a0 [ 74.900727][ T7100] ? kernfs_root+0xee/0x2a0 [ 74.900753][ T7100] kernfs_new_node+0x194/0x200 [ 74.900767][ T7100] ? __pfx_kernfs_new_node+0x10/0x10 [ 74.900780][ T7100] ? pcpu_block_update+0x20b/0x690 [ 74.900801][ T7100] __kernfs_create_file+0x53/0x350 [ 74.900818][ T7100] cgroup_addrm_files+0x48e/0xd30 [ 74.900846][ T7100] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 74.900864][ T7100] ? css_next_descendant_pre+0x58/0x1a0 [ 74.900884][ T7100] css_populate_dir+0x161/0x590 [ 74.900900][ T7100] cgroup_apply_control_enable+0x441/0xdd0 [ 74.900925][ T7100] cgroup_mkdir+0x9da/0x13a0 [ 74.900946][ T7100] ? __pfx_cgroup_mkdir+0x10/0x10 [ 74.900966][ T7100] kernfs_iop_mkdir+0x111/0x190 [ 74.900977][ T7100] ? security_inode_mkdir+0xc9/0x2b0 [ 74.901006][ T7100] vfs_mkdir+0x36d/0x8a0 [ 74.901029][ T7100] filename_mkdirat+0x4c4/0x630 [ 74.901047][ T7100] ? __pfx_filename_mkdirat+0x10/0x10 [ 74.901063][ T7100] ? strncpy_from_user+0x19d/0x2d0 [ 74.901083][ T7100] ? do_getname+0x191/0x390 [ 74.901102][ T7100] __x64_sys_mkdirat+0x89/0xc0 [ 74.901119][ T7100] do_syscall_64+0x123/0x790 [ 74.901137][ T7100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.901151][ T7100] RIP: 0033:0x7f3384b9fb19 [ 74.901163][ T7100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.901174][ T7100] RSP: 002b:00007f3382df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 74.901188][ T7100] RAX: ffffffffffffffda RBX: 00007f3384e25fa0 RCX: 00007f3384b9fb19 [ 74.901196][ T7100] RDX: 00000000000001ff RSI: 0000200000000200 RDI: ffffffffffffff9c [ 74.901204][ T7100] RBP: 00007f3384c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 74.901212][ T7100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.901219][ T7100] R13: 00007f3384e26038 R14: 00007f3384e25fa0 R15: 00007ffc6400c9e8 [ 74.901235][ T7100] [ 74.901276][ T7100] cgroup: cgroup_addrm_files: failed to add reset_stats, err=-12 [ 74.933461][ T7106] netlink: 'syz.1.292': attribute type 4 has an invalid length. [ 74.933473][ T7106] netlink: 17 bytes leftover after parsing attributes in process `syz.1.292'. [ 75.112525][ T7116] netlink: 1092 bytes leftover after parsing attributes in process `syz.2.295'. [ 75.148363][ T7118] overlayfs: failed to resolve 'smackfsdef=nUZ&``_h;'eF*vb*C/B7ֽSd)?kM9_݋"`K': -2 [ 75.263929][ T7128] [U] [ 75.263953][ T7128] [U] [ 75.263958][ T7128] [U] xc [ 75.263964][ T7128] [U] @nA”a [ 75.263984][ T7128] [U] =cԒB섬o? ?vka*vzn.wug: dBZi*O1˾id;xkyt$ڹoHxk4;6]aMCjR. [ 75.264032][ T7128] [U] ƽ݈Q?o<\cӢqp [ 75.264041][ T7128] [U] 8S2n48mmg$ [ 75.264050][ T7128] [U] [g~R [ 75.264058][ T7128] [U] m 6;x [ 75.264069][ T7128] [U] a ꈛX"r'gi¨t* 1 [ 75.264079][ T7128] [U] ;`3Jbo0e[ [ 75.264091][ T7128] [U] ᓗ֖X} [ 75.264102][ T7128] [U] 8D [ 75.264109][ T7128] [U] V1bBk~ [ 75.264129][ T7128] [U] Go*K_obؠq@`e/.O+{FN\?tZ~94N$'^-tk'Rƹ_'"R!&Yne[HxLAk"=2FxrOCh|~`‹R/o툓_u-^6ޣB}(Uҫ"BrQ#:!bFK3:H_JWA%T'A\QC,ov*[HWe\>_bߊ@F[wt [ 75.264494][ T7128] [U] ,V_$}3-5`?EL4(VQ%+Cc5k x_/G)8"[Y+D" [ 75.264503][ T7128] [U] p.0<#bJ}MaQbEA(0/F [ 75.264521][ T7128] [U] C%b@X^$lC6|+('at—a;Z8BvA=._im9E 9/J6II9 [ 75.264533][ T7128] [U] OTWv噯V[S0+E 5FJx%T!P*M$bLMtgXO]7GUSMhyQj~e+˚Nr' [ 75.270633][ T7128] [U] +\ZGKyH,])^WbkqGtMlPɊDzC-xy+kb9K>2dp dzBR`T91; [ 75.270654][ T7128] [U] ս;Э(p [ 75.270659][ T7128] [U] a~6/vl{]u [ 75.270671][ T7128] [U] 1 r6?Qbo;쉂*z gX?!n!bܿq_I :,>=6 [ 75.270678][ T7128] [U] Ip [ 75.270685][ T7128] [U] miPl [ 75.270726][ T7128] [U] *#&@zN [ 75.270834][ T7128] [U] inux/checkreqprot [ 75.270865][ T7128] [U] [ 75.270884][ T7128] [U] [ 75.270901][ T7128] [U] [ 75.271789][ T7128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'. [ 75.286930][ T7123] netlink: 'syz.1.297': attribute type 3 has an invalid length. [ 75.288060][ T7123] netlink: 'syz.1.297': attribute type 3 has an invalid length. [ 75.289462][ T7122] [U] [ 75.435867][ T7140] ip_tables: iptables: counters copy to user failed while replacing table [ 75.436631][ T7141] ip_tables: iptables: counters copy to user failed while replacing table [ 75.437906][ T7141] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 75.450379][ T7139] tls_set_device_offload: netdev not found [ 75.540866][ T7160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=7160 comm=syz.4.306 [ 75.576222][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.307'. [ 75.900959][ T7176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.928231][ T7176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.065922][ T7188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'. [ 76.072936][ T7186] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 76.078382][ T7186] FAULT_INJECTION: forcing a failure. [ 76.078382][ T7186] name failslab, interval 1, probability 0, space 0, times 0 [ 76.078400][ T7186] CPU: 0 UID: 0 PID: 7186 Comm: syz.4.315 Not tainted syzkaller #0 PREEMPT(full) [ 76.078413][ T7186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.078420][ T7186] Call Trace: [ 76.078424][ T7186] [ 76.078428][ T7186] dump_stack_lvl+0x100/0x190 [ 76.078452][ T7186] should_fail_ex.cold+0x5/0xa [ 76.078471][ T7186] should_failslab+0xc2/0x120 [ 76.078484][ T7186] kmem_cache_alloc_noprof+0x92/0x6a0 [ 76.078502][ T7186] ? __pfx_map_id_range_down+0x10/0x10 [ 76.078521][ T7186] ? rcu_is_watching+0x13/0xc0 [ 76.078535][ T7186] ? security_inode_alloc+0x3b/0x2c0 [ 76.078555][ T7186] security_inode_alloc+0x3b/0x2c0 [ 76.078585][ T7186] inode_init_always_gfp+0xc75/0xfb0 [ 76.078606][ T7186] alloc_inode+0x8e/0x250 [ 76.078617][ T7186] sock_alloc+0x42/0x240 [ 76.078647][ T7186] __sock_create+0xc2/0x860 [ 76.078666][ T7186] __sys_socket+0x14d/0x260 [ 76.078684][ T7186] ? __pfx___sys_socket+0x10/0x10 [ 76.078705][ T7186] __x64_sys_socket+0x72/0xb0 [ 76.078727][ T7186] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.078739][ T7186] do_syscall_64+0x123/0x790 [ 76.078753][ T7186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.078765][ T7186] RIP: 0033:0x7fb39699fb19 [ 76.078774][ T7186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.078785][ T7186] RSP: 002b:00007fb39780a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 76.078797][ T7186] RAX: ffffffffffffffda RBX: 00007fb396c25fa0 RCX: 00007fb39699fb19 [ 76.078804][ T7186] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 76.078811][ T7186] RBP: 00007fb396a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 76.078818][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.078824][ T7186] R13: 00007fb396c26038 R14: 00007fb396c25fa0 R15: 00007fffd9a4f308 [ 76.078839][ T7186] [ 76.078869][ T7186] socket: no more sockets [ 76.158706][ T67] Bluetooth: hci3: ACL packet for unknown connection handle 14 [ 76.182595][ T7213] bond_slave_0: entered allmulticast mode [ 76.264750][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 76.264777][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.320011][ T7219] netlink: 'syz.1.323': attribute type 1 has an invalid length. [ 76.468439][ T7221] FAT-fs (nullb0): bogus number of reserved sectors [ 76.468463][ T7221] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 76.685370][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.686898][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.687580][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.689464][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.691346][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.692063][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.692698][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.693679][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.694296][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.697420][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.699712][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.701955][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.704089][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.707423][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.709723][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.711960][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.714191][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.716647][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.718963][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.721179][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.723419][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.723448][ T7236] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 76.725638][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.727863][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.730048][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.732244][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.734383][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.736715][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.738852][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.741097][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.746264][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.748572][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.750676][ T7227] overlay: filesystem on ./bus not supported as upperdir [ 76.793933][ T7240] Cannot find add_set index 1 as target [ 76.939667][ T7249] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.939683][ T7249] block device autoloading is deprecated and will be removed. [ 77.094843][ T7250] md: md4: array is limited to 27 devices [ 77.313657][ T7261] loop2: detected capacity change from 0 to 7 [ 77.330345][ T7261] Dev loop2: unable to read RDB block 7 [ 77.330365][ T7261] loop2: AHDI p1 p2 p3 [ 77.330376][ T7261] loop2: partition table partially beyond EOD, truncated [ 77.330510][ T7261] loop2: p1 start 1818582900 is beyond EOD, truncated [ 77.330520][ T7261] loop2: p3 start 335544320 is beyond EOD, truncated [ 77.342973][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 77.343001][ T42] audit: type=1400 audit(1793875553.517:534): avc: denied { write } for pid=7263 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.389251][ T5491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.395230][ T42] audit: type=1400 audit(1793875553.577:535): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 77.419272][ T42] audit: type=1326 audit(1793875553.597:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.4.335" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb39699fb19 code=0x0 [ 77.456636][ T42] audit: type=1400 audit(1793875553.637:537): avc: denied { write } for pid=7273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.493531][ T7275] __nla_validate_parse: 3 callbacks suppressed [ 77.493550][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.336'. [ 77.524115][ T42] audit: type=1400 audit(1793875553.707:538): avc: denied { write } for pid=7281 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.576394][ T42] audit: type=1400 audit(1793875553.757:539): avc: denied { name_bind } for pid=7284 comm="syz.0.338" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 77.742657][ T7296] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 77.755028][ T7296] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.963836][ T7016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.019616][ T42] audit: type=1400 audit(1793875554.197:540): avc: denied { append } for pid=7304 comm="syz.1.345" name="control" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 78.023019][ T7305] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.053982][ T7016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.071076][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.072560][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.073519][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.078041][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.078401][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.130300][ T7016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.200738][ T42] audit: type=1400 audit(1793875554.377:541): avc: denied { remount } for pid=7320 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.210346][ T42] audit: type=1400 audit(1793875554.397:542): avc: denied { getopt } for pid=7320 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.223947][ T7016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.278335][ T7309] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.335250][ T7016] bridge_slave_1: left allmulticast mode [ 78.335270][ T7016] bridge_slave_1: left promiscuous mode [ 78.335455][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.337322][ T7016] bridge_slave_0: left allmulticast mode [ 78.337337][ T7016] bridge_slave_0: left promiscuous mode [ 78.337429][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.354779][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.472777][ T7016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.474494][ T7016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.482945][ T7016] bond0 (unregistering): Released all slaves [ 78.485541][ T7339] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 78.493009][ T7338] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 78.515215][ T7339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.529562][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 78.566948][ T42] audit: type=1400 audit(1793875554.747:543): avc: denied { write } for pid=7342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.568337][ T7344] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 78.568352][ T7344] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.569966][ T7344] vhci_hcd vhci_hcd.0: Device attached [ 78.570971][ T7346] vhci_hcd: cannot find a urb of seqnum 63219 max seqnum 0 [ 78.573761][ T12] vhci_hcd vhci_hcd.1: stop threads [ 78.573772][ T12] vhci_hcd vhci_hcd.1: release socket [ 78.573786][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 78.615500][ T7352] bond1: (slave geneve2): making interface the new active one [ 78.616614][ T7352] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 78.690833][ T5491] 8021q: adding VLAN 0 to HW filter on device eth6 [ 78.786114][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.792434][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.793358][ T7309] bridge_slave_0: entered allmulticast mode [ 78.793713][ T7371] netlink: 92 bytes leftover after parsing attributes in process `syz.0.355'. [ 78.799836][ T7309] bridge_slave_0: entered promiscuous mode [ 78.803808][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.803855][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.804028][ T7309] bridge_slave_1: entered allmulticast mode [ 78.804853][ T7309] bridge_slave_1: entered promiscuous mode [ 78.842789][ T5491] 8021q: adding VLAN 0 to HW filter on device eth7 [ 78.850323][ T7309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.851726][ T7309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.880676][ T7309] team0: Port device team_slave_0 added [ 78.881992][ T7309] team0: Port device team_slave_1 added [ 78.920733][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.920746][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.920761][ T7309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.921996][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.922005][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.922019][ T7309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.935660][ T7016] hsr_slave_0: left promiscuous mode [ 78.936132][ T7016] hsr_slave_1: left promiscuous mode [ 78.936554][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.936572][ T7016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.943211][ T7016] veth1_macvtap: left promiscuous mode [ 78.943290][ T7016] veth0_macvtap: left promiscuous mode [ 78.943335][ T7016] veth1_vlan: left promiscuous mode [ 78.943393][ T7016] veth0_vlan: left promiscuous mode [ 79.087860][ T7016] team0 (unregistering): Port device team_slave_1 removed [ 79.103505][ T7016] team0 (unregistering): Port device team_slave_0 removed [ 79.205632][ T7383] Option ''MO' to dns_resolver key: bad/missing value [ 79.239356][ T7309] hsr_slave_0: entered promiscuous mode [ 79.239782][ T7309] hsr_slave_1: entered promiscuous mode [ 79.240125][ T7309] debugfs: 'hsr0' already exists in 'hsr' [ 79.240135][ T7309] Cannot create hsr debugfs directory [ 79.269625][ T7382] cgroup2: Unknown parameter '(\' [ 79.402187][ T5491] 8021q: adding VLAN 0 to HW filter on device eth8 [ 79.403413][ T7309] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.408362][ T7309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.411188][ T7309] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.413424][ T7309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.414236][ T7309] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.418924][ T7309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.420935][ T7309] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.427874][ T7309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.486074][ T7309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.498945][ T7309] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.504201][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.504286][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.510176][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.510219][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.631743][ T5491] 8021q: adding VLAN 0 to HW filter on device eth9 [ 79.666735][ T7417] netlink: 128 bytes leftover after parsing attributes in process `syz.1.361'. [ 79.667126][ T7418] netlink: 128 bytes leftover after parsing attributes in process `syz.1.361'. [ 79.908057][ T7309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.068189][ T7309] veth0_vlan: entered promiscuous mode [ 80.079039][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 80.079052][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 80.079067][ T7436] netlink: 'syz.0.362': attribute type 7 has an invalid length. [ 80.079074][ T7436] netlink: 'syz.0.362': attribute type 13 has an invalid length. [ 80.082391][ T7309] veth1_vlan: entered promiscuous mode [ 80.101205][ T7309] veth0_macvtap: entered promiscuous mode [ 80.103623][ T7309] veth1_macvtap: entered promiscuous mode [ 80.111863][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.115197][ T67] Bluetooth: hci2: command tx timeout [ 80.117922][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.167467][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.167490][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.180304][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.180318][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.196614][ T5822] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.196642][ T5822] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.196662][ T5822] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.196681][ T5822] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.259814][ T7455] capability: warning: `syz.5.344' uses deprecated v2 capabilities in a way that may be insecure [ 80.365732][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.367413][ T7464] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 80.367432][ T7464] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 80.367457][ T7464] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 80.367466][ T7464] One or more global auth toks could not properly register; rc = [-22] [ 80.367514][ T7464] Error validating options; rc = [-22] [ 80.525107][ T34] usb 5-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 80.526014][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 80.526031][ T34] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 80.528723][ T34] usb 5-1: string descriptor 0 read error: -22 [ 80.528779][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.535945][ T34] etas_es58x 5-1:1.0: Starting (null) (null) (Serial Number (null)) [ 80.536054][ T34] etas_es58x 5-1:1.0: could not retrieve the product info string [ 80.751827][ T5491] etas_es58x 5-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 80.752388][ C3] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 80.752594][ C3] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 80.753239][ C3] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 80.753494][ C3] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 80.753672][ C3] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 80.753711][ T5491] etas_es58x 5-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 80.789866][ T7443] FAULT_INJECTION: forcing a failure. [ 80.789866][ T7443] name fail_futex, interval 1, probability 0, space 0, times 1 [ 80.789888][ T7443] CPU: 1 UID: 0 PID: 7443 Comm: syz.0.364 Not tainted syzkaller #0 PREEMPT(full) [ 80.789903][ T7443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.789921][ T7443] Call Trace: [ 80.789942][ T7443] [ 80.789949][ T7443] dump_stack_lvl+0x100/0x190 [ 80.790010][ T7443] should_fail_ex.cold+0x5/0xa [ 80.790038][ T7443] get_futex_key+0x1c9/0x13e0 [ 80.790079][ T7443] ? __pfx_get_futex_key+0x10/0x10 [ 80.790096][ T7443] futex_wake+0xf4/0x5e0 [ 80.790113][ T7443] ? ioctx_alloc+0x143b/0x21d0 [ 80.790134][ T7443] ? __pfx_futex_wake+0x10/0x10 [ 80.790159][ T7443] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.790178][ T7443] ? do_raw_spin_lock+0x128/0x260 [ 80.790191][ T7443] ? find_held_lock+0x2b/0x80 [ 80.790206][ T7443] do_futex+0x2b2/0x440 [ 80.790221][ T7443] ? __pfx_do_futex+0x10/0x10 [ 80.790235][ T7443] ? ioctx_alloc+0x110/0x21d0 [ 80.790257][ T7443] __x64_sys_futex+0x34f/0x4d0 [ 80.790272][ T7443] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 80.790292][ T7443] ? __pfx___x64_sys_futex+0x10/0x10 [ 80.790313][ T7443] do_syscall_64+0x123/0x790 [ 80.790327][ T7443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.790341][ T7443] RIP: 0033:0x7fd1a3d9fb19 [ 80.790351][ T7443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.790364][ T7443] RSP: 002b:00007fd1a4d4c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 80.790376][ T7443] RAX: ffffffffffffffda RBX: 00007fd1a4025fa8 RCX: 00007fd1a3d9fb19 [ 80.790384][ T7443] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd1a4025fac [ 80.790392][ T7443] RBP: 00007fd1a4025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 80.790399][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.790406][ T7443] R13: 00007fd1a4026038 R14: 00007ffc42bb17c0 R15: 00007ffc42bb18a8 [ 80.790421][ T7443] [ 80.841505][ T856] usb 5-1: USB disconnect, device number 3 [ 80.850134][ T856] etas_es58x 5-1:1.0: Disconnecting (null) (null) [ 80.894858][ T5491] etas_es58x 5-1:1.0: es58x_alloc_rx_urbs: Could not setup any rx URBs [ 81.080836][ T7487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.370'. [ 81.094180][ T7489] netlink: 36 bytes leftover after parsing attributes in process `syz.5.370'. [ 81.275654][ T7501] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.275672][ T7501] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 81.280269][ T7501] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.280286][ T7501] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 81.283952][ T7501] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.283990][ T7501] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 81.661112][ T7517] syz.0.376 uses obsolete (PF_INET,SOCK_PACKET) [ 81.731214][ T7523] capability: warning: `syz.0.376' uses 32-bit capabilities (legacy support in use) [ 82.314727][ T5649] ================================================================== [ 82.314752][ T5649] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 82.314789][ T5649] Write of size 8 at addr ffffc900050e5180 by task kworker/3:3/5649 [ 82.314799][ T5649] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 82.314806][ T5649] CPU: 3 UID: 0 PID: 5649 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full) [ 82.314820][ T5649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.314829][ T5649] Workqueue: events_power_efficient fb_flashcursor [ 82.314844][ T5649] Call Trace: [ 82.314848][ T5649] [ 82.314853][ T5649] dump_stack_lvl+0x100/0x190 [ 82.314874][ T5649] print_report+0x13d/0x4b0 [ 82.314892][ T5649] ? _raw_spin_lock_irqsave+0x52/0x60 [ 82.314911][ T5649] ? sys_imageblit+0x19fb/0x1d60 [ 82.314928][ T5649] kasan_report+0xdf/0x1c0 [ 82.314942][ T5649] ? sys_imageblit+0x19fb/0x1d60 [ 82.314961][ T5649] sys_imageblit+0x19fb/0x1d60 [ 82.314980][ T5649] ? __pfx_sys_imageblit+0x10/0x10 [ 82.315000][ T5649] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 82.315020][ T5649] soft_cursor+0x524/0xa10 [ 82.315037][ T5649] bit_cursor+0xcf1/0x14d0 [ 82.315053][ T5649] ? __pfx_bit_cursor+0x10/0x10 [ 82.315070][ T5649] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.315091][ T5649] ? get_color+0x1da/0x450 [ 82.315102][ T5649] ? __pfx_bit_cursor+0x10/0x10 [ 82.315116][ T5649] fb_flashcursor+0x338/0x430 [ 82.315128][ T5649] process_one_work+0xac7/0x1b10 [ 82.315151][ T5649] ? __pfx_process_one_work+0x10/0x10 [ 82.315170][ T5649] ? lock_acquire+0x1d1/0x380 [ 82.315198][ T5649] ? __pfx_fb_flashcursor+0x10/0x10 [ 82.315218][ T5649] worker_thread+0x5ef/0xe50 [ 82.315242][ T5649] ? __pfx_worker_thread+0x10/0x10 [ 82.315261][ T5649] ? kthread+0x13a/0x450 [ 82.315271][ T5649] ? __pfx_worker_thread+0x10/0x10 [ 82.315283][ T5649] kthread+0x373/0x450 [ 82.315293][ T5649] ? __pfx_kthread+0x10/0x10 [ 82.315304][ T5649] ret_from_fork+0x730/0xd60 [ 82.315320][ T5649] ? __pfx_ret_from_fork+0x10/0x10 [ 82.315336][ T5649] ? __switch_to+0x800/0x10e0 [ 82.315347][ T5649] ? __pfx_kthread+0x10/0x10 [ 82.315358][ T5649] ret_from_fork_asm+0x1a/0x30 [ 82.315375][ T5649] [ 82.315379][ T5649] [ 82.315382][ T5649] The buggy address belongs to a vmalloc virtual mapping [ 82.315401][ T5649] Memory state around the buggy address: [ 82.315407][ T5649] ffffc900050e5080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 82.315415][ T5649] ffffc900050e5100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 82.315422][ T5649] >ffffc900050e5180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 82.315428][ T5649] ^ [ 82.315434][ T5649] ffffc900050e5200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 82.315442][ T5649] ffffc900050e5280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 82.315448][ T5649] ================================================================== [ 82.316277][ T5649] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.411684][ T5649] CPU: 3 UID: 0 PID: 5649 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full) [ 82.414704][ T5649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.417979][ T5649] Workqueue: events_power_efficient fb_flashcursor [ 82.420146][ T5649] Call Trace: [ 82.421303][ T5649] [ 82.422295][ T5649] dump_stack_lvl+0x100/0x190 [ 82.423896][ T5649] vpanic+0x2dc/0x6f8 [ 82.425236][ T5649] panic+0xd1/0xe0 [ 82.426481][ T5649] ? __pfx_panic+0x10/0x10 [ 82.427999][ T5649] ? sys_imageblit+0x19fb/0x1d60 [ 82.429698][ T5649] ? preempt_schedule+0x57/0xd0 [ 82.431317][ T5649] check_panic_on_warn.cold+0x19/0x34 [ 82.433083][ T5649] end_report.part.0+0x3a/0x90 [ 82.434691][ T5649] kasan_report.cold+0xe/0x18 [ 82.436262][ T5649] ? sys_imageblit+0x19fb/0x1d60 [ 82.437928][ T5649] sys_imageblit+0x19fb/0x1d60 [ 82.439575][ T5649] ? __pfx_sys_imageblit+0x10/0x10 [ 82.441286][ T5649] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 82.443314][ T5649] soft_cursor+0x524/0xa10 [ 82.444863][ T5649] bit_cursor+0xcf1/0x14d0 [ 82.446337][ T5649] ? __pfx_bit_cursor+0x10/0x10 [ 82.447996][ T5649] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.450061][ T5649] ? get_color+0x1da/0x450 [ 82.451611][ T5649] ? __pfx_bit_cursor+0x10/0x10 [ 82.453237][ T5649] fb_flashcursor+0x338/0x430 [ 82.454834][ T5649] process_one_work+0xac7/0x1b10 [ 82.456474][ T5649] ? __pfx_process_one_work+0x10/0x10 [ 82.458310][ T5649] ? lock_acquire+0x1d1/0x380 [ 82.459856][ T5649] ? __pfx_fb_flashcursor+0x10/0x10 [ 82.461599][ T5649] worker_thread+0x5ef/0xe50 [ 82.463111][ T5649] ? __pfx_worker_thread+0x10/0x10 [ 82.464811][ T5649] ? kthread+0x13a/0x450 [ 82.466233][ T5649] ? __pfx_worker_thread+0x10/0x10 [ 82.468217][ T5649] kthread+0x373/0x450 [ 82.469542][ T5649] ? __pfx_kthread+0x10/0x10 [ 82.470992][ T5649] ret_from_fork+0x730/0xd60 [ 82.472457][ T5649] ? __pfx_ret_from_fork+0x10/0x10 [ 82.474076][ T5649] ? __switch_to+0x800/0x10e0 [ 82.475542][ T5649] ? __pfx_kthread+0x10/0x10 [ 82.477043][ T5649] ret_from_fork_asm+0x1a/0x30 [ 82.478551][ T5649] [ 82.480093][ T5649] Kernel Offset: disabled [ 82.481447][ T5649] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:45:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=000000000003bab9 RCX=1ffff1100dff541f RDX=0000000000000001 RSI=ffffffff8c835300 RDI=ffffffff8c835340 RBP=ffff88801e280000 RSP=ffffc9000351f1b8 R8 =0000000000001000 R9 =0000000000000000 R10=0000000000000200 R11=0000000000000001 R12=000000000003bab9 R13=0000000004cc03bd R14=0000000000000001 R15=000000000000022f RIP=ffffffff8bee4aa8 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d447c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f25ce557e20 CR3=000000002cdc0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfda24e60 00007ffdfda24e60 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25cd9fa823 00007f25cd9fa823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25cd9fae80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25cd9fae80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555595ea3a8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffff30803f003 00020003ee0303fe 020003ec03020200 03ea030000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030fffffffffff ff040380047c1000 060178ae00000000 000001ffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0120100044800400 100007ffd6100004 8004010000040806 0c016e8e00048800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4488030004840044 8403040400448003 e01c04080480030f ffffffffffff0403 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80047c1000060178 ae00000000000001 ffffffffffffffff f30803f003000200 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03ee0303fe020003 ec0302020003ea03 0000000000000000 000000000001ffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffffff8ffeaf60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8e71dbf7 RDI=ffffffff8c835380 RBP=0000000000000001 RSP=ffffc900031cf938 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000200 R11=0000000000000001 R12=ffff88802d170000 R13=000000000000000f R14=0000000000000202 R15=000000110c22ffff RIP=ffffffff8bee4aca RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f8ee12136c0 ffffffff 00c00000 GS =0000 ffff8880d457c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000006c7000 CR3=0000000015635000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000008000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000121 Opmask01=0000000000000000 Opmask02=00000000d511000f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000001db5ad0e 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6863746170736964 5f746f6f725f7370 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15a9dafb20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b20657479622d32 3320646e61707865 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69622f3a6e6962 732f7273752f3a6e 69622f7273752f00 0a732520202d2000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b4c470a1f4b4c47 560a5756500a1f4b 4c470a5756500a00 0a56000505080500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39773b3a3633211c 1a0f0c060379010e 3701013563538263 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 99952f5967f2a91a 7f3201000100fc50 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d194ff133dd00502 39773b3a3633211c 1a0f0c060379010e 3701013563538263 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a20630a0a63200a 6461613664202020 61612061200a2061 2020203500366400 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff8880273a9a48 RBX=0000000000000001 RCX=ffffffff81e9a738 RDX=ffff888028e4b0c8 RSI=0000000000000000 RDI=ffff8880273a9a60 RBP=ffffc90003e9f710 RSP=ffffc90003e9f5e0 R8 =0000000000000001 R9 =fffff520007d3eaa R10=0000000000000003 R11=0000000000000000 R12=dffffc0000000000 R13=ffff8880328fe000 R14=ffff888025d09348 R15=ffff8880328ff000 RIP=ffffffff85456c8e RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555ee42500 ffffffff 00c00000 GS =0000 ffff8880d467c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffdc325b9f8 CR3=00000000518d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe26b0c380 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73726f746365732e 7166622e6f696b6c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe26b0f7d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe26b0f7d6 00007ffe26b0f7dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab672381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab672381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab6723834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab672381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c2bbf5 RDI=ffffffff9cf4c040 RBP=ffffffff9cf4c000 RSP=ffffc900037cf098 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=3030303963666657 R12=0000000000000000 R13=0000000000000035 R14=0000000000000004 R15=ffffc900037cf3b0 RIP=ffffffff85c2bc1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d477c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3384e27dac CR3=0000000036c12000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f338595d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6400ced6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6400ced6 00007ffc6400cedc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3384c381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3384c381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3384c3834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3384c381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3384dfa600 00007f3384dfa5e0 00007f3384dfa5e8 00007f3384dfa618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f338595d020 00007f3384dfa5c0 00007f3384dfa5d0 00007f3384dfa610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3384dfa5f8 00007f3384dfa5c8 00007f3384dfa600 00007f3384dfa5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000