last executing test programs: 1m58.360105528s ago: executing program 0 (id=63): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdir(&(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="664af8a44e8dc10265424a01df55acafec8f7815034086b7102dc004348569f5ce1f225799f48895c416553ff2a29b9035c6c7cb1de8f53375ea15b58b61d6887d0dd73a4d53af2d4b68579b11", @ANYRES8=r0, @ANYRES16=r0, @ANYBLOB, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES64], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) mkdirat(r0, &(0x7f0000000600)='./file0\x00', 0x35) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB], 0xfdef) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='smaps\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_clone(0xa100000, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, &(0x7f0000000a00)=""/102400, 0x19000, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x50) write(r0, &(0x7f0000000280)='tcp', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ipv4', 0x4) write(0xffffffffffffffff, &(0x7f0000000380)='127.0.0.1', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='4420', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000500)="110000001000"/22, 0x16) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m58.270915207s ago: executing program 0 (id=65): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000000900)={@void, @val={0x3, 0x3, 0x8, 0x7, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x24, 0x65, 0x0, 0x9, 0x84, 0x0, @private=0xa010101, @local}, "c7050004000000000200000008000004"}}, 0x2e) 1m57.839685574s ago: executing program 0 (id=68): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$char_usb(r1, &(0x7f00000001c0)="620482", 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) timer_create(0x1, &(0x7f0000000240)={0x0, 0x22, 0x4, @tid=r2}, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x20000) r3 = socket$tipc(0x1e, 0x2, 0x0) add_key(&(0x7f0000000380)='encrypted\x00', &(0x7f00000003c0), &(0x7f0000000400), 0xca, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000440)={0x40, 0x2, 0x2, 0x3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000004c0)="5267fad4d95160a1427dd82feca36daee88e768102140db88f0b6fb2f3b2713418ab5b4e9d06bd57fbef19ffdb3a4cfd2987a6fe2d8d2fa5bd3ac5c731eab7dc7c"}], 0x1000000000000258}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002600)) mount(0x0, &(0x7f0000002680)='./mnt\x00', &(0x7f00000026c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002700)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mount(0x0, &(0x7f0000002740)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002780)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f00000027c0)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f0000002800)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000002840)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000002880)='dummy_udc.0', 0xb) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x432082, 0x0) 1m57.807428663s ago: executing program 32 (id=68): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$char_usb(r1, &(0x7f00000001c0)="620482", 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) timer_create(0x1, &(0x7f0000000240)={0x0, 0x22, 0x4, @tid=r2}, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x20000) r3 = socket$tipc(0x1e, 0x2, 0x0) add_key(&(0x7f0000000380)='encrypted\x00', &(0x7f00000003c0), &(0x7f0000000400), 0xca, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000440)={0x40, 0x2, 0x2, 0x3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000004c0)="5267fad4d95160a1427dd82feca36daee88e768102140db88f0b6fb2f3b2713418ab5b4e9d06bd57fbef19ffdb3a4cfd2987a6fe2d8d2fa5bd3ac5c731eab7dc7c"}], 0x1000000000000258}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002600)) mount(0x0, &(0x7f0000002680)='./mnt\x00', &(0x7f00000026c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002700)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mount(0x0, &(0x7f0000002740)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002780)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f00000027c0)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f0000002800)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000002840)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000002880)='dummy_udc.0', 0xb) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x432082, 0x0) 1m53.611229547s ago: executing program 33 (id=109): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@map_idx={0x18, 0x1}, @exit]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x4, &(0x7f0000000580)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xd8}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/my_nullb\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nullb/my_nullb/power\x00', 0x2, 0x0) rmdir(&(0x7f0000000680)='./config/nullb/my_nullb\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000700)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@can_delroute={0x3c, 0x19, 0x1, 0x70bd28, 0x25dfdbfe, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "235bd32fd4b3a8d1"}, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040040) sendmsg$NL80211_CMD_SET_STATION(r2, 0x0, 0x40) read(r2, 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) write(r7, &(0x7f0000000440)="0a4f103f0001e2fe87b23ab00cf39b96b76a819242f9359ad9fa1c1a01b5656bbd1c303dd5cf1ac0543b75bb186dc70f14689da7242b29f47c358f196ce6f050101769f41e3c938a882405f89817e7c451a94a85e10af6d5e4bbfa5e8e4da3815c3423f61f2d274093defc4c64bc986e30", 0x3) 52.494075093s ago: executing program 34 (id=733): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) syz_emit_ethernet(0xfc0, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xf8a, 0x3a, 0xff, @dev, @local, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3, 0x2, "07df82bb6bf7a292c06b1d590f879eaf31"}, {0x1f, 0x8, "e05591082b87569f388a65ed72ed79e8170c6e256ba5e0d46bdc58206e027a90058faf478036b7199d92110692e5ea9d0f888c5ce7a7f60bc84789e6f7229d5ee1"}, {0x18, 0x1a7, "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"}, {0x4, 0x8, "6b4e8d11946e9c9ad70be755c2d3dc1b7ef66d4a45f3ccb8de325880dd6afb3042fa8ec0dbe3b510a784c2e22ae3a3ec790362a9ffaf7b4343ee2b005f34c1ebfffb8851"}, {0xe, 0x1e, "21a9c8f0a1514b377e7af0f9a502e917375511fa1943c4ae6b6f309d33c4c9925bb5d3fe41842b915f6f37a67d40cc960fbbfd7cd6c0a9e65046936ea67b69f830914b504c9b7f887d031ebb625c796c59283cce5f9f83aaeee409876f98da8a665b76a2392c64a59a07ca2d418bb704df44127113f813358d05ec94b89726c356ae27daf8dd2f9b560387615489829cf5d0daf108a8d8ffaa361af4c8ada03cb42a7cbb69fa2b5efc8ca4ea3decac0b035ff4458de653672461f272ed12d8f63f8849102c443764e558d1d524579862ae2ba5bd00957fa7a78d7f3b12385e3a9a135fbb5be223ab3cfc0d433499a88d9a60"}, {0x18, 0x13, "9ee843a78a19e9dc1bd6b68fb2c0db685d47d5126bcd8c9cf90764c262c649252cc8034ab093144c265a7e3e40f5ccbb1befc2f499f8859c752c6678cb793f06567dc002d329d63cb7df076369c4c16bd59f005a7aadd4f5eed836d5de4f592b54eb618406f88b8094902a7a7a4b4d200105985c118cebf7facaf314bee81500d26d534c8e64334770bbc2036a4c983008efaaa39ab9009bddf129a5"}, {0x19, 0x2, "7375d241c0c50bd90aecdefc25bf9482c1cad55dca"}]}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000001240)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x40, 0x400200cc4, 0xff9, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.18540948s ago: executing program 3 (id=752): r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 50.089170877s ago: executing program 3 (id=754): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000800), 0x18000000, 0x0) 50.010789556s ago: executing program 3 (id=755): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000000900)={@void, @val={0x3, 0x3, 0x8, 0x7, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x24, 0x65, 0x0, 0x9, 0x84, 0x0, @private=0xa010101, @local}, "c7050004000000000200000008000004"}}, 0x2e) 49.902098294s ago: executing program 3 (id=758): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40102, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xd801, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_DEV_SET_GEOMETRY(r0, 0xc138fd0f, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x32000000, 0x8000, 0x0, 0x0, @by_dev={r1}, {0x28e, 0x20, 0x8000000000084, 0x20, 0x11, 0x20, 0xc4f}}) 49.899513373s ago: executing program 3 (id=759): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000005e0000000800000005"], 0x48) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000600)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r1, &(0x7f0000000140)='27', 0x2) unshare(0xa000200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x80002) r3 = getuid() lstat(&(0x7f0000000540)='./proc\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/reboot/type\x00', 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[], 0x87a) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000700), 0x2000, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xfffffffffffffffe}}, {@allow_other}], [{@euid_eq={'euid', 0x3d, r5}}, {@hash}]}}) setreuid(0xee01, 0x0) statx(r1, &(0x7f0000000240)='./proc\x00', 0x400, 0x7ff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r7) fsopen(0x0, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4001004) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x65, 0x0, 0x80, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000001200)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}, 0x29}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000000)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000002300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}, 0x4004000) 49.690241775s ago: executing program 3 (id=760): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ppoll(&(0x7f0000000880)=[{0xffffffffffffffff, 0xc0}], 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000500)='./file0\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x1, 0x8, 0x3, 0x2587}, 0x0, 0xfffffff9, 0x0, 0x3, 0x0, 0xff}}) 49.556238348s ago: executing program 35 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250b0000000c000580070001"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1a2) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x840) mount$fuse(0x0, &(0x7f000000edc0)='./file0\x00', &(0x7f000000ee00), 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="077307caea29d5ea081cfeef48d506d149a5cc4716468e7243c9bc804fffed0b94dc18f7e50ad125e4beb2fade92412163c4b52902916077ec57685b53c221427526944b30dc7843ac16884a43c4f18250cc907542cc8628b624cc17c9001d1e7db37158cea9518826084fda3dc8ada9d8fff4522022b446a8990276d7e3eb717b9bbdf039a950d083f30180f3ba90e94139f83c94cdee2c50e7be61b513d3"]) 38.244079467s ago: executing program 36 (id=842): execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000040)='bbr', &(0x7f0000000080)='\x00', &(0x7f00000000c0)='.*&#\x00', &(0x7f0000000100)='bbr', &(0x7f0000000140)='\'@]\x00', &(0x7f0000000180)='+\x00', &(0x7f00000001c0)='bbr', &(0x7f0000000200)='bbr']}, &(0x7f0000000380)={[&(0x7f00000002c0)='bbr', &(0x7f0000000300)='\\\x00', &(0x7f0000000340)='bbr']}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000f80)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dfc, 0xffffffff80000006, 0xcd41}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001080)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000010c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dfc, 0xffffffff80000006, 0xcd41}}}, 0x90) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000540)=0x79, 0x4) bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000007c0)="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", 0x222}, {&(0x7f0000000a00)="2db5a0d768b0f2483dda37c85fc060c8135aedb8aaaad29589f33ffcc7914e0327b2b26fc1ee2d37b1b2d9be8a0d1b055303cc0b3b474fa0f622f88700266e5770e1e35781784dd8592258d083f65c5eb1ea3ef9c728169038b7b5b564adb4342cbca170962a1039c24e9d2936cce29d2c97fd6fa4bd16191824edc1f4989b377c82d47b12056dc37a721f898773d29d910440ed905ccfa13b5441700c72187cce8e4294728a13058d8b733d8bf0cd6af6996a", 0xb3}, {&(0x7f0000000ac0)="3a1f5b728b8fb50da3872164edcc821f23ca3c52b00239c6a25d855d0f047a7efc36386c2a5ef11c8f598f683978e9ace509", 0x32}, {&(0x7f0000000b00)="951737e74e03a3385c1ec48c31bd4de436c23a83ee80bdfdb371784dcb8b27b162aceec478b36c18197eaef12b2e29a0d9b12cead79464352a89f8c1434765f48bbb4e9147cbdb4d7e84ccbb030241775c95dd26a158e036e71ecbdb00c73498c56e9104ee9eaca281d2e1a9d4111ce12e834d017fe15f00c2eec40038bf201a92069f08833a87b5b7ed9f44bb6f572887c98af02360d7b189129100e9c363d04aeb", 0xa2}, {&(0x7f0000000dc0)="c90ce19282848c81bbe2bde531d0f1a6be0c52c94f56a47ea3489d53f9ff941395bed220d228ef205c04d8ed49efa72a0f6b5353bee5ed8d96febe7455d66b055d7ab6e966c15e21dfb1ed119ad7f752ebfd15316d52b30a3c2bdf66e485c3b8bdd65a2e30e12d219a7375768d5f896d59592336f94e7f1ad787f0aee3b501c19c58982b264cbd", 0x87}, {&(0x7f0000001480)="889bfe96e50abc25c9f53c22e8502aecd66715", 0x13}], 0x6}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x136}, {&(0x7f0000001240)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b301183a8867463de2a0fae686630b7db109ed37404eadf39e858bee704a9d000bc1aae96b1b4d529573e38241eed0ecb1a9498", 0xe1}, {&(0x7f0000000bc0)="20b946e4ffc923", 0x7}, {&(0x7f0000000c00)="e705ba567be6127d85d39375b10960531cc5504726702fa92b283ee716613616ab01f6e820db6e5cfcb4d90015ea23d780", 0x31}, {&(0x7f0000000c40)="c05d0dc2fdda573c5872e33584e8735fd9f8a0151935edc78b9bbf6424e2b7f2e669ca0b5b0bd870399b43266e2c9f824a313cfa3f930b6dc49c44b254c37f5fab1c177b388947", 0x47}, {&(0x7f0000000cc0)="55bee026e579cd98c199b0adfda09fae5228b8f7b883add4099e88200a72dfc6782dc3af4564c1f19ae2f530ef2c3fc6fb946257c569c4d9f6e35f8e75b3d268400ad5a5cad70c1706b377", 0x4b}], 0x6}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000e80)=0xdf8, 0x4) writev(r0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="fb7ef3f08d8f0d64c4636b96073c171a2926f00a2baa2c2752e6ba348df7c6cb64a0a5dbc368e6e57135b7c7f20a1e4ca2d0c293b9df5480df71d6dcdd9beb4fa3247b3b7e38346fa0436ee2d9c57c41af42a71188cbd6b252eb44", 0x5b}], 0x1) 34.332132005s ago: executing program 37 (id=760): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000840), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ppoll(&(0x7f0000000880)=[{0xffffffffffffffff, 0xc0}], 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000500)='./file0\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x1, 0x8, 0x3, 0x2587}, 0x0, 0xfffffff9, 0x0, 0x3, 0x0, 0xff}}) 33.829252428s ago: executing program 7 (id=877): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000000)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./proc/file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x100) write(r5, &(0x7f00000001c0)='1', 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1000"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000ffffff7f000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000009c80010000000000bf9800000000000056080000000000008500000007000000b70000000000000095fc75d5e09daa321e"], &(0x7f00000007c0)='GPL\x00', 0x8000, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) 33.520390918s ago: executing program 7 (id=878): ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000000)=""/4096) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001000), 0xa0100, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000001200)={&(0x7f0000001040), 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x90, r1, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x80}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x25}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x90}}, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001240), &(0x7f0000001280)=0xc) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001340)={&(0x7f00000012c0), &(0x7f0000001300)=""/7, 0x7}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001380)='./file0\x00', 0x1000, 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000013c0), 0x40800, 0x0) connect$inet(r3, &(0x7f0000001400)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x64, 0x13, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x38, 0x8, "b1021b8bb37cd547a3b46f69316c39b91fcd77dfdd592475b5b7573436128c9199678d708da414c355b5b834bdb3f14bc8a5d240"}]}, 0x64}, 0x1, 0x0, 0x0, 0x841}, 0x850) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000001740)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001700)={&(0x7f00000015c0)={0x104, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7f}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x19}, @NL80211_ATTR_FRAME={0x9a, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @initial, @device_b, @broadcast, {0x9, 0xe9b}, "", @value={0xe, 0x1, 0x0, 0x0, 0x8a}, @value=@ver_80211n={0x0, 0x5, 0x2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_a, 0x67, "ec5d4f4c7e27c74b3c0dc4949e8b4345c56f04d9def6f5ad3128ba190d9e8d0ca4c78b8111d9d683deaba9635b8394bb7e1d4479f0af22b97979fdabc9570489b57877ce7bbc25aff5e5454fab4cf468cf184c4fe1ddee750b111378c007152effa4f814282e2f"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xe899}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xb}, @device_a, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x104}, 0x1, 0x0, 0x0, 0x10400}, 0x40000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000001780)={r0}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000017c0)=0xc8e, 0x4) write$binfmt_register(r0, &(0x7f0000001800)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x1000, 0x3a, 'syz0\x00', 0x3a, '', 0x3a, './file0', 0x3a, [0x50]}, 0x2d) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), r3) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x18, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x11}, 0x40800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, r6, 0x10, 0x70bd2c, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x44080) r7 = syz_open_dev$dvb_demux(&(0x7f0000001ac0), 0x0, 0x400) ioctl$DVB_DEMUX_DMX_EXPBUF(r7, 0xc00c6f3e, &(0x7f0000001b00)={0x4, 0x0, r3}) write$tcp_mem(r8, &(0x7f0000001b40)={0x7f, 0x20, 0x1, 0x20, 0x4}, 0x48) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000001bc0)={"d0553a404d9e91a59a9b12b8b76f766d", 0x0, 0x0, {0x961, 0x6}, {0x101, 0x8}, 0x1ff, [0x8, 0x0, 0x6, 0x7, 0x91a0, 0x9, 0x400000, 0x3, 0x2, 0x8, 0x2, 0xf84, 0x9fe1, 0x7fffffffffffffff, 0x7, 0xff]}) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000001d40)={0x0, "9908d9a24930f64731f199534fb052a0"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000002d40)={{r3}, r9, 0x2, @inherit={0x50, &(0x7f0000001cc0)={0x1, 0x1, 0x9c00000000, 0x4, {0x1d, 0x3, 0x5, 0x7ff, 0x1}, [0xb]}}, @devid=r10}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000003e40)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d80)={0x58, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}]}, 0x58}}, 0x10) recvmsg(r0, &(0x7f0000006040)={&(0x7f0000003e80)=@generic, 0x80, &(0x7f0000006000)=[{&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/53, 0x35}, {&(0x7f0000004f40)=""/190, 0xbe}, {&(0x7f0000005000)=""/4096, 0x1000}], 0x4}, 0x2000) recvmmsg(0xffffffffffffffff, &(0x7f000000bec0)=[{{&(0x7f0000006080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000006380)=[{&(0x7f0000006100)=""/162, 0xa2}, {&(0x7f00000061c0)=""/140, 0x8c}, {&(0x7f0000006280)=""/163, 0xa3}, {&(0x7f0000006340)=""/38, 0x26}], 0x4, &(0x7f00000063c0)=""/219, 0xdb}, 0x2}, {{&(0x7f00000064c0)=@alg, 0x80, &(0x7f0000006700)=[{&(0x7f0000006540)=""/235, 0xeb}, {&(0x7f0000006640)=""/183, 0xb7}], 0x2, &(0x7f0000006740)=""/13, 0xd}, 0x5}, {{&(0x7f0000006780)=@hci, 0x80, &(0x7f0000006a00)=[{&(0x7f0000006800)=""/230, 0xe6}, {&(0x7f0000006900)=""/7, 0x7}, {&(0x7f0000006940)=""/180, 0xb4}], 0x3, &(0x7f0000006a40)=""/51, 0x33}, 0x6d}, {{&(0x7f0000006a80)=@nfc, 0x80, &(0x7f0000006d40)=[{&(0x7f0000006b00)=""/164, 0xa4}, {&(0x7f0000006bc0)=""/163, 0xa3}, {&(0x7f0000006c80)=""/156, 0x9c}], 0x3, &(0x7f0000006d80)=""/123, 0x7b}, 0x2d0b}, {{&(0x7f0000006e00)=@un=@abs, 0x80, &(0x7f00000081c0)=[{&(0x7f0000006e80)=""/166, 0xa6}, {&(0x7f0000006f40)=""/4096, 0x1000}, {&(0x7f0000007f40)=""/203, 0xcb}, {&(0x7f0000008040)}, {&(0x7f0000008080)=""/247, 0xf7}, {&(0x7f0000008180)=""/5, 0x5}], 0x6, &(0x7f0000008240)=""/238, 0xee}, 0x3}, {{&(0x7f0000008340)=@caif=@dbg, 0x80, &(0x7f000000a6c0)=[{&(0x7f00000083c0)=""/165, 0xa5}, {&(0x7f0000008480)=""/114, 0x72}, {&(0x7f0000008500)=""/4096, 0x1000}, {&(0x7f0000009500)=""/4096, 0x1000}, {&(0x7f000000a500)=""/183, 0xb7}, {&(0x7f000000a5c0)=""/124, 0x7c}, {&(0x7f000000a640)=""/94, 0x5e}], 0x7, &(0x7f000000a740)=""/185, 0xb9}, 0x8}, {{&(0x7f000000a800)=@nfc_llcp, 0x80, &(0x7f000000ab00)=[{&(0x7f000000a880)=""/118, 0x76}, {&(0x7f000000a900)=""/208, 0xd0}, {&(0x7f000000aa00)=""/250, 0xfa}], 0x3, &(0x7f000000ab40)=""/210, 0xd2}, 0x5}, {{&(0x7f000000ac40)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f000000be40)=[{&(0x7f000000acc0)=""/186, 0xba}, {&(0x7f000000ad80)=""/80, 0x50}, {&(0x7f000000ae00)=""/61, 0x3d}, {&(0x7f000000ae40)=""/4096, 0x1000}], 0x4, &(0x7f000000be80)}, 0x6}], 0x8, 0x102, &(0x7f000000c0c0)={0x77359400}) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) 33.467275089s ago: executing program 7 (id=879): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/net', 0x0, 0x4) getdents(r0, 0x0, 0x0) 33.380684221s ago: executing program 7 (id=880): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000002c0)={r4, 0x0, 0x4, 0x0, 0x0, [0x0], [0x8001, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffb], [0x1, 0x4, 0x7, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000340)={r5, 0x0, 0xffffffffffffffff}) r7 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x5961, 0x100, 0x2, 0x63}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000540)=@IORING_OP_SENDMSG={0x9, 0x4, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x9, 0x4000, 0x1, {0x0, r11}}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r12 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r12, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r6}) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$x86(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$x86(r14, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_RUN(r15, 0xae80, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) 32.630347304s ago: executing program 7 (id=885): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000005e0000000800000005"], 0x48) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000600)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r1, &(0x7f0000000140)='27', 0x2) unshare(0xa000200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x80002) r3 = getuid() lstat(&(0x7f0000000540)='./proc\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/reboot/type\x00', 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[], 0x87a) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000700), 0x2000, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xfffffffffffffffe}}, {@allow_other}], [{@euid_eq={'euid', 0x3d, r5}}, {@hash}]}}) setreuid(0xee01, 0x0) statx(r1, &(0x7f0000000240)='./proc\x00', 0x400, 0x7ff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r7) fsopen(0x0, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4001004) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x65, 0x0, 0x80, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 32.448081584s ago: executing program 7 (id=887): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x8041, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000003c0)=0x2dff) 32.359192139s ago: executing program 6 (id=888): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) 32.207631499s ago: executing program 6 (id=889): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120110030a4308083767010080910102030109022400018e0510070904fb0b0282d2d20009059f0240000700070805010240"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000008c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000900)) timer_settime(0x0, 0x0, &(0x7f0000000940)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 31.858816994s ago: executing program 8 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x70bd2b, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000280)={'/sys/block/md', @named={'_syz', 0x0, '0'}, '/md/', @array='preread_bypass_threshold\x00'}, 0x1, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETFMT(0x0, &(0x7f0000000140)=@filename='./file0\x00', r2, &(0x7f0000000240)) write$md_sysfs(r1, &(0x7f0000000340)=@str='0', 0x1) 31.810199728s ago: executing program 8 (id=891): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000880), 0x4) sendmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f0000000900)=@hci={0x1f, 0x88a8, 0x4}, 0x80, &(0x7f0000000980)=[{&(0x7f00000009c0)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162f7f0c39b037234633", 0x2e}, {&(0x7f0000000a00)="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", 0xf2a}, {&(0x7f0000001980)="954c72", 0x3}], 0x3}, 0x48800) 31.578291383s ago: executing program 8 (id=892): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5000, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) write(r0, &(0x7f0000000180)="b85d079f27d2b509c58e3bb1426b9d8eec871330be4b8256412fdf260216ea3778cef4e1c2ba4031bd50afcd77f3da34285c50615f41a428cf41fa73b473e58512ee1da26a49bfeab2865950950eccb6", 0x50) pwrite64(r0, &(0x7f0000000200)="479806a1fb409731fd15dfcd5da004cc7641347102a18743ed1edb554ec67ec3549fef0105b98744841ed701e3781a18c5389001e3e8d706d4853e836b24230117a8ed94e24bcc2271b1b39ffcaa09ec73a41be1b5aa878e565cc0f40525187ff7eb25a96f2462158df1661087f19ad49c8c6085a01ee9c90b03fd1015499da810b97200296784bac90d10", 0x8b, 0x7) r1 = accept4$unix(r0, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, &(0x7f0000000500)={{@_ha_fsid={[0xee, 0x7]}, {0x6, 0x8, 0x0, 0xc23}}, {{[0x7, 0x8, 0x6, 0x5]}, 0x0, 0x4, 0x5, 0x0, &(0x7f0000000380)=[{{@_ha_fsid={[0x9, 0x100]}, {0x0, 0x0, 0x52d0, 0x7}}, 0x6, 0x0, '+\x00'}, {{@align=0x9d5, {0xf, 0x5, 0x7ff, 0x3ff800}}, 0x8, 0x0, '\x00'}, {{@align=0xf, {0x7, 0x5, 0x3, 0x5}}, 0x5c, 0x0, '(\x00'}, {{@align=0x400, {0xda, 0xfffc, 0x81, 0xffffffffffffffff}}, 0x40, 0x0, '(.\'\x00'}, {{@_ha_fsid={[0x1, 0xeda9]}, {0x60, 0x48d1, 0x3, 0xfffffffffffff05a}}, 0x4, 0x0, '\\--\xe6}%k\x00'}, {{@align=0x7, {0xa, 0x2, 0x9, 0x2}}, 0x6, 0x0, 'LVM-syz'}, {{@align=0x7, {0x1, 0x3, 0xd, 0x80000000}}, 0x3, 0x0, '\x00'}, {{@align, {0x371, 0x6, 0x3ff}}, 0x2, 0x0, '!\x00'}, {{@align=0x5cff9f6f, {0x9, 0xc, 0x5, 0x5}}, 0x2, 0x0, '$,%!],\x00'}, {{@_ha_fsid={[0x55730678, 0x2]}, {0x3ff, 0x6, 0x2, 0x5}}, 0x2, 0x0, '3\x00'}]}}) mount(&(0x7f0000000540)=@sr0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='logfs\x00', 0x8, &(0x7f0000000600)='(\x00') r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mkdirat(r2, &(0x7f0000000640)='./file1\x00', 0x80) r3 = syz_open_dev$sndpcmp(&(0x7f0000000680), 0x3, 0x200000) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f00000006c0)=0x8) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x11, r2, 0x31000) close_range(r3, r0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000700)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x5, 0x3a, '.#', 0x3a, '(.\'\x00', 0x3a, './file0', 0x3a, [0x46]}, 0x2e) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@getspdinfo={0x14, 0x25, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x5801}, 0x24000044) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000840), 0x5d9440, 0x0) ioctl$DM_TABLE_STATUS(r4, 0xc138fd0c, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x170, 0x138, 0x0, 0x0, 0x4000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, "a55b3d170c4a7b4bd5c9204be277fcc1e78f7630726e7695b9e7bf1633aa8926d07f511e1c01871b1e145275692b789969f07c213594d7"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000a00)={0x3, 0x2f9, 0xfffffff8}) r5 = syz_open_dev$video4linux(&(0x7f0000000a80), 0x8, 0x2000) ioctl$XFS_IOC_FSGROWFSDATA(r5, 0x4010586e, &(0x7f0000000ac0)={0x0, 0x1}) mount(&(0x7f0000000b00)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='ntfs3\x00', 0x28000, 0x0) pivot_root(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='./file1\x00') r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x148, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x114, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xbde69d82a0675054}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004071}, 0x81) waitid$P_PIDFD(0x3, r2, &(0x7f0000000ec0), 0x20000000, &(0x7f0000000f40)) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r6, 0x200, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d19, &(0x7f0000001100)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000001140)={0x257e, 0x28, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xffffffffffffff39, 0x2}) ptrace$peeksig(0x4209, r7, &(0x7f0000001180)={0x7, 0x1, 0x2}, &(0x7f00000011c0)=[{}, {}]) keyctl$invalidate(0x15, 0x0) 31.487923764s ago: executing program 8 (id=893): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9e}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x48000) sendmsg$rds(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/111, 0x6f}], 0x1, &(0x7f00000001c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) setns(0xc9, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000018c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000000cc0)={0xbb8, 0x1, 0x5, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0xffff}, 0xd, 0x1, 0x5, 0xff, 0x21, 'syz0\x00', "1535097e5d9eadff8dca41fda64228aec3a7d1556789fa2fe902d492b2bf57a2", "ed15cbc201c8fc01c87b9cf351563451b5518e7788fa6350f456d298b6985cd3", [{0x8, 0x800, {0x3, 0x6}}, {0x2, 0x1, {0x1, 0x80}}, {0x7, 0x9, {0x3, 0xd4c}}, {0x7, 0xfff, {0x3, 0x8}}, {0x2, 0xfffe, {0x1, 0x1}}, {0x0, 0x0, {0x3, 0xd61}}, {0xf, 0x7, {0x3, 0xdc31}}, {0x6, 0x94, {0x1}}, {0x6b8, 0xec, {0x1, 0x5}}, {0xd, 0x0, {0x0, 0x3}}, {0x1, 0x6, {0x1, 0x1}}, {0x9, 0xc000, {0x1, 0x7e}}, {0x2, 0x8, {0x3, 0x6}}, {0x8dc, 0xac, {0x3, 0xd}}, {0x29, 0x0, {0x2, 0xa0}}, {0x7, 0x0, {0x0, 0x3}}, {0x9, 0x628, {0x0, 0x2}}, {0x0, 0x8, {0x1, 0x9}}, {0xfe, 0x4c, {0x1, 0x1}}, {0x9, 0x1}, {0x6, 0x6, {0x1, 0x3}}, {0x3, 0x6, {0x3, 0x1}}, {0x1, 0xfe1b, {0x1, 0x9}}, {0x4, 0x2, {0x3, 0x3}}, {0x8, 0x3}, {0x3, 0x3, {0x1, 0x30000}}, {0xff, 0x5, {0x3, 0xf}}, {0x23, 0x401, {0x1, 0x3}}, {0x7, 0x8, {0x2, 0xf7}}, {0x0, 0x1, {0x3, 0xff}}, {0xfffb, 0x9, {0x2, 0x6}}, {0x401, 0x7, {0x0, 0x2}}, {0x3, 0x3, {0x0, 0xb}}, {0x40, 0x3, {0x0, 0x3}}, {0x9, 0x2, {0x2, 0x80000000}}, {0x9, 0x2, {0x1, 0xcca}}, {0x8, 0x8, {0x3, 0x3}}, {0x4, 0x2, {0x0, 0x5}}, {0x90, 0x9, {0x0, 0x5}}, {0xe0, 0x6, {0x3, 0xfffffffe}}]}}}, {{0x254, 0x1, {{0x3, 0x7fffffff}, 0x5, 0x64, 0x7, 0x8, 0xe, 'syz0\x00', "643a652a32169faba5e730bb1d5b38b05d36f3a822d88c1cc2033a6d955b5c76", "798d0b97dc4a2cdbce545934c9a8e23e3df6117649adf49112c82c1054205551", [{0xf, 0x8001, {0x1, 0x3}}, {0x80, 0x3, {0x2, 0x8}}, {0xb8f, 0xc, {0x1, 0x2}}, {0x7, 0x0, {0x0, 0x3}}, {0x4, 0x7, {0x3, 0x8}}, {0x3ff, 0x3, {0x1, 0x54a}}, {0x0, 0x4, {0x3, 0x8}}, {0x4, 0x9, {0x0, 0x7fffffff}}, {0x7, 0x6, {0x1, 0xfffffffe}}, {0x9, 0x4, {0x0, 0x7}}, {0x9, 0x9, {0x1, 0x7}}, {0x1, 0x6, {0x1, 0x1}}, {0x7, 0x2, {0x2, 0x3}}, {0x702, 0x7fff, {0x0, 0x1}}, {0x5, 0x1, {0x1, 0x4}}, {0xe56d, 0xed4, {0x1, 0x1}}, {0x1, 0x7ff, {0x2, 0x9}}, {0xd7, 0x7, {0x0, 0x7}}, {0x6, 0x6, {0x2}}, {0x9c2, 0x1, {0x0, 0x9}}, {0x7, 0x53e, {0x3, 0x91}}, {0x0, 0x0, {0x1, 0x6}}, {0x1fe, 0x4, {0x1, 0x3}}, {0x81, 0x1, {0x1, 0xc}}, {0xfffa, 0x400, {0x3, 0x6}}, {0x6, 0x67ce, {0x3, 0xffffff14}}, {0xa1, 0xd5b, {0x2}}, {0xa8e, 0xffa2, {0x2, 0x8000}}, {0xe, 0x2, {0x1, 0xeb}}, {0x2, 0x400, {0x3, 0x80000000}}, {0xfffd, 0x0, {0x1, 0x4}}, {0xb, 0x9, {0x3, 0x3ff}}, {0xa, 0x40d, {0x0, 0xaeea}}, {0x13e, 0x9, {0x2, 0x9}}, {0xb, 0xe12, {0x1, 0xc7c0}}, {0x9, 0x2, {0x1, 0x2}}, {0xff00, 0x81, {0x2, 0x6}}, {0x75, 0x1, {0x2, 0xb6d}}, {0x6, 0x9dae, {0x2, 0x6}}, {0x1dd6, 0x0, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0xc, 0x6, 0x5, 0x3ff, 0x0, 'syz0\x00', "19b4ccbbf4e0a123a583bf4ee15322b051000aac2040c6ea077f55c16e2086af", "232a3072ab3fd66e2b966d4d3598e5bec8ca511aac1c673ee44443b390559b8f", [{0xcf4c, 0xf, {0x3, 0x7fffffff}}, {0x1, 0x7, {0x0, 0x8}}, {0x0, 0x3, {0x3, 0xe6ff}}, {0x6, 0x400, {0x3, 0x1}}, {0x1, 0x2, {0x2, 0x2}}, {0x7, 0x8, {0x2, 0xfffffffb}}, {0x0, 0x9, {0x1, 0x1}}, {0x3, 0x7, {0x0, 0x1}}, {0x8, 0x5, {0x0, 0x3ac}}, {0x5, 0x401, {0x0, 0x80000000}}, {0x200, 0x3, {0x0, 0x7}}, {0x3, 0x2, {0x0, 0xe}}, {0x2, 0x5efd, {0x2, 0x6}}, {0x40, 0x0, {0x1, 0x1}}, {0xae7, 0x3, {0x0, 0x1}}, {0x7, 0x67a, {0x1}}, {0x800, 0x4, {0x3, 0xb4}}, {0xa, 0x7ff, {0x2, 0x80}}, {0xf800, 0x9, {0x1, 0x3}}, {0x4, 0xb, {0xfc8676febda8bc7, 0x4}}, {0x2, 0x73ba, {0x0, 0x6}}, {0x8, 0x1, {0x0, 0x7ff}}, {0x3, 0xfe00, {0x0, 0x8}}, {0x4, 0x3, {0x2, 0x7fff}}, {0x8, 0x5, {0x2, 0xfffffffd}}, {0x8, 0x4, {0x2}}, {0x5, 0xe, {0x3, 0x7f}}, {0xa, 0x1000, {0x2, 0x9}}, {0x54, 0x61de, {0x2, 0x81}}, {0x768a, 0x7fff, {0x0, 0x80000001}}, {0xfffb, 0x9, {0x3, 0x6b2a}}, {0x7f, 0x7, {0x3, 0x6}}, {0x4, 0x4, {0x2, 0x8}}, {0x8, 0xe, {0x2, 0x2}}, {0xfffb, 0x3, {0x0, 0x4}}, {0x6, 0x4, {0x3, 0x1}}, {0xb3, 0x3, {0x1, 0xffff}}, {0x8, 0xa7d0, {0x3, 0x9}}, {0xe9, 0xe, {0x1, 0x5}}, {0x1000, 0x400, {0x0, 0xbd}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0xfb, 0x5b, 0x30, 0x2, 0x19, 'syz0\x00', "f8653ec904ea4326757ac8d6d51c54c629a8541e1e2fb712e59ef39ea71418d6", "4ad8dd762488fa3e8c4150dd9de794ba52e0b29f747526851bbe9a08ac44a2e6", [{0x9, 0x4, {0x1, 0x5}}, {0xfffb, 0x5, {0x2, 0xb78}}, {0xc, 0xe, {0x2, 0xb69}}, {0xfff7, 0x1000, {0x1, 0x6}}, {0x6, 0xfff, {0x0, 0x1}}, {0x6, 0x8, {0x3, 0x2}}, {0x8, 0xfffc, {0x0, 0x1}}, {0xf6, 0x1, {0xea1e13fb8eb53ddd, 0x8}}, {0x4, 0x8, {0x2, 0x9}}, {0x4, 0xb, {0x3, 0x6a9}}, {0x8, 0x4, {0x1, 0x9}}, {0xe8, 0x284, {0x1, 0x7}}, {0x2, 0x1, {0x1, 0x10}}, {0x5, 0xffff, {0x3, 0x4}}, {0x1, 0x80, {0x3, 0x4}}, {0x0, 0x73f, {0x3}}, {0x4, 0x7, {0x3, 0x5}}, {0x1, 0x7, {0x3, 0xfffffffd}}, {0x800, 0xf, {0x3, 0x80000000}}, {0x8, 0x4000, {0x2, 0x8}}, {0x1000, 0x1, {0x2, 0x1}}, {0xbf, 0x1c, {0x3, 0xb9f}}, {0x7, 0x1, {0x3, 0x4}}, {0x0, 0x3}, {0x6, 0x9, {0x3, 0x6f}}, {0xa7, 0x0, {0x1, 0x80000001}}, {0x6829, 0x8, {0x3, 0x3}}, {0x34b, 0x200, {0x0, 0x1}}, {0x100, 0x0, {0x3}}, {0x85, 0x5, {0x2, 0x6}}, {0x2, 0x8, {0x2, 0xe076}}, {0x1, 0x80ba, {0x2, 0x1000}}, {0x884, 0x7, {0x1, 0x8}}, {0x1000, 0x0, {0x2, 0x5}}, {0x1, 0x5, {0x2, 0xfff}}, {0x3, 0x9, {0x0, 0x80000001}}, {0x2, 0x7, {0x2, 0xb}}, {0x800, 0x1000, {0x0, 0x9}}, {0x26a, 0x9, {0x0, 0x2}}, {0x6, 0x8, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0xf, 0xb, 0xff, 0x9, 0x425, 'syz0\x00', "d40f5efe014d143eeae823dc1f110b34115f6eff207d7ce52c7f9e316d03465c", "a71231ae6f9601a8e2a78cac7c4c7ff7a499a6e21ceb0c90976734620c57b94d", [{0x172b, 0x1, {0x2, 0x3}}, {0x36, 0x1000, {0x1, 0x8}}, {0x3, 0xd6, {0x0, 0x1}}, {0xff01, 0x6, {0x1, 0xf953}}, {0x800, 0x10, {0x0, 0xd}}, {0x7fff, 0x5, {0x2, 0x8}}, {0x0, 0x9, {0x2, 0x514b}}, {0x27d, 0xfff9, {0x2, 0x8f89}}, {0x5, 0x1ff, {0x0, 0x2}}, {0x7f, 0x0, {0x1, 0x4}}, {0x9, 0xf, {0x2, 0xd04}}, {0x8, 0x6, {0x3, 0xa5c}}, {0xff, 0x3, {0x0, 0x5}}, {0x6, 0x3, {0x3, 0xb1}}, {0x400, 0x0, {0x0, 0x6}}, {0x2, 0x2, {0x0, 0x3}}, {0x3, 0x7, {0x3, 0x4}}, {0x7f, 0x0, {0x1, 0x5}}, {0x102, 0x2, {0x0, 0xd}}, {0x163, 0x9, {0x3, 0x4}}, {0x470, 0x580e, {0x2, 0x4}}, {0xb, 0x7, {0x1, 0xfffffff6}}, {0x9, 0xfff7, {0x2, 0x6}}, {0x2, 0x7fff, {0x2, 0x2}}, {0x7, 0x6, {0x2, 0x197e}}, {0x4, 0x1, {0x3, 0x88}}, {0x1, 0x101}, {0xfffb, 0x0, {0x0, 0x9}}, {0x0, 0x9, {0x2, 0x3}}, {0x8, 0x7fff, {0x3, 0x7}}, {0x9, 0x47c, {0x3, 0x1}}, {0x0, 0x7, {0x0, 0x4}}, {0x7, 0x6, {0x3, 0xf}}, {0x6, 0x3, {0x3, 0x3}}, {0x1ff, 0x0, {0x2, 0xbb84}}, {0x5, 0x5, {0x2}}, {0x7, 0x1, {0x2, 0x5}}, {0x3, 0x9}, {0x4, 0x5, {0x1, 0x7f}}, {0x2, 0x6, {0x0, 0x2}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000080}, 0xa82c96e50ca8e8ef) r2 = socket$netlink(0x10, 0x3, 0xb) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00'], 0x30}], 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000000480)={0x3, 0xcc69, 0x5d1, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./mydev\x00', 0xfa) mount(0x0, &(0x7f00000002c0)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mydev/ttyS0\x00', 0x2, 0xc0) ioctl$TIOCSBRK(r4, 0x5427) r5 = openat$nsim_new_device(0xffffffffffffff9c, &(0x7f0000000c40), 0x1, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000c80)="38f50c02", 0x4}], 0x1) 31.487596493s ago: executing program 8 (id=894): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000005e0000000800000005"], 0x48) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000600)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r1, &(0x7f0000000140)='27', 0x2) unshare(0xa000200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x80002) r3 = getuid() lstat(&(0x7f0000000540)='./proc\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/reboot/type\x00', 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[], 0x87a) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000700), 0x2000, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xfffffffffffffffe}}, {@allow_other}], [{@euid_eq={'euid', 0x3d, r5}}, {@hash}]}}) setreuid(0xee01, 0x0) statx(r1, &(0x7f0000000240)='./proc\x00', 0x400, 0x7ff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r7) fsopen(0x0, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4001004) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x65, 0x0, 0x80, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 31.360382989s ago: executing program 8 (id=895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x80}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 30.128553678s ago: executing program 6 (id=899): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) modify_ldt$write2(0x11, &(0x7f0000000300)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000340)={0x2, 0x1000, 0xb06e2a61c80aa3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xfff5, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000000580), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000001c0), 0x4) sendmsg$can_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}, {&(0x7f0000000040)="21e1e076ac48", 0x6}], 0x3, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) 29.843170699s ago: executing program 6 (id=900): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0x34, 0x0, &(0x7f0000000340)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x39, 0x7, 0x2800000000000000, 0x17e, 0x100, 0x10, 0x200f1, 0xf, 0xc, 0x6, 0x2, 0x26, 0x0, 0x8, 0x0, 0xbd9], 0x4000, 0x41180}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0xb, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004ca, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x6, 0x9], 0xeeee8000, 0x202}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, r5, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x60442, 0x0) clock_getres(0xfffffffffffffffb, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0xfe, 0x0, 0x81, 0x80}, {0x2ffc, 0xd000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x8, 0x89}, {0x0, 0x2, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xeeee0000, 0x3ff8, 0xf, 0x3, 0x17, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xffff1000, 0x3, 0xa0, 0xb1, 0x8, 0x3, 0x6, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x1000, 0xf, 0x5, 0x7, 0x5, 0x40, 0x3, 0x8, 0x1, 0x44, 0x72}, {0x9000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xd000, 0x30}, {0xffe, 0x7}, 0xe0040010, 0x0, 0x3000, 0x2024, 0x4, 0x0, 0x100000, [0x6800000000000000, 0x5, 0xffffffff, 0x20008]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 28.840018709s ago: executing program 6 (id=902): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000005e0000000800000005"], 0x48) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000600)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r1, &(0x7f0000000140)='27', 0x2) unshare(0xa000200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x80002) r3 = getuid() lstat(&(0x7f0000000540)='./proc\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/reboot/type\x00', 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[], 0x87a) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000700), 0x2000, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xfffffffffffffffe}}, {@allow_other}], [{@euid_eq={'euid', 0x3d, r5}}, {@hash}]}}) setreuid(0xee01, 0x0) statx(r1, &(0x7f0000000240)='./proc\x00', 0x400, 0x7ff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r7) fsopen(0x0, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4001004) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000001200)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}, 0x29}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000000)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000002300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}, 0x4004000) 28.760653386s ago: executing program 9 (id=903): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$netlink(0x10, 0x3, 0xe) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0x110001, 0x0, {[0x5ed5, 0x5, 0xb2, 0xffffffff, 0x0, 0x3, 0xfffffffffffffffd, 0x6]}}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x130403, 0x0) ioctl(r4, 0x3b8e, &(0x7f0000000380)="10") pselect6(0x40, &(0x7f00000003c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000400)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000440)={0x0, 0x3938700}, 0x0) bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe}, 0xc) r5 = socket(0x10, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f00000002c0)={0xb6, 0x0, 0x4}) sendmmsg(r5, &(0x7f0000000180), 0x4000000000001f2, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r7, 0x29, 0x4e, 0x0, &(0x7f0000000180)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f00000001c0)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b9004d564bb800100000ba000000000f300f01c20f01df0f001366ba38f8ffef66bafc0ceeb9d80900000f32b8010000000f01d9ad34b6d0b6d00000c0d741e88fe88f0400000f300f01c866baf80cb8dcfd4f8aef66bafc0cb80f000000ef", 0x5f}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.656106953s ago: executing program 6 (id=904): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x2, @raw_data="72ed754c7f8e5c4b474fd126a3fe9b711f572b927f28b458cac93e432bb57ef39b1bfba2167c4185d7bbc92e07aa16cf033ac0ee2bd34a4fbf466ab574e85930d69c6aeb06f51fbb77993ade83184e1d394a6a7a2254384c92475b2394111d8ec6a4ed1e10cccbc26bdc2467f7154437318592d2797ce955b9a5d7b4c81df762dca734eb24a26a2f0fc222aab195146964d8f6d3c1ecd1552c44916247f7f7a98f11064a60dee2c5505acfbcf07f98a2f8f599884ae613d16e5da439b0a2de9d026ce53581ae1446"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000004c0)={0x410000, 0x2, 0x2}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x2) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r3, &(0x7f0000000800), 0x4000000000001f2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7, 0x3, 0x4, 0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2840, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000000280)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000002c0), 0x2) read(r8, &(0x7f0000000300)=""/93, 0x5d) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000000c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x3, 0x0, 0x30, 0x19}, {0x5000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3}, {0x3ff8, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x6, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0xc, 0xa, 0x4, 0x43, 0x3, 0xfa, 0x82, 0x7, 0xe}, {0x0, 0x9000, 0x17, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0xc, 0x4d, 0x8a, 0xf, 0x4, 0x7}, {0x25000, 0x2, 0x0, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xfd, 0x70}, {0xd000, 0xffffffff, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x50000, 0x2a}, {0x1, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x240000, 0xb, 0x1, 0xe000, [0x6840000000000002, 0x3, 0x4, 0xff]}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000500)={0x2, @sliced={0x88, [0x1, 0x7, 0x5, 0x3ff, 0x0, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x1, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x9, 0x5, 0x258d, 0x2, 0x9, 0x6, 0x4, 0xe, 0x40, 0x7ff, 0x7, 0x0, 0xdea, 0x5, 0xbb], 0x80000000}}) 28.020726601s ago: executing program 9 (id=905): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) syz_kvm_add_vcpu$x86(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x1004040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x101002, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffc, 0x6, 0xfe, @buffer={0x0, 0xf2, 0x0}, &(0x7f0000000380)="b5c9bf61c5eb", &(0x7f00000029c0)=""/225, 0x300, 0x10, 0x2, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000100)='GPL\x00'}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000028c0)={'wlan1\x00', 0x0}) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000140)={0x100000, 0x2}) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r5, 0x40109441, &(0x7f00000001c0)={0xac, 0x0, 0x2}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002980)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYRESHEX=r1], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000) 27.929996142s ago: executing program 9 (id=906): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="229b9400000000000000dfb6c575963f86dd606712d80a3211006d0000000000eaeb", 0x22}, {&(0x7f0000000440)="b7000000000000000000000039d751f4586e036ff222eee32d2a9cb29b3fa509", 0x20}], 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'ip6_vti0\x00', {0x2, 0x0, @empty=0xffffffff}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r3, &(0x7f0000000040)="0000010042", 0x5, 0x1be) pwrite64(r3, &(0x7f0000000080)="55aa", 0x2, 0x1fe) pwrite64(r3, &(0x7f00000000c0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r3, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r3, &(0x7f0000000140)='\x00', 0x1, 0x1e800c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0xd0, 0x388, 0xd0, 0x2b8, 0x2b8, 0x4a8, 0x4a8, 0x4f8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback=0x7f000000, 0x0, 0xe}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x11, 0x0, 0x7}, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @private2, [], [], 'veth1_to_bridge\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r3) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x84008, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) 27.649083699s ago: executing program 9 (id=907): mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000380)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x141842, 0x0) getxattr(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', 0x0, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='force', 0x5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getpgid(0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aa00000000fe0000000200000a000480000000000034480760fe70ef5a061a00"/74, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001ffffffff0000000000000000000000006c0100000000000002000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000000c0)) 27.567713488s ago: executing program 9 (id=908): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x9e0901, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 26.978300753s ago: executing program 9 (id=909): ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0x4004e502, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./dev/mtdblock0\x00', 0x42, 0x1ff) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000780)) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000400), &(0x7f0000000580)=0x4) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000080)) r3 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r3, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00'], 0x48) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0xc4042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x400) r4 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex$unlock_wake_list32(r4, 0x60a, 0x81, 0x0, 0x0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES8=r1], 0x50) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000500)={0x3, &(0x7f0000000480)=[{0x8, 0x7b, &(0x7f00000000c0)="67b8e26ed9c2e53ad8ed0844b669b1bbc4f0a896410f9a32beef2d0b70a4d2c91e14b8e613eacfda84a522e16ea3c1dd86520ab70d8b03b6b6acfe3f871801295e0a8a6b60143d10bd5db73da3d2982d9653a903f129153a08993f5effd3c34f1b6886541136d436d9ffa4b732e33672ddcdaa970ad654c8284aee"}, {0x0, 0xd2, &(0x7f0000000140)="b67ad3ba47d0e24739d84a2b7cb7ef3b61b4580d26e306943e6854d1bd34a1f262b119fb8cdf822c57af41e2fd4f2c81e428e0e7b9711b1381e28ba26dc3b254d699f30d1c186fdd7aa7ce75618a2856a8674c8a12d802cd7e2a37d21f307402ba46e6cef51d7ce1e2cef3689d9e0a3b209ce21570db85b2c24aee8ea92b3b19ed0ac9ef091077bc36b0a26cf736eaeea6e9f0990230d9620200e1df014cbbf8a52b86f727298a2e2554af3ea6f895519fc10a02522df5ecccd9cb0713e9d8aae6e01825ce2497c505ed9944a3befe00a3d6", 0x1}, {0x5, 0x38, &(0x7f0000000440)="4054cfd4438a379389c4e6684258297fe7d9cd51b3eb4df87cf293ed1d7f4af21101df710278392a0099b182074c64d6131aee097195ac8a"}]}) 26.875323633s ago: executing program 38 (id=909): ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0x4004e502, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./dev/mtdblock0\x00', 0x42, 0x1ff) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000780)) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000400), &(0x7f0000000580)=0x4) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000080)) r3 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r3, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00'], 0x48) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0xc4042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x400) r4 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex$unlock_wake_list32(r4, 0x60a, 0x81, 0x0, 0x0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES8=r1], 0x50) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000500)={0x3, &(0x7f0000000480)=[{0x8, 0x7b, &(0x7f00000000c0)="67b8e26ed9c2e53ad8ed0844b669b1bbc4f0a896410f9a32beef2d0b70a4d2c91e14b8e613eacfda84a522e16ea3c1dd86520ab70d8b03b6b6acfe3f871801295e0a8a6b60143d10bd5db73da3d2982d9653a903f129153a08993f5effd3c34f1b6886541136d436d9ffa4b732e33672ddcdaa970ad654c8284aee"}, {0x0, 0xd2, &(0x7f0000000140)="b67ad3ba47d0e24739d84a2b7cb7ef3b61b4580d26e306943e6854d1bd34a1f262b119fb8cdf822c57af41e2fd4f2c81e428e0e7b9711b1381e28ba26dc3b254d699f30d1c186fdd7aa7ce75618a2856a8674c8a12d802cd7e2a37d21f307402ba46e6cef51d7ce1e2cef3689d9e0a3b209ce21570db85b2c24aee8ea92b3b19ed0ac9ef091077bc36b0a26cf736eaeea6e9f0990230d9620200e1df014cbbf8a52b86f727298a2e2554af3ea6f895519fc10a02522df5ecccd9cb0713e9d8aae6e01825ce2497c505ed9944a3befe00a3d6", 0x1}, {0x5, 0x38, &(0x7f0000000440)="4054cfd4438a379389c4e6684258297fe7d9cd51b3eb4df87cf293ed1d7f4af21101df710278392a0099b182074c64d6131aee097195ac8a"}]}) 22.558912458s ago: executing program 0 (id=910): arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200) lsetxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000300)={'U+', 0xffff}, 0x16, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1, @ANYBLOB="8a31a6994d1915f6a20b0ec55a5ecfe72a1d6fdcda41b13d59bc2733ffe5ffed399908873ac4e72269635eda068f5dbe3fe9f9fda7d5c65868e8ccc4472638747e3cd8cbce6225d549390990dc0d3b220cf65138df6d8d45c906e26eae415938a93b4738bd83d81a527f07cbb6ca59d9c3b53ef92c061dd74c2e78592e8901b9102f153ef3bd3c9689f11fdfa567b927ebd5920d", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0xc010) 22.448287806s ago: executing program 0 (id=911): memfd_create(&(0x7f0000000000)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) read$FUSE(r1, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/reboot/type\x00', 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[], 0x87a) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000700), 0x2000, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xfffffffffffffffe}}, {@allow_other}], [{@euid_eq={'euid', 0x3d, r5}}, {@hash}]}}) setreuid(0xee01, 0x0) statx(r1, &(0x7f0000000240)='./proc\x00', 0x400, 0x7ff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r7) fsopen(0x0, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4001004) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000001200)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}, 0x29}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000000)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000002300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}, 0x4004000) 21.045264052s ago: executing program 39 (id=912): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000005e0000000800000005"], 0x48) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000600)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r1, &(0x7f0000000140)='27', 0x2) unshare(0xa000200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x80002) r3 = getuid() lstat(&(0x7f0000000540)='./proc\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/reboot/type\x00', 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[], 0x87a) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000700), 0x2000, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xfffffffffffffffe}}, {@allow_other}], [{@euid_eq={'euid', 0x3d, r5}}, {@hash}]}}) setreuid(0xee01, 0x0) statx(r1, &(0x7f0000000240)='./proc\x00', 0x400, 0x7ff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r7) fsopen(0x0, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4001004) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000001200)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}, 0x29}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000000)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000002300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}, 0x4004000) 16.694332256s ago: executing program 40 (id=887): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x8041, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000003c0)=0x2dff) 15.651404645s ago: executing program 41 (id=895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x80}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 13.637803372s ago: executing program 42 (id=904): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x2, @raw_data="72ed754c7f8e5c4b474fd126a3fe9b711f572b927f28b458cac93e432bb57ef39b1bfba2167c4185d7bbc92e07aa16cf033ac0ee2bd34a4fbf466ab574e85930d69c6aeb06f51fbb77993ade83184e1d394a6a7a2254384c92475b2394111d8ec6a4ed1e10cccbc26bdc2467f7154437318592d2797ce955b9a5d7b4c81df762dca734eb24a26a2f0fc222aab195146964d8f6d3c1ecd1552c44916247f7f7a98f11064a60dee2c5505acfbcf07f98a2f8f599884ae613d16e5da439b0a2de9d026ce53581ae1446"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000004c0)={0x410000, 0x2, 0x2}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x2) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r3, &(0x7f0000000800), 0x4000000000001f2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7, 0x3, 0x4, 0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2840, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000000280)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000002c0), 0x2) read(r8, &(0x7f0000000300)=""/93, 0x5d) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000000c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x3, 0x0, 0x30, 0x19}, {0x5000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3}, {0x3ff8, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x6, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0xc, 0xa, 0x4, 0x43, 0x3, 0xfa, 0x82, 0x7, 0xe}, {0x0, 0x9000, 0x17, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0xc, 0x4d, 0x8a, 0xf, 0x4, 0x7}, {0x25000, 0x2, 0x0, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xfd, 0x70}, {0xd000, 0xffffffff, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x50000, 0x2a}, {0x1, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x240000, 0xb, 0x1, 0xe000, [0x6840000000000002, 0x3, 0x4, 0xff]}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000500)={0x2, @sliced={0x88, [0x1, 0x7, 0x5, 0x3ff, 0x0, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x1, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x9, 0x5, 0x258d, 0x2, 0x9, 0x6, 0x4, 0xe, 0x40, 0x7ff, 0x7, 0x0, 0xdea, 0x5, 0xbb], 0x80000000}}) 2.027667393s ago: executing program 2 (id=1044): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001000130428bd700000000000ac1414aa000000000000000000000000ac1e0101000000000000000000000000002000074e2400000a0020201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x804) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 1.959283857s ago: executing program 2 (id=1045): r0 = syz_open_dev$dri(&(0x7f0000000080), 0xabd7, 0x20200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x800040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r1, &(0x7f0000000140)='off', 0x3) write(r1, &(0x7f00000001c0)='on', 0x2) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000180)=0x3) 1.784165264s ago: executing program 1 (id=1048): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000880), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f00000008c0)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.5182421s ago: executing program 1 (id=1053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000076c0)={0x0, 0x0, &(0x7f0000007700)={&(0x7f0000007740)=ANY=[@ANYBLOB="1400000010000100000012000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}}, 0x0) 1.288247169s ago: executing program 1 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x1c}, [@ldst={0x5}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000400)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) exit(0x8) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000600)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000029c0)={r0, &(0x7f0000002a00), 0x0}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x2, 0x1) write$UHID_INPUT2(r3, &(0x7f00000006c0)=ANY=[], 0xcd) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000700)=0x17, 0x4) 876.099716ms ago: executing program 2 (id=1055): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000000900)={@void, @val={0x3, 0x3, 0x8, 0x7, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x1c, 0x65, 0x0, 0x9, 0x84, 0x0, @private=0xa010101, @local}, "c705000400000000"}}, 0x26) 874.855036ms ago: executing program 5 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000100)=',\x00', 0x100000, &(0x7f0000000140)={@_ha_fsid={[0xfff, 0x7]}, {0x779, 0x5, 0x9, 0x5}}, 0x40, &(0x7f0000000180), &(0x7f00000001c0)=0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x6, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x1, 0x0, 0x0, 0x3}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x0, 0x0, 0x2000000}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2, 0x3, @vifc_lcl_ifindex=r5, @broadcast}, 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0xb}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c841}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r6, 0x1, 0xe3, 0x4}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}, 0x1, 0x1000000}, 0x4008000) 820.596656ms ago: executing program 4 (id=1057): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002500)={&(0x7f0000000000)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}, 0x3}, 0x1c, &(0x7f0000002480)=[{&(0x7f0000000040)="09f8c3d96ffafa80b3b77a0faa747227cbccb3a57ce14204fbb7feda191af28a3610d4f9b69d6c5e0f29535c12560ce79f5ad669bdde4b4c2589ab2aa73d5633016a5e1067938120ecdf79d0986b3c9c5d6e066dc844f62c2b155819600f80b79b5a52afe000c55812c42e4a5ee6a3536b157ccbb15a72326efe29143edf4467abbe38fa9e9bd6f0adf4a4febd878c506f71e8d8130b1581946256854f39d7dbca283dfc94eb3da5f64180b4c3222be1bef2c4d6ad46f9883993b4a7f090d6fbff3b9d90f0a4ee056d4e", 0xca}, {&(0x7f0000001480)="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", 0x4cb}], 0x2}, 0x1) 820.336347ms ago: executing program 4 (id=1058): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0xcdc}, 0x1, 0x0, 0x0, 0x44001}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@filename='mtd0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='jffs2\x00', 0x800000, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000300)={0x27, 0x3, 0x0, {0x3, 0x6, 0x0, '](#./)'}}, 0x27) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f4060000", @ANYRES64=r0, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="d506330080000000ffffffffffbf080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 710.095203ms ago: executing program 2 (id=1059): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=[0x8001, 0xfffb, 0x8], &(0x7f0000000080), &(0x7f00000000c0), 0x0}) 709.873163ms ago: executing program 5 (id=1060): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setns(0xc9, 0x0) r1 = fsopen(&(0x7f0000000040)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, 0x0) 630.535285ms ago: executing program 2 (id=1061): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000880), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f00000008c0)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 629.606909ms ago: executing program 2 (id=1062): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) keyctl$setperm(0x5, 0x0, 0x30925) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f0000000480)=[@enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x5d, 0x8000000000000000, 0x3, 0xffffffffffffffff}}, @rdmsr={0x66, 0x18, {0x210}}, @code={0xa, 0x56, {"0f79cc0f23e4440f01c3260f38f17f990fad1fc4a1785328b9008000000f01c1b90e0300000f32407100f30fc7b05fda0000c744240012010000c7442402624ec14bff1c24"}}], 0xbe}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x81, 0x6}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x901800, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000440)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) close_range(r4, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x147) mount$pvfs2(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), 0x100400, &(0x7f0000000380)=ANY=[@ANYBLOB="5b2c73656375726974792e696d61002c73656375726974792e696d61000800000000000000792e696d61002c7375426a5f757365723d2c7375626a5f726f6c653d73656375726974792e696d61002c0064f450fd57b4b0642990f6f542eb97e8fef2693240b302797a4d9071dd43ad5390c11256c81d93fd99dec871a24b5da82cf707e14e5f717c8c9806d521a0909e6327a020f669d0d431762ed2dbcdaef870caa9deff1bc42670a3bfb060971318c9dfe0aae34b"]) lsetxattr$security_ima(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=ANY=[@ANYBLOB="030315"], 0xb, 0x0) 550.390315ms ago: executing program 5 (id=1063): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="110000001000"/22, 0x16) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f00000011c0)={&(0x7f0000001200)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}, 0x29}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000001280)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000002300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}, 0x4004000) 550.237075ms ago: executing program 5 (id=1064): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="0380c2000002aaaaaaaaaabb080600010800060400ffffff"], 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000940)={0x1, 0xa, "e020b5", 0xff, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000680), 0x1, 0x2) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000004c0)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 490.525821ms ago: executing program 4 (id=1065): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001580)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000015c0)=r0, 0x4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='virtiofs\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={r1, 0x20, &(0x7f0000001640)={&(0x7f0000001680)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001780), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r6 = dup(r5) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f048, 0xfd}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000020000/0x18000)=nil, 0x0, 0x0, 0x56, &(0x7f00000017c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 277.282569ms ago: executing program 5 (id=1066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a00)=ANY=[@ANYBLOB="68000000021f0108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}}, 0x0) 224.502536ms ago: executing program 1 (id=1067): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000000900)={@void, @val={0x3, 0x3, 0x8, 0x7, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x20, 0x65, 0x0, 0x9, 0x84, 0x0, @private=0xa010101, @local}, "c70500040000000002000000"}}, 0x2a) 224.234074ms ago: executing program 5 (id=1068): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000040)={0x40000000, 0x203, "095ff2d2d54f6b8c37244d48bdaf27fe7528f43d06e0f1cc2de4a584ec546bf8", 0x7e, 0xfffffffffffffff9, 0x5, 0x10000000000008, 0x80, 0x2000008, 0x3, 0xfff, [0xc, 0x6, 0x102, 0x200]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x303, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000580)='9', 0x1) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/power/pm_async', 0x10000, 0x121) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x2a, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa670d6e933d84ed5}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='syzkaller\x00', 0x7ff, 0xa8, &(0x7f0000000780)=""/168, 0x2300, 0x24, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xe, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r6], 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000300)={0x9, "b55a66f6c7db96ff079df6e0a452bf8422f2a3eca65efb363d58ff35809daa86f8cbf396dda4e64dfc28ecc9d78ef9d231d93690d0a02987ff6081cf804228ae8eb80a88864608cda192835cab39e847822eed48667949f33f29cb7d7803cf041277115ebf5ab8b4a7231487381c8113dea4d08cdb09baebe2c7ae48ed023017"}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="01000000ef01010100000000000000000000000008000000280002"], 0x60}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x40500) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000b40)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x22) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000400)={0x0, 0xffc, 0x0, r12}) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000440)={0x0, 0x0, 0x2, r12, 0x4}) write(r9, &(0x7f0000000280)='0', 0x1) 110.443712ms ago: executing program 4 (id=1069): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000c79fab83bb51a7a6d7000008000300", @ANYRES32=r4, @ANYBLOB='\"\x003'], 0x40}, 0x1, 0x0, 0x0, 0x20010040}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x3}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x48}}, 0x10) (async) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000000000000080000739078000003c9cfcaa71d69ef3800fe9a07000200000000000000"], 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000000073000000000000e8ff000000f000004c7bc17a6acc81142d4d89d73d61a416375e0417590d367e67843ce3f2199949977a1dd56b7e2751e65cf3524eeee3888b935a91b554232dd915acae069c1ed03aa6d3f35f75559450eeedf1e7af60a621", @ANYRES32=0x0, @ANYBLOB="00000000051c00002c0012800e00010069703665727370616e000000180002800400120005001600020000000600180003000000"], 0x4c}}, 0x12) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x56, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 110.153868ms ago: executing program 4 (id=1070): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000240)=""/111) r1 = fanotify_init(0x0, 0x80000) fanotify_mark(r1, 0x60e, 0x48000030, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') r2 = syz_create_resource$futex(&(0x7f0000000200)=0x1) futex(r2, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newsa={0x138, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@local, 0x4d2, 0x32}, @in6=@loopback, {0x400000000000005, 0x0, 0x0, 0x4269, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0xd}, {}, 0x70bd2c, 0x3502, 0xa, 0x4, 0x0, 0x50}, [@algo_crypt={0x48, 0x2, {{'ecb(cast5)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000880}, 0x2014) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, r3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd9a2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) 60.391187ms ago: executing program 1 (id=1071): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f00000008c0)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 59.989888ms ago: executing program 1 (id=1072): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000640)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000680), 0xffffffffffffff94, 0xf00, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000006c0)='veno', 0x4) recvfrom$inet(r0, &(0x7f0000000700)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 4 (id=1073): syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="040e05cb0720"], 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x5, &(0x7f0000001980)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000a00000000095"], &(0x7f00000019c0)='GPL\x00', 0x5}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001500)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f00000015c0)={0x0, 0x3cb1, 0x1c080, 0x8, 0x20002f7}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001800), 0x100, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000001840)={0x6, 0x3, &(0x7f0000001880)=[0x8001, 0xfffb, 0x8], &(0x7f00000018c0), &(0x7f0000001900), 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'vxcan0\x00', 0x0}) prctl$PR_SET_NAME(0xf, &(0x7f0000001680)='(\\\x00') sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="08002b210000000000000000000000000023d0ad5b1b0cbe4685f01838e4211199d1cccd887181cb1b99022690", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="080003000200000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c000180140002007767300000000000000000000000000014000200736974300000000000000000000000000c00018008000300020000003400018008000100", @ANYRES32=r4, @ANYBLOB="1400020070696d72656700000000000000000000140002007663616e3000"/40], 0xcc}, 0x1, 0x0, 0x0, 0x10040000}, 0x10) io_uring_enter(r2, 0x2219, 0x34d3, 0x16, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000016c0)='./sys\x00', &(0x7f0000001700)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write$binfmt_script(r6, &(0x7f0000001780)={'#! ', './sys/file0', [], 0xa, "15f143488b4959aa52a73e93854d3ec69c40985c8658b6bbfd0862d2dd08dc9879335ed4fb91ffaa4cf82febb91fa98ec1525c30b6dd1ba76649c0c63f4bf504efd1a439f2f38b5f75bc5077a4973d518c0c34cb963f61ba33548302f83d5b16d88b8e18b16c7f0b77844e1bcd"}, 0x7c) request_key(&(0x7f00000010c0)='asymmetric\x00', &(0x7f0000001100)={'syz', 0x0, 0xc}, &(0x7f0000001140)='R\x10rust\xe3c*sgrVdn:De', 0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) setns(0xc9, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000011c0), 0x0) close(r7) setns(r7, 0x4000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001200)='ns/net\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001480)={'gre0\x00', &(0x7f0000001400)={'ip_vti0\x00', 0x0, 0x80, 0x7, 0x80000001, 0xffffffc0, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x268, 0x0, 0xb, 0x4, 0x0, @empty, @local, {[@end, @timestamp_addr={0x44, 0x4, 0x4c}, @end, @timestamp_prespec={0x44, 0x24, 0x3e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0xf}, {@empty, 0x5d}]}, @rr={0x7, 0x13, 0xbe, [@loopback, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001240)=@bpf_lsm={0x1e, 0x3, &(0x7f00000014c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001380)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r10 = dup(r0) write$UHID_INPUT(r10, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): 127.386138][ T8408] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 127.389930][ T8408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.412525][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.412571][ T8408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.412679][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.412723][ T8408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.442481][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.450373][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.451217][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.467451][ T8408] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.478059][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.478145][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.481497][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.481595][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.519790][ T8408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.741383][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.950725][ T8408] veth0_vlan: entered promiscuous mode [ 127.958251][ T8408] veth1_vlan: entered promiscuous mode [ 127.991369][ T8408] veth0_macvtap: entered promiscuous mode [ 127.996656][ T8408] veth1_macvtap: entered promiscuous mode [ 128.010768][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.017807][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.123582][ T5799] Bluetooth: hci0: command tx timeout [ 128.126858][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.126871][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.164197][ T6376] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.166976][ T6376] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.167056][ T6376] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.167091][ T6376] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.292582][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.292607][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.714734][ T34] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 128.730904][ T8589] sg_write: data in/out 603979740/251 bytes for SCSI command 0x15-- guessing data in; [ 128.730904][ T8589] program syz.7.789 not setting count and/or reply_len properly [ 128.873726][ T34] usb 9-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 128.874525][ T34] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 128.874550][ T34] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 128.874563][ T34] usb 9-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 128.874575][ T34] usb 9-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 128.875531][ T34] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 128.875554][ T34] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 128.875565][ T34] usb 9-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 128.875577][ T34] usb 9-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 128.877458][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.877471][ T34] usb 9-1: Product: syz [ 128.877479][ T34] usb 9-1: Manufacturer: syz [ 128.877486][ T34] usb 9-1: SerialNumber: syz [ 128.886098][ T34] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 128.890679][ T34] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 128.893668][ T34] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 129.084309][ T8425] usb 9-1: USB disconnect, device number 7 [ 129.111473][ T8425] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 129.122386][ T8425] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 129.126450][ T8425] ti_usb_3410_5052 9-1:2.0: device disconnected [ 129.245290][ T8597] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 129.403547][ T5799] Bluetooth: hci2: command tx timeout [ 129.646441][ T8602] IPv6: Can't replace route, no match found [ 129.716993][ T8608] xt_LOG: prefix is not null-terminated [ 129.903015][ T8614] loop4: detected capacity change from 0 to 2640 [ 129.906476][ T8614] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 129.906702][ T8614] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 129.931123][ T8113] Buffer I/O error on dev loop4, logical block 3, async page read [ 129.937682][ T8616] FAULT_INJECTION: forcing a failure. [ 129.937682][ T8616] name failslab, interval 1, probability 0, space 0, times 0 [ 129.937702][ T8616] CPU: 1 UID: 0 PID: 8616 Comm: syz.6.797 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.937719][ T8616] Tainted: [L]=SOFTLOCKUP [ 129.937724][ T8616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.937731][ T8616] Call Trace: [ 129.937736][ T8616] [ 129.937741][ T8616] dump_stack_lvl+0x100/0x190 [ 129.937774][ T8616] should_fail_ex.cold+0x5/0xa [ 129.937801][ T8616] should_failslab+0xc2/0x120 [ 129.937825][ T8616] __kmalloc_noprof+0xfc/0x840 [ 129.937857][ T8616] ? __memcg_list_lru_alloc+0x429/0x6a0 [ 129.937884][ T8616] __memcg_list_lru_alloc+0x429/0x6a0 [ 129.937901][ T8616] ? xa_load+0x149/0x2c0 [ 129.937919][ T8616] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 129.937939][ T8616] memcg_list_lru_alloc+0xdc/0x110 [ 129.937953][ T8616] ? zswap_store+0x53b/0x2f90 [ 129.937969][ T8616] zswap_store+0x5c6/0x2f90 [ 129.937989][ T8616] ? lock_acquire+0x1d1/0x380 [ 129.938009][ T8616] ? __pfx_zswap_store+0x10/0x10 [ 129.938025][ T8616] ? lock_acquire+0x1d1/0x380 [ 129.938042][ T8616] ? do_raw_spin_lock+0x128/0x260 [ 129.938054][ T8616] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 129.938066][ T8616] ? find_held_lock+0x2b/0x80 [ 129.938078][ T8616] ? swap_writeout+0xdc7/0x1b30 [ 129.938094][ T8616] ? swap_writeout+0xdc7/0x1b30 [ 129.938114][ T8616] swap_writeout+0xdcf/0x1b30 [ 129.938141][ T8616] shrink_folio_list+0x528c/0x59c0 [ 129.938166][ T8616] ? __pfx_shrink_folio_list+0x10/0x10 [ 129.938187][ T8616] ? __lock_acquire+0x560/0x1f40 [ 129.938207][ T8616] ? unwind_next_frame+0xbd/0x2090 [ 129.938226][ T8616] ? __lock_acquire+0x5c0/0x1f40 [ 129.938255][ T8616] ? __lock_acquire+0x5c0/0x1f40 [ 129.938277][ T8616] reclaim_folio_list+0xe9/0x5e0 [ 129.938298][ T8616] ? __pfx_reclaim_folio_list+0x10/0x10 [ 129.938323][ T8616] ? lru_gen_update_size+0x3ea/0x12f0 [ 129.938343][ T8616] ? lru_gen_del_folio+0x3ea/0x720 [ 129.938361][ T8616] reclaim_pages+0x428/0x5e0 [ 129.938381][ T8616] ? __pfx_reclaim_pages+0x10/0x10 [ 129.938399][ T8616] ? find_held_lock+0x2b/0x80 [ 129.938412][ T8616] ? madvise_cold_or_pageout_pte_range+0xb6f/0x2600 [ 129.938431][ T8616] madvise_cold_or_pageout_pte_range+0x182e/0x2600 [ 129.938452][ T8616] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 129.938475][ T8616] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 129.938491][ T8616] walk_pgd_range+0xbef/0x1e00 [ 129.938518][ T8616] ? __pfx_walk_pgd_range+0x10/0x10 [ 129.938536][ T8616] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 129.938558][ T8616] __walk_page_range+0x171/0x850 [ 129.938581][ T8616] walk_page_range_vma_unsafe+0x209/0x8f0 [ 129.938607][ T8616] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 129.938630][ T8616] ? find_held_lock+0x2b/0x80 [ 129.938644][ T8616] ? mlock_drain_local+0x254/0x4e0 [ 129.938659][ T8616] ? mlock_drain_local+0x254/0x4e0 [ 129.938677][ T8616] walk_page_range_vma+0x63/0x90 [ 129.938695][ T8616] madvise_pageout+0x29e/0x5b0 [ 129.938710][ T8616] ? __pfx_madvise_pageout+0x10/0x10 [ 129.938735][ T8616] madvise_vma_behavior+0x41f/0x2170 [ 129.938751][ T8616] ? __pfx_mas_prev+0x10/0x10 [ 129.938769][ T8616] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 129.938786][ T8616] ? find_vma_prev+0xd8/0x150 [ 129.938804][ T8616] ? __pfx_find_vma_prev+0x10/0x10 [ 129.938822][ T8616] ? lock_acquire+0x1d1/0x380 [ 129.938846][ T8616] madvise_walk_vmas+0x30e/0xf00 [ 129.938863][ T8616] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 129.938879][ T8616] ? __pfx_futex_wake_mark+0x10/0x10 [ 129.938904][ T8616] ? lock_acquire+0x1d1/0x380 [ 129.938928][ T8616] madvise_do_behavior+0x1ea/0x510 [ 129.938953][ T8616] ? __pfx_madvise_do_behavior+0x10/0x10 [ 129.938978][ T8616] ? down_read+0x136/0x4c0 [ 129.939039][ T8616] do_madvise+0x238/0x290 [ 129.939064][ T8616] ? __pfx_do_madvise+0x10/0x10 [ 129.939084][ T8616] ? do_futex+0x190/0x440 [ 129.939105][ T8616] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.939147][ T8616] __x64_sys_madvise+0xa9/0x110 [ 129.939166][ T8616] ? lockdep_hardirqs_on+0x7d/0x110 [ 129.939183][ T8616] do_syscall_64+0x123/0x790 [ 129.939202][ T8616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.939220][ T8616] RIP: 0033:0x7fdb1559fb19 [ 129.939234][ T8616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.939249][ T8616] RSP: 002b:00007fdb16422028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 129.939266][ T8616] RAX: ffffffffffffffda RBX: 00007fdb15825fa0 RCX: 00007fdb1559fb19 [ 129.939277][ T8616] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 129.939295][ T8616] RBP: 00007fdb15637b70 R08: 0000000000000000 R09: 0000000000000000 [ 129.939306][ T8616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.939315][ T8616] R13: 00007fdb15826038 R14: 00007fdb15825fa0 R15: 00007ffc23b314b8 [ 129.939336][ T8616] [ 129.977210][ T8618] overlayfs: failed to resolve './cgroup': -2 [ 130.213455][ T5794] Bluetooth: hci0: command tx timeout [ 130.733591][ T8638] netlink: 68 bytes leftover after parsing attributes in process `syz.7.806'. [ 130.746211][ T8638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8638 comm=syz.7.806 [ 130.863555][ T34] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 131.015835][ T34] usb 9-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 131.016865][ T34] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 131.016887][ T34] usb 9-1: config 1 has no interface number 0 [ 131.019446][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.019467][ T34] usb 9-1: Product: syz [ 131.019480][ T34] usb 9-1: Manufacturer: syz [ 131.019493][ T34] usb 9-1: SerialNumber: syz [ 131.037556][ T34] usb 9-1: 3:1 : does not exist [ 131.037577][ T34] usb 9-1: 3:2 : does not exist [ 131.261392][ T34] usb 9-1: USB disconnect, device number 8 [ 131.316510][ T8642] [syz.7.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [403c!=40, 4,4000] [ 131.748930][ T8647] xt_MASQUERADE: bad rangesize 10242 [ 131.877184][ T8651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=8651 comm=syz.7.810 [ 132.203772][ T5794] Bluetooth: hci4: command 0x1003 tx timeout [ 132.205922][ T5799] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 132.283569][ T5799] Bluetooth: hci0: command tx timeout [ 132.407285][ T8661] SELinux: policydb version 0 does not match my version range 15-35 [ 132.407332][ T8661] SELinux: failed to load policy [ 132.571582][ T8669] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 132.695825][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.695874][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.887376][ T8679] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 133.225660][ T42] kauditd_printk_skb: 1080 callbacks suppressed [ 133.225679][ T42] audit: type=1400 audit(1793754623.970:2049): avc: denied { write } for pid=8693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.346948][ T42] audit: type=1400 audit(1793754624.100:2050): avc: denied { write } for pid=8700 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.817427][ T8734] netlink: 14 bytes leftover after parsing attributes in process `syz.6.829'. [ 133.940010][ T42] audit: type=1400 audit(1793754624.690:2051): avc: denied { watch } for pid=8737 comm="syz.4.824" path="/224/file0" dev="tmpfs" ino=1251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.940705][ T8738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.950118][ T8734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.985163][ T8734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.991423][ T8734] bond0 (unregistering): Released all slaves [ 134.015631][ T8741] jffs2: notice: (8741) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 134.022644][ T42] audit: type=1400 audit(1793754624.770:2052): avc: denied { setattr } for pid=8740 comm="syz.4.830" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.118125][ T8741] jffs2: warning: (8741) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=192 [ 134.126606][ T8725] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.186175][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 134.197545][ T8745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.831'. [ 134.217784][ T8725] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.277437][ T8725] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.397155][ T8725] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.559561][ T8758] tmpfs: Bad value for 'mpol' [ 134.582285][ T8758] netlink: 16 bytes leftover after parsing attributes in process `syz.7.836'. [ 134.582320][ T8758] netlink: 16 bytes leftover after parsing attributes in process `syz.7.836'. [ 134.847968][ T42] audit: type=1400 audit(1793754625.600:2053): avc: denied { mounton } for pid=8767 comm="syz.7.839" path="/" dev="nsfs" ino=4026533499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 135.077423][ T5877] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.077458][ T5877] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.145675][ T42] audit: type=1400 audit(1793754625.900:2054): avc: denied { write } for pid=8775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.211892][ T42] audit: type=1400 audit(1793754625.960:2055): avc: denied { write } for pid=8778 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.232603][ T5877] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.232646][ T5877] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.268801][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.7.844'. [ 135.356057][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.362600][ T5877] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.362642][ T5877] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.371698][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.374951][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.375928][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.376550][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.491953][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.6.847'. [ 135.501832][ T42] audit: type=1400 audit(1793754626.250:2056): avc: denied { write } for pid=8790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.585272][ T5877] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.585295][ T5877] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.607937][ T42] audit: type=1400 audit(1793754626.360:2057): avc: denied { write } for pid=8800 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.835745][ T8811] netlink: 'syz.7.846': attribute type 10 has an invalid length. [ 135.835762][ T8811] netlink: 55 bytes leftover after parsing attributes in process `syz.7.846'. [ 135.849496][ T42] audit: type=1400 audit(1793754626.600:2058): avc: denied { write } for pid=8807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.859784][ T8808] hfs: unable to load iocharset "io#harset" [ 136.123153][ T5877] bridge_slave_1: left allmulticast mode [ 136.123209][ T5877] bridge_slave_1: left promiscuous mode [ 136.124723][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.138394][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.335298][ T5877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.340139][ T5877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.341139][ T5877] bond0 (unregistering): Released all slaves [ 136.372560][ T8784] rxe_eth0 speed is unknown, defaulting to 1000 [ 136.573041][ T8829] overlayfs: failed lookup in lower (newroot/22, name='file0', err=-40): overlapping layers [ 136.714350][ T8840] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 136.722817][ T5498] 8021q: adding VLAN 0 to HW filter on device eth18 [ 136.755361][ T8840] iommufd_mock iommufd_mock1: Adding to iommu group 11 [ 136.831069][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.854'. [ 136.956763][ T8852] FAULT_INJECTION: forcing a failure. [ 136.956763][ T8852] name failslab, interval 1, probability 0, space 0, times 0 [ 136.956787][ T8852] CPU: 1 UID: 0 PID: 8852 Comm: syz.6.856 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.956803][ T8852] Tainted: [L]=SOFTLOCKUP [ 136.956807][ T8852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.956815][ T8852] Call Trace: [ 136.956820][ T8852] [ 136.956825][ T8852] dump_stack_lvl+0x100/0x190 [ 136.956850][ T8852] should_fail_ex.cold+0x5/0xa [ 136.956870][ T8852] should_failslab+0xc2/0x120 [ 136.956885][ T8852] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 136.956907][ T8852] ? setup_ipc_sysctls+0x5e/0x300 [ 136.956924][ T8852] kmemdup_noprof+0x29/0x60 [ 136.956937][ T8852] setup_ipc_sysctls+0x5e/0x300 [ 136.956952][ T8852] copy_ipcs+0x575/0x7e0 [ 136.956969][ T8852] create_new_namespaces+0x20a/0xac0 [ 136.956987][ T8852] ? security_capable+0x80/0x260 [ 136.957004][ T8852] unshare_nsproxy_namespaces+0xf6/0x210 [ 136.957023][ T8852] ksys_unshare+0x44f/0x980 [ 136.957038][ T8852] ? __pfx_ksys_unshare+0x10/0x10 [ 136.957060][ T8852] __x64_sys_unshare+0x31/0x40 [ 136.957075][ T8852] do_syscall_64+0x123/0x790 [ 136.957090][ T8852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.957103][ T8852] RIP: 0033:0x7fdb1559fb19 [ 136.957113][ T8852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.957125][ T8852] RSP: 002b:00007fdb16422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 136.957144][ T8852] RAX: ffffffffffffffda RBX: 00007fdb15825fa0 RCX: 00007fdb1559fb19 [ 136.957153][ T8852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000200 [ 136.957161][ T8852] RBP: 00007fdb15637b70 R08: 0000000000000000 R09: 0000000000000000 [ 136.957169][ T8852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.957177][ T8852] R13: 00007fdb15826038 R14: 00007fdb15825fa0 R15: 00007ffc23b314b8 [ 136.957194][ T8852] [ 137.196088][ T8860] netlink: 16 bytes leftover after parsing attributes in process `syz.6.859'. [ 137.207114][ T5498] 8021q: adding VLAN 0 to HW filter on device eth19 [ 137.291597][ T5877] hsr_slave_0: left promiscuous mode [ 137.302832][ T5877] hsr_slave_1: left promiscuous mode [ 137.314367][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.314564][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.320904][ T5877] veth1_macvtap: left promiscuous mode [ 137.320940][ T5877] veth0_macvtap: left promiscuous mode [ 137.321053][ T5877] veth1_vlan: left promiscuous mode [ 137.321110][ T5877] veth0_vlan: left promiscuous mode [ 137.402073][ T5799] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 137.483787][ T5799] Bluetooth: hci3: command tx timeout [ 137.550333][ T5877] team0 (unregistering): Port device team_slave_1 removed [ 137.577877][ T5877] team0 (unregistering): Port device team_slave_0 removed [ 137.759931][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.760068][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.760200][ T8784] bridge_slave_0: entered allmulticast mode [ 137.761557][ T8784] bridge_slave_0: entered promiscuous mode [ 137.775819][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.775948][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.776052][ T8784] bridge_slave_1: entered allmulticast mode [ 137.777440][ T8784] bridge_slave_1: entered promiscuous mode [ 137.834428][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.839729][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.877345][ T8784] team0: Port device team_slave_0 added [ 137.879273][ T8784] team0: Port device team_slave_1 added [ 137.899143][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.899159][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.899182][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.900706][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.900719][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.900740][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.927287][ T8784] hsr_slave_0: entered promiscuous mode [ 137.928095][ T8784] hsr_slave_1: entered promiscuous mode [ 137.928646][ T8784] debugfs: 'hsr0' already exists in 'hsr' [ 137.928660][ T8784] Cannot create hsr debugfs directory [ 138.166999][ T5498] 8021q: adding VLAN 0 to HW filter on device eth20 [ 138.180431][ T8784] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 138.186978][ T8784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.190075][ T8784] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 138.195696][ T8784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.196527][ T8784] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 138.200487][ T8784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.200950][ T8784] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 138.205446][ T8784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 138.208887][ T5877] IPVS: stop unused estimator thread 0... [ 138.232060][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.232156][ T8784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.285965][ T8784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.298616][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.301609][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 138.301620][ T42] audit: type=1400 audit(1793754629.050:2068): avc: denied { write } for pid=8894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.350360][ T8784] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.369968][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.370015][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.372710][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.372753][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.388884][ T42] audit: type=1400 audit(1793754629.140:2069): avc: denied { write } for pid=8897 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.440931][ T5498] 8021q: adding VLAN 0 to HW filter on device eth21 [ 138.615056][ T110] wlan1: Trigger new scan to find an IBSS to join [ 138.790283][ T42] audit: type=1400 audit(1793754629.540:2070): avc: denied { write } for pid=8916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.861889][ T8914] FAULT_INJECTION: forcing a failure. [ 138.861889][ T8914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.861932][ T8914] CPU: 3 UID: 0 PID: 8914 Comm: syz.6.866 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.861957][ T8914] Tainted: [L]=SOFTLOCKUP [ 138.861962][ T8914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.861971][ T8914] Call Trace: [ 138.861984][ T8914] [ 138.861991][ T8914] dump_stack_lvl+0x100/0x190 [ 138.862027][ T8914] should_fail_ex.cold+0x5/0xa [ 138.862052][ T8914] copy_folio_from_iter_atomic+0x5cc/0x2020 [ 138.862079][ T8914] ? filemap_add_folio+0x114/0x640 [ 138.862108][ T8914] ? __pfx_filemap_add_folio+0x10/0x10 [ 138.862136][ T8914] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 138.862155][ T8914] ? trace_kmalloc+0xeb/0x110 [ 138.862177][ T8914] ? __filemap_get_folio_mpol+0x364/0x1230 [ 138.862211][ T8914] fuse_perform_write+0x715/0x1a10 [ 138.862262][ T8914] ? __pfx_fuse_perform_write+0x10/0x10 [ 138.862305][ T8914] ? __pfx_generic_write_checks+0x10/0x10 [ 138.862333][ T8914] ? file_update_time_flags+0x38c/0x520 [ 138.862356][ T8914] ? __pfx_down_write+0x10/0x10 [ 138.862375][ T8914] ? lock_acquire+0x1d1/0x380 [ 138.862427][ T8914] fuse_file_write_iter+0x436/0x9a0 [ 138.862455][ T8914] vfs_write+0x6af/0x1050 [ 138.862473][ T8914] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 138.862496][ T8914] ? __pfx_vfs_write+0x10/0x10 [ 138.862512][ T8914] ? find_held_lock+0x2b/0x80 [ 138.862548][ T8914] ksys_write+0x12a/0x250 [ 138.862565][ T8914] ? __pfx_ksys_write+0x10/0x10 [ 138.862597][ T8914] do_syscall_64+0x123/0x790 [ 138.862618][ T8914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.862633][ T8914] RIP: 0033:0x7fdb1559fb19 [ 138.862660][ T8914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.862677][ T8914] RSP: 002b:00007fdb16422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.862696][ T8914] RAX: ffffffffffffffda RBX: 00007fdb15825fa0 RCX: 00007fdb1559fb19 [ 138.862708][ T8914] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000003 [ 138.862719][ T8914] RBP: 00007fdb16422090 R08: 0000000000000000 R09: 0000000000000000 [ 138.862731][ T8914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.862742][ T8914] R13: 00007fdb15826038 R14: 00007fdb15825fa0 R15: 00007ffc23b314b8 [ 138.862763][ T8914] [ 138.869051][ T42] audit: type=1400 audit(1793754629.620:2071): avc: denied { write } for pid=8922 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.112253][ T42] audit: type=1400 audit(1793754629.860:2072): avc: denied { write } for pid=8928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.169148][ T8784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.194294][ T42] audit: type=1400 audit(1793754629.950:2073): avc: denied { bind } for pid=8939 comm="syz.6.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.248129][ T42] audit: type=1400 audit(1793754630.000:2074): avc: denied { write } for pid=8938 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.302166][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.870'. [ 139.302187][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.870'. [ 139.347226][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.352487][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.353113][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.357642][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.358159][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.578045][ T5799] Bluetooth: hci3: command tx timeout [ 139.655300][ T42] audit: type=1400 audit(1793754630.410:2075): avc: denied { write } for pid=8952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.688907][ T8970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.735909][ T42] audit: type=1400 audit(1793754630.490:2076): avc: denied { write } for pid=8974 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.760039][ T8970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.850906][ T8784] veth0_vlan: entered promiscuous mode [ 139.854300][ T8784] veth1_vlan: entered promiscuous mode [ 139.863588][ T8599] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 139.907768][ T8784] veth0_macvtap: entered promiscuous mode [ 139.910662][ T8784] veth1_macvtap: entered promiscuous mode [ 139.925845][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.931512][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.945985][ T42] audit: type=1400 audit(1793754630.700:2077): avc: denied { write } for pid=8982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.013819][ T8599] usb 11-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 140.014616][ T8599] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.014641][ T8599] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 140.014655][ T8599] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 140.014668][ T8599] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 140.014680][ T8599] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 140.014693][ T8599] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 140.014706][ T8599] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 140.014719][ T8599] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 140.014731][ T8599] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.014743][ T8599] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.014755][ T8599] usb 11-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 140.016304][ T8599] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.016317][ T8599] usb 11-1: Product: syz [ 140.016325][ T8599] usb 11-1: Manufacturer: syz [ 140.016333][ T8599] usb 11-1: SerialNumber: syz [ 140.018202][ T8968] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 140.018293][ T8968] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 140.018347][ T8968] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 140.018395][ T8968] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 140.018493][ T8968] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 140.018539][ T8968] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 140.018631][ T8968] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 140.022845][ T8599] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 140.023672][ T8599] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 7 [ 140.025474][ T8599] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 140.025520][ T8599] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 5 [ 140.026632][ T8599] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 140.028259][ T8599] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 3 [ 140.028293][ T8599] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 4 [ 140.028335][ T8599] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 140.029686][ T8599] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 140.120085][ T8946] rxe_eth0 speed is unknown, defaulting to 1000 [ 140.124171][ T8494] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.124423][ T8494] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.124834][ T8494] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.125104][ T8494] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.125388][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.125404][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.153083][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.153103][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.401741][ T5139] usb 11-1: USB disconnect, device number 2 [ 140.415629][ T5139] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 140.426896][ T5139] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 140.427486][ T5139] keyspan 11-1:1.0: device disconnected [ 140.601066][ T9018] ip6_vti0: entered promiscuous mode [ 140.606926][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.607035][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.607107][ T8946] bridge_slave_0: entered allmulticast mode [ 140.607883][ T8946] bridge_slave_0: entered promiscuous mode [ 140.609402][ T8946] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.609444][ T8946] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.609601][ T8946] bridge_slave_1: entered allmulticast mode [ 140.610288][ T8946] bridge_slave_1: entered promiscuous mode [ 140.628732][ T8946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.630043][ T8946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.646586][ T8946] team0: Port device team_slave_0 added [ 140.648705][ T8946] team0: Port device team_slave_1 added [ 140.652034][ T9021] netlink: 28 bytes leftover after parsing attributes in process `syz.8.884'. [ 140.674767][ T8946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.674785][ T8946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.674809][ T8946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.676342][ T8946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.676356][ T8946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.676381][ T8946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.719668][ T8946] hsr_slave_0: entered promiscuous mode [ 140.720469][ T8946] hsr_slave_1: entered promiscuous mode [ 140.721012][ T8946] debugfs: 'hsr0' already exists in 'hsr' [ 140.721026][ T8946] Cannot create hsr debugfs directory [ 140.817314][ T9024] FAULT_INJECTION: forcing a failure. [ 140.817314][ T9024] name failslab, interval 1, probability 0, space 0, times 0 [ 140.817349][ T9024] CPU: 2 UID: 0 PID: 9024 Comm: syz.7.885 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.817380][ T9024] Tainted: [L]=SOFTLOCKUP [ 140.817388][ T9024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.817402][ T9024] Call Trace: [ 140.817410][ T9024] [ 140.817418][ T9024] dump_stack_lvl+0x100/0x190 [ 140.817479][ T9024] should_fail_ex.cold+0x5/0xa [ 140.817513][ T9024] should_failslab+0xc2/0x120 [ 140.817539][ T9024] __kmalloc_noprof+0xfc/0x840 [ 140.817576][ T9024] ? __register_sysctl_table+0xac/0x1650 [ 140.817606][ T9024] __register_sysctl_table+0xac/0x1650 [ 140.817628][ T9024] ? trace_kmalloc+0xeb/0x110 [ 140.817649][ T9024] ? __kasan_kmalloc+0xaa/0xb0 [ 140.817672][ T9024] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 140.817708][ T9024] ? __pfx___register_sysctl_table+0x10/0x10 [ 140.817729][ T9024] ? setup_ipc_sysctls+0x5e/0x300 [ 140.817758][ T9024] ? __asan_memcpy+0x3c/0x60 [ 140.817791][ T9024] setup_ipc_sysctls+0x1aa/0x300 [ 140.817819][ T9024] copy_ipcs+0x575/0x7e0 [ 140.817849][ T9024] create_new_namespaces+0x20a/0xac0 [ 140.817879][ T9024] ? security_capable+0x80/0x260 [ 140.817909][ T9024] unshare_nsproxy_namespaces+0xf6/0x210 [ 140.817941][ T9024] ksys_unshare+0x44f/0x980 [ 140.817969][ T9024] ? __pfx_ksys_unshare+0x10/0x10 [ 140.818009][ T9024] __x64_sys_unshare+0x31/0x40 [ 140.818036][ T9024] do_syscall_64+0x123/0x790 [ 140.818061][ T9024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.818084][ T9024] RIP: 0033:0x7f92fc39fb19 [ 140.818103][ T9024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.818122][ T9024] RSP: 002b:00007f92fd225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 140.818143][ T9024] RAX: ffffffffffffffda RBX: 00007f92fc625fa0 RCX: 00007f92fc39fb19 [ 140.818158][ T9024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000200 [ 140.818173][ T9024] RBP: 00007f92fc437b70 R08: 0000000000000000 R09: 0000000000000000 [ 140.818186][ T9024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.818198][ T9024] R13: 00007f92fc626038 R14: 00007f92fc625fa0 R15: 00007ffdb7053568 [ 140.818227][ T9024] [ 141.041998][ T8946] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 141.051637][ T8946] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.052359][ T8946] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 141.061823][ T8946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.062259][ T8946] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 141.071290][ T8946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.076304][ T8946] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 141.081155][ T8946] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.181670][ T8946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.199522][ T8946] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.207922][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.208007][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.228412][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.228500][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.403609][ T5799] Bluetooth: hci4: command tx timeout [ 141.579405][ T8946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.643479][ T5799] Bluetooth: hci3: command tx timeout [ 141.724710][ T64] wlan1: Trigger new scan to find an IBSS to join [ 141.745021][ T8946] veth0_vlan: entered promiscuous mode [ 141.748138][ T8946] veth1_vlan: entered promiscuous mode [ 141.763899][ T8946] veth0_macvtap: entered promiscuous mode [ 141.766424][ T8946] veth1_macvtap: entered promiscuous mode [ 141.772701][ T8946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.779155][ T8946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.880956][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.880973][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.894846][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.894872][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.894892][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.894911][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.905571][ T5876] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 141.908115][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.908127][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.004017][ T9067] FAULT_INJECTION: forcing a failure. [ 142.004017][ T9067] name failslab, interval 1, probability 0, space 0, times 0 [ 142.004039][ T9067] CPU: 3 UID: 0 PID: 9067 Comm: syz.8.894 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.004057][ T9067] Tainted: [L]=SOFTLOCKUP [ 142.004061][ T9067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.004070][ T9067] Call Trace: [ 142.004074][ T9067] [ 142.004080][ T9067] dump_stack_lvl+0x100/0x190 [ 142.004106][ T9067] should_fail_ex.cold+0x5/0xa [ 142.004126][ T9067] should_failslab+0xc2/0x120 [ 142.004142][ T9067] __kmalloc_noprof+0xfc/0x840 [ 142.004162][ T9067] ? __register_sysctl_table+0xac/0x1650 [ 142.004179][ T9067] __register_sysctl_table+0xac/0x1650 [ 142.004191][ T9067] ? trace_kmalloc+0xeb/0x110 [ 142.004204][ T9067] ? __kasan_kmalloc+0xaa/0xb0 [ 142.004217][ T9067] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 142.004238][ T9067] ? __pfx___register_sysctl_table+0x10/0x10 [ 142.004250][ T9067] ? setup_ipc_sysctls+0x5e/0x300 [ 142.004265][ T9067] ? __asan_memcpy+0x3c/0x60 [ 142.004306][ T9067] setup_ipc_sysctls+0x1aa/0x300 [ 142.004324][ T9067] copy_ipcs+0x575/0x7e0 [ 142.004342][ T9067] create_new_namespaces+0x20a/0xac0 [ 142.004362][ T9067] ? security_capable+0x80/0x260 [ 142.004381][ T9067] unshare_nsproxy_namespaces+0xf6/0x210 [ 142.004401][ T9067] ksys_unshare+0x44f/0x980 [ 142.004418][ T9067] ? __pfx_ksys_unshare+0x10/0x10 [ 142.004442][ T9067] __x64_sys_unshare+0x31/0x40 [ 142.004458][ T9067] do_syscall_64+0x123/0x790 [ 142.004474][ T9067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.004487][ T9067] RIP: 0033:0x7fa89db9fb19 [ 142.004498][ T9067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.004510][ T9067] RSP: 002b:00007fa89eb2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 142.004523][ T9067] RAX: ffffffffffffffda RBX: 00007fa89de25fa0 RCX: 00007fa89db9fb19 [ 142.004531][ T9067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000200 [ 142.004539][ T9067] RBP: 00007fa89dc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 142.004547][ T9067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.004554][ T9067] R13: 00007fa89de26038 R14: 00007fa89de25fa0 R15: 00007ffcc1285818 [ 142.004571][ T9067] [ 142.465980][ T5876] usb 11-1: unable to get BOS descriptor or descriptor too short [ 142.466243][ T5876] usb 11-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 142.473372][ T5876] usb 11-1: config 142 has an invalid interface number: 251 but max is 0 [ 142.473394][ T5876] usb 11-1: config 142 descriptor has 1 excess byte, ignoring [ 142.473409][ T5876] usb 11-1: config 142 has no interface number 0 [ 142.473437][ T5876] usb 11-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 142.473459][ T5876] usb 11-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 142.473477][ T5876] usb 11-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 142.473494][ T5876] usb 11-1: config 142 interface 251 has no altsetting 0 [ 142.483058][ T5876] usb 11-1: string descriptor 0 read error: -22 [ 142.483909][ T5876] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.530827][ T9038] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 142.530884][ T9038] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 142.553772][ T5876] cypress_m8 11-1:142.251: HID->COM RS232 Adapter converter detected [ 142.584280][ T5876] usb 11-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 142.745350][ T50] usb 11-1: USB disconnect, device number 3 [ 142.754384][ T50] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 142.757829][ T50] cypress_m8 11-1:142.251: device disconnected [ 142.968166][ T9078] gadgetfs: bound to dummy_udc driver [ 143.464302][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 143.464321][ T42] audit: type=1400 audit(1793754634.210:2084): avc: denied { bind } for pid=9080 comm="syz.6.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.493708][ T5799] Bluetooth: hci4: command tx timeout [ 143.724952][ T5799] Bluetooth: hci3: command tx timeout [ 143.757141][ T9086] bridge_slave_1: left allmulticast mode [ 143.757176][ T9086] bridge_slave_1: left promiscuous mode [ 143.757372][ T9086] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.758185][ T42] audit: type=1400 audit(1793754634.510:2085): avc: denied { append } for pid=9082 comm="syz.6.900" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 143.784469][ T9086] bridge_slave_0: left allmulticast mode [ 143.784509][ T9086] bridge_slave_0: left promiscuous mode [ 143.784718][ T9086] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.333374][ T9084] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 144.336186][ T9084] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 144.337387][ T9084] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 144.338885][ T9084] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 144.340649][ T9084] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 144.342758][ T9084] kvm: requested 156723 ns i8254 timer period limited to 200000 ns [ 144.364647][ T9084] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 144.367469][ T9084] kvm: requested 48609 ns i8254 timer period limited to 200000 ns [ 144.370263][ T9084] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 144.380927][ T9084] kvm: requested 149181 ns i8254 timer period limited to 200000 ns [ 144.680774][ T9091] FAULT_INJECTION: forcing a failure. [ 144.680774][ T9091] name failslab, interval 1, probability 0, space 0, times 0 [ 144.680854][ T9091] CPU: 0 UID: 0 PID: 9091 Comm: syz.6.902 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.680874][ T9091] Tainted: [L]=SOFTLOCKUP [ 144.680879][ T9091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.680888][ T9091] Call Trace: [ 144.680898][ T9091] [ 144.680904][ T9091] dump_stack_lvl+0x100/0x190 [ 144.680990][ T9091] should_fail_ex.cold+0x5/0xa [ 144.681017][ T9091] should_failslab+0xc2/0x120 [ 144.681049][ T9091] __kmalloc_noprof+0xfc/0x840 [ 144.681070][ T9091] ? __register_sysctl_table+0xac/0x1650 [ 144.681107][ T9091] __register_sysctl_table+0xac/0x1650 [ 144.681124][ T9091] ? __pfx___register_sysctl_table+0x10/0x10 [ 144.681139][ T9091] ? setup_ipc_sysctls+0x11a/0x300 [ 144.681168][ T9091] setup_ipc_sysctls+0x1aa/0x300 [ 144.681185][ T9091] copy_ipcs+0x575/0x7e0 [ 144.681203][ T9091] create_new_namespaces+0x20a/0xac0 [ 144.681229][ T9091] ? security_capable+0x80/0x260 [ 144.681247][ T9091] unshare_nsproxy_namespaces+0xf6/0x210 [ 144.681265][ T9091] ksys_unshare+0x44f/0x980 [ 144.681281][ T9091] ? __pfx_ksys_unshare+0x10/0x10 [ 144.681305][ T9091] __x64_sys_unshare+0x31/0x40 [ 144.681321][ T9091] do_syscall_64+0x123/0x790 [ 144.681370][ T9091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.681384][ T9091] RIP: 0033:0x7fdb1559fb19 [ 144.681403][ T9091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.681415][ T9091] RSP: 002b:00007fdb16422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 144.681428][ T9091] RAX: ffffffffffffffda RBX: 00007fdb15825fa0 RCX: 00007fdb1559fb19 [ 144.681436][ T9091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000200 [ 144.681444][ T9091] RBP: 00007fdb15637b70 R08: 0000000000000000 R09: 0000000000000000 [ 144.681452][ T9091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.681460][ T9091] R13: 00007fdb15826038 R14: 00007fdb15825fa0 R15: 00007ffc23b314b8 [ 144.681476][ T9091] [ 144.682769][ T42] audit: type=1400 audit(1793754635.430:2086): avc: denied { create } for pid=9092 comm="syz.9.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 144.686692][ T110] wlan1: Trigger new scan to find an IBSS to join [ 145.457869][ T9101] netlink: 40 bytes leftover after parsing attributes in process `syz.9.905'. [ 145.550491][ T9104] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 145.553410][ T9104] loop0: detected capacity change from 0 to 3904 [ 145.574654][ T5799] Bluetooth: hci4: command tx timeout [ 145.600740][ T64] wlan1: Creating new IBSS network, BSSID c6:2e:71:b5:63:e8 [ 145.830897][ T9106] netlink: 80 bytes leftover after parsing attributes in process `syz.9.907'. [ 146.504098][ T5877] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.594822][ T5877] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.688706][ T5877] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.838588][ T5877] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.241593][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.244788][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.248865][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.254803][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.255287][ T5877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.260903][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.261219][ T5877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.287970][ T5877] bond0 (unregistering): Released all slaves [ 147.388116][ T42] audit: type=1400 audit(1793754638.150:2087): avc: denied { write } for pid=9114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.519303][ T42] audit: type=1400 audit(1793754638.270:2088): avc: denied { write } for pid=9118 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.579850][ T5498] 8021q: adding VLAN 0 to HW filter on device eth22 [ 147.699889][ T42] audit: type=1400 audit(1793754638.450:2089): avc: denied { write } for pid=9126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.715669][ T9109] rxe_eth0 speed is unknown, defaulting to 1000 [ 147.772332][ T42] audit: type=1400 audit(1793754638.520:2090): avc: denied { write } for pid=9129 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.851319][ T5498] 8021q: adding VLAN 0 to HW filter on device eth23 [ 147.876089][ T5877] hsr_slave_0: left promiscuous mode [ 147.877597][ T5877] hsr_slave_1: left promiscuous mode [ 147.877980][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.877991][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.881926][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.881938][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.899909][ T5877] veth1_macvtap: left promiscuous mode [ 147.899932][ T5877] veth0_macvtap: left promiscuous mode [ 147.899999][ T5877] veth1_vlan: left promiscuous mode [ 147.900031][ T5877] veth0_vlan: left promiscuous mode [ 148.157314][ T5877] team0 (unregistering): Port device team_slave_1 removed [ 148.174972][ T5877] team0 (unregistering): Port device team_slave_0 removed [ 148.570270][ T42] audit: type=1400 audit(1793754639.320:2091): avc: denied { write } for pid=9136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.627570][ T9109] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.627664][ T9109] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.627727][ T9109] bridge_slave_0: entered allmulticast mode [ 148.630669][ T9109] bridge_slave_0: entered promiscuous mode [ 148.632509][ T9109] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.632587][ T9109] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.632649][ T9109] bridge_slave_1: entered allmulticast mode [ 148.636038][ T9109] bridge_slave_1: entered promiscuous mode [ 148.653949][ T9109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.655750][ T9109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.661075][ T42] audit: type=1400 audit(1793754639.410:2092): avc: denied { write } for pid=9142 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.667443][ T9109] team0: Port device team_slave_0 added [ 148.668723][ T9109] team0: Port device team_slave_1 added [ 148.680326][ T9109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.680337][ T9109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.680352][ T9109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.681211][ T9109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.681220][ T9109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.681235][ T9109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.701652][ T9109] hsr_slave_0: entered promiscuous mode [ 148.702091][ T9109] hsr_slave_1: entered promiscuous mode [ 148.702435][ T9109] debugfs: 'hsr0' already exists in 'hsr' [ 148.702445][ T9109] Cannot create hsr debugfs directory [ 148.829844][ T5498] 8021q: adding VLAN 0 to HW filter on device eth24 [ 148.981876][ T42] audit: type=1400 audit(1793754639.730:2093): avc: denied { write } for pid=9145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.280333][ T42] audit: type=1400 audit(1793754640.030:2094): avc: denied { write } for pid=9148 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.323746][ T5799] Bluetooth: hci1: command tx timeout [ 149.788705][ T9109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.802661][ T9109] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.804633][ T9109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.812989][ T9109] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.815097][ T9109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.819782][ T9109] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.820557][ T9109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.826703][ T9109] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.832639][ T5498] 8021q: adding VLAN 0 to HW filter on device eth25 [ 149.940116][ T9109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.952944][ T9109] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.960289][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.960378][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.971212][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.971300][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.017705][ T42] audit: type=1400 audit(1793754640.770:2095): avc: denied { write } for pid=9158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.025139][ T9109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.131424][ T42] audit: type=1400 audit(1793754640.880:2096): avc: denied { write } for pid=9163 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.233005][ T42] audit: type=1400 audit(1793754640.980:2097): avc: denied { write } for pid=9167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.291080][ T42] audit: type=1400 audit(1793754641.040:2098): avc: denied { write } for pid=9171 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.459556][ T42] audit: type=1400 audit(1793754641.210:2099): avc: denied { write } for pid=9175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.498108][ T42] audit: type=1400 audit(1793754641.250:2100): avc: denied { write } for pid=9179 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.608991][ T9109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.637735][ T9109] veth0_vlan: entered promiscuous mode [ 150.647265][ T9109] veth1_vlan: entered promiscuous mode [ 150.671039][ T9109] veth0_macvtap: entered promiscuous mode [ 150.673459][ T9109] veth1_macvtap: entered promiscuous mode [ 150.679816][ T9109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.683692][ T9109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.707199][ T8494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.707240][ T8494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.707269][ T8494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.707295][ T8494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.796453][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.796473][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.808537][ T110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.808561][ T110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.142808][ T8494] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.564981][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.571816][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.578401][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.579259][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.579724][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.202271][ T8494] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.234860][ T9233] rxe_eth0 speed is unknown, defaulting to 1000 [ 153.608443][ T8494] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.626240][ T9233] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.626322][ T9233] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.626390][ T9233] bridge_slave_0: entered allmulticast mode [ 153.627090][ T9233] bridge_slave_0: entered promiscuous mode [ 153.628636][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 153.628647][ T42] audit: type=1400 audit(1793754644.380:2126): avc: denied { write } for pid=9276 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.648349][ T9233] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.648463][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.648617][ T9233] bridge_slave_1: entered allmulticast mode [ 153.649800][ T9233] bridge_slave_1: entered promiscuous mode [ 153.679014][ T9233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.681158][ T9233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.701785][ T9233] team0: Port device team_slave_0 added [ 153.706495][ T9233] team0: Port device team_slave_1 added [ 153.759150][ T8494] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.781285][ T9233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.781301][ T9233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.781323][ T9233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.782334][ T9233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.782343][ T9233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.782358][ T9233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.858558][ T9233] hsr_slave_0: entered promiscuous mode [ 153.861314][ T9233] hsr_slave_1: entered promiscuous mode [ 153.861656][ T9233] debugfs: 'hsr0' already exists in 'hsr' [ 153.861666][ T9233] Cannot create hsr debugfs directory [ 154.219151][ T8494] bridge_slave_1: left allmulticast mode [ 154.219178][ T8494] bridge_slave_1: left promiscuous mode [ 154.221111][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.225684][ T8494] bridge_slave_0: left allmulticast mode [ 154.225706][ T8494] bridge_slave_0: left promiscuous mode [ 154.225872][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.604691][ T5799] Bluetooth: hci1: command tx timeout [ 155.012831][ T8494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.025034][ T8494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.026068][ T8494] bond0 (unregistering): Released all slaves [ 155.221371][ T42] audit: type=1400 audit(1793754645.970:2127): avc: denied { write } for pid=9282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.279574][ T42] audit: type=1400 audit(1793754646.030:2128): avc: denied { write } for pid=9285 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.332675][ T5498] 8021q: adding VLAN 0 to HW filter on device eth2 [ 155.431368][ T42] audit: type=1400 audit(1793754646.180:2129): avc: denied { write } for pid=9288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.501057][ T42] audit: type=1400 audit(1793754646.250:2130): avc: denied { write } for pid=9291 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.638471][ T5498] 8021q: adding VLAN 0 to HW filter on device eth3 [ 155.890551][ T42] audit: type=1400 audit(1793754646.640:2131): avc: denied { write } for pid=9295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.946970][ T8494] hsr_slave_0: left promiscuous mode [ 155.952080][ T8494] hsr_slave_1: left promiscuous mode [ 155.952594][ T8494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.952607][ T8494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.953165][ T8494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.953176][ T8494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.980030][ T8494] veth1_macvtap: left promiscuous mode [ 155.980054][ T8494] veth0_macvtap: left promiscuous mode [ 155.980109][ T8494] veth1_vlan: left promiscuous mode [ 155.980142][ T8494] veth0_vlan: left promiscuous mode [ 156.058818][ T42] audit: type=1400 audit(1793754646.810:2132): avc: denied { write } for pid=9298 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.683653][ T5799] Bluetooth: hci1: command tx timeout [ 156.913581][ T8494] team0 (unregistering): Port device team_slave_1 removed [ 156.920255][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.925927][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.934186][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.936297][ T8494] team0 (unregistering): Port device team_slave_0 removed [ 156.939770][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.940392][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.044362][ T5498] 8021q: adding VLAN 0 to HW filter on device eth5 [ 157.223317][ T42] audit: type=1400 audit(1793754647.970:2133): avc: denied { write } for pid=9308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.273124][ T9233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.307601][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.308020][ T9233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.320897][ T42] audit: type=1400 audit(1793754648.070:2134): avc: denied { write } for pid=9314 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.367722][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.485020][ T9233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 157.497424][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.500319][ T9233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 157.511854][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.516507][ T5498] 8021q: adding VLAN 0 to HW filter on device eth4 [ 157.572587][ T9301] rxe_eth0 speed is unknown, defaulting to 1000 [ 157.609481][ T9233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.625516][ T9233] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.630203][ T42] audit: type=1400 audit(1793754648.380:2135): avc: denied { write } for pid=9326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.632648][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.632715][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.640904][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.640952][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.943994][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.946512][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.948112][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.948488][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.948733][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.028452][ T8494] bridge_slave_1: left allmulticast mode [ 158.028502][ T8494] bridge_slave_1: left promiscuous mode [ 158.029654][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.044092][ T8494] bridge_slave_0: left allmulticast mode [ 158.044116][ T8494] bridge_slave_0: left promiscuous mode [ 158.044303][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.226285][ T8494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.228789][ T8494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.229877][ T8494] bond0 (unregistering): Released all slaves [ 158.449587][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.449719][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.449817][ T9301] bridge_slave_0: entered allmulticast mode [ 158.451125][ T9301] bridge_slave_0: entered promiscuous mode [ 158.452908][ T9301] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.452981][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.453042][ T9301] bridge_slave_1: entered allmulticast mode [ 158.453780][ T9301] bridge_slave_1: entered promiscuous mode [ 158.470134][ T9301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.471500][ T9301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.482676][ T9301] team0: Port device team_slave_0 added [ 158.484111][ T9301] team0: Port device team_slave_1 added [ 158.496116][ T9301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.496126][ T9301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.496142][ T9301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.497064][ T9301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.497073][ T9301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.497088][ T9301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.525707][ T9301] hsr_slave_0: entered promiscuous mode [ 158.527674][ T9301] hsr_slave_1: entered promiscuous mode [ 158.528297][ T9301] debugfs: 'hsr0' already exists in 'hsr' [ 158.528312][ T9301] Cannot create hsr debugfs directory [ 158.576315][ T9233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.663053][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 158.663065][ T42] audit: type=1400 audit(1793754649.410:2142): avc: denied { write } for pid=9370 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.768975][ T5799] Bluetooth: hci1: command tx timeout [ 158.782411][ T42] audit: type=1400 audit(1793754649.530:2143): avc: denied { write } for pid=9373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.838032][ T42] audit: type=1400 audit(1793754649.590:2144): avc: denied { write } for pid=9377 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.884896][ T9340] rxe_eth0 speed is unknown, defaulting to 1000 [ 158.984341][ T42] audit: type=1400 audit(1793754649.740:2145): avc: denied { write } for pid=9379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.010101][ T8494] hsr_slave_0: left promiscuous mode [ 159.010644][ T8494] hsr_slave_1: left promiscuous mode [ 159.011066][ T8494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.011114][ T8494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.013100][ T8494] veth1_macvtap: left promiscuous mode [ 159.013119][ T8494] veth0_macvtap: left promiscuous mode [ 159.014529][ T5799] Bluetooth: hci4: command tx timeout [ 159.069167][ T42] audit: type=1400 audit(1793754649.820:2146): avc: denied { write } for pid=9382 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.131408][ T8494] team0 (unregistering): Port device team_slave_1 removed [ 159.140002][ T8494] team0 (unregistering): Port device team_slave_0 removed [ 159.356596][ T9233] veth0_vlan: entered promiscuous mode [ 159.409445][ T9233] veth1_vlan: entered promiscuous mode [ 159.533063][ T9233] veth0_macvtap: entered promiscuous mode [ 159.539876][ T9233] veth1_macvtap: entered promiscuous mode [ 159.565067][ T9233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.576099][ T9233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.647103][ T8494] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.650817][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.650844][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.650887][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.745477][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.745501][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.806284][ T8494] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.919330][ T9340] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.919500][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.919520][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.919806][ T9340] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.919910][ T9340] bridge_slave_0: entered allmulticast mode [ 159.922778][ T9340] bridge_slave_0: entered promiscuous mode [ 159.966995][ T5145] Bluetooth: hci0: command tx timeout [ 160.004323][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.004661][ T8494] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.010379][ T9340] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.010462][ T9340] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.010579][ T9340] bridge_slave_1: entered allmulticast mode [ 160.011936][ T9340] bridge_slave_1: entered promiscuous mode [ 160.014999][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.019732][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.020163][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.020451][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.045282][ T9301] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.052227][ T9301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.054942][ T9340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.056341][ T9340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.067883][ T9340] team0: Port device team_slave_0 added [ 160.067914][ T9301] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.087141][ T9301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.087631][ T9301] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.117332][ T9301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.119079][ T9340] team0: Port device team_slave_1 added [ 160.148804][ T9301] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.153856][ T9301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.161473][ T9340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.161532][ T9340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.161549][ T9340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.180174][ T8494] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.197631][ T9340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.197649][ T9340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.197673][ T9340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.235320][ T9340] hsr_slave_0: entered promiscuous mode [ 160.236146][ T9340] hsr_slave_1: entered promiscuous mode [ 160.329358][ T9413] jffs2: notice: (9413) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 160.347662][ T42] audit: type=1400 audit(1793754651.110:2147): avc: denied { write } for pid=9412 comm="syz.2.918" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.347897][ T42] audit: type=1400 audit(1793754651.110:2148): avc: denied { create } for pid=9412 comm="syz.2.918" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 160.377645][ T8494] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.429379][ T9301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.476257][ C2] sd 0:0:0:0: [sda] tag#17 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 160.476307][ C2] sd 0:0:0:0: [sda] tag#17 CDB: Test Unit Ready [ 160.524729][ T9301] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.536630][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.536714][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.541457][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.541502][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.576930][ T9419] FAULT_INJECTION: forcing a failure. [ 160.576930][ T9419] name failslab, interval 1, probability 0, space 0, times 0 [ 160.576955][ T9419] CPU: 3 UID: 0 PID: 9419 Comm: syz.2.919 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.576976][ T9419] Tainted: [L]=SOFTLOCKUP [ 160.576981][ T9419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.576989][ T9419] Call Trace: [ 160.576994][ T9419] [ 160.577000][ T9419] dump_stack_lvl+0x100/0x190 [ 160.577027][ T9419] should_fail_ex.cold+0x5/0xa [ 160.577047][ T9419] should_failslab+0xc2/0x120 [ 160.577062][ T9419] __kmalloc_cache_noprof+0x91/0x6d0 [ 160.577081][ T9419] ? __ipv6_dev_ac_inc+0x351/0xdb0 [ 160.577131][ T9419] __ipv6_dev_ac_inc+0x351/0xdb0 [ 160.577155][ T9419] ipv6_sock_ac_join+0x67c/0xd80 [ 160.577178][ T9419] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 160.577196][ T9419] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 160.577212][ T9419] ? __local_bh_enable_ip+0xa5/0x120 [ 160.577229][ T9419] ? lockdep_hardirqs_on+0x7d/0x110 [ 160.577246][ T9419] do_ipv6_setsockopt+0x31f4/0x3b00 [ 160.577261][ T9419] ? avc_has_perm_noaudit+0x30/0x470 [ 160.577277][ T9419] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 160.577291][ T9419] ? avc_has_perm_noaudit+0x145/0x470 [ 160.577307][ T9419] ? avc_has_perm+0x135/0x1e0 [ 160.577322][ T9419] ? __pfx_avc_has_perm+0x10/0x10 [ 160.577338][ T9419] ? futex_wait+0x11e/0x370 [ 160.577369][ T9419] ? sock_has_perm+0x254/0x320 [ 160.577387][ T9419] ? __pfx_sock_has_perm+0x10/0x10 [ 160.577405][ T9419] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 160.577427][ T9419] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 160.577453][ T9419] ? ipv6_setsockopt+0xcb/0x170 [ 160.577471][ T9419] ipv6_setsockopt+0xcb/0x170 [ 160.577485][ T9419] tcp_setsockopt+0xa7/0x100 [ 160.577533][ T9419] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 160.577554][ T9419] do_sock_setsockopt+0xf3/0x1d0 [ 160.577573][ T9419] __sys_setsockopt+0x195/0x220 [ 160.577590][ T9419] __x64_sys_setsockopt+0xbd/0x160 [ 160.577604][ T9419] ? do_syscall_64+0xae/0x790 [ 160.577618][ T9419] ? lockdep_hardirqs_on+0x7d/0x110 [ 160.577631][ T9419] do_syscall_64+0x123/0x790 [ 160.577645][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.577678][ T9419] RIP: 0033:0x7f51f9d9fb19 [ 160.577690][ T9419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.577703][ T9419] RSP: 002b:00007f51fad42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.577716][ T9419] RAX: ffffffffffffffda RBX: 00007f51fa025fa0 RCX: 00007f51f9d9fb19 [ 160.577725][ T9419] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000007 [ 160.577733][ T9419] RBP: 00007f51f9e37b70 R08: 0000000000000020 R09: 0000000000000000 [ 160.577741][ T9419] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 160.577749][ T9419] R13: 00007f51fa026038 R14: 00007f51fa025fa0 R15: 00007ffe1b539a78 [ 160.577767][ T9419] [ 160.619419][ T9393] rxe_eth0 speed is unknown, defaulting to 1000 [ 160.641601][ T8494] bridge_slave_1: left allmulticast mode [ 160.641797][ T8494] bridge_slave_1: left promiscuous mode [ 160.642647][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.661538][ T8494] bridge_slave_0: left allmulticast mode [ 160.661558][ T8494] bridge_slave_0: left promiscuous mode [ 160.661687][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.837565][ T8494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.840423][ T8494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.841970][ T8494] bond0 (unregistering): Released all slaves [ 160.853435][ T5794] Bluetooth: hci1: command tx timeout [ 160.900788][ T9301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.083648][ T5794] Bluetooth: hci4: command tx timeout [ 161.111442][ T42] audit: type=1400 audit(1793754651.860:2149): avc: denied { write } for pid=9428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.197042][ T42] audit: type=1400 audit(1793754651.950:2150): avc: denied { write } for pid=9436 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.308161][ T42] audit: type=1400 audit(1793754652.060:2151): avc: denied { write } for pid=9442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.352754][ T8494] hsr_slave_0: left promiscuous mode [ 161.358587][ T8494] hsr_slave_1: left promiscuous mode [ 161.359099][ T8494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.359113][ T8494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.359770][ T8494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.359786][ T8494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.365574][ T8494] veth1_macvtap: left promiscuous mode [ 161.365616][ T8494] veth0_macvtap: left promiscuous mode [ 161.365723][ T8494] veth1_vlan: left promiscuous mode [ 161.365777][ T8494] veth0_vlan: left promiscuous mode [ 161.442051][ T9452] FAULT_INJECTION: forcing a failure. [ 161.442051][ T9452] name failslab, interval 1, probability 0, space 0, times 0 [ 161.442084][ T9452] CPU: 1 UID: 0 PID: 9452 Comm: syz.2.921 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.442102][ T9452] Tainted: [L]=SOFTLOCKUP [ 161.442108][ T9452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.442117][ T9452] Call Trace: [ 161.442126][ T9452] [ 161.442132][ T9452] dump_stack_lvl+0x100/0x190 [ 161.442215][ T9452] should_fail_ex.cold+0x5/0xa [ 161.442242][ T9452] should_failslab+0xc2/0x120 [ 161.442274][ T9452] kmem_cache_alloc_noprof+0x92/0x6a0 [ 161.442296][ T9452] ? __kernfs_new_node+0xd2/0xa10 [ 161.442332][ T9452] __kernfs_new_node+0xd2/0xa10 [ 161.442365][ T9452] ? __pfx___kernfs_new_node+0x10/0x10 [ 161.442381][ T9452] ? lock_acquire+0x1d1/0x380 [ 161.442408][ T9452] ? kernfs_root+0x23/0x2a0 [ 161.442425][ T9452] ? find_held_lock+0x2b/0x80 [ 161.442443][ T9452] ? kernfs_root+0xee/0x2a0 [ 161.442460][ T9452] ? kernfs_root+0xee/0x2a0 [ 161.442483][ T9452] kernfs_new_node+0x194/0x200 [ 161.442497][ T9452] ? __pfx_kernfs_new_node+0x10/0x10 [ 161.442512][ T9452] ? kernfs_add_one+0x213/0xb40 [ 161.442528][ T9452] __kernfs_create_file+0x53/0x350 [ 161.442546][ T9452] sysfs_add_file_mode_ns+0x207/0x3c0 [ 161.442568][ T9452] internal_create_group+0x593/0xfb0 [ 161.442592][ T9452] ? __pfx_internal_create_group+0x10/0x10 [ 161.442615][ T9452] ? kernfs_create_link+0x1f1/0x280 [ 161.442635][ T9452] internal_create_groups+0x9d/0x150 [ 161.442656][ T9452] device_add+0x77a/0x1970 [ 161.442704][ T9452] ? md_alloc+0x3d0/0x10c0 [ 161.442744][ T9452] ? __pfx_device_add+0x10/0x10 [ 161.442767][ T9452] __add_disk+0x592/0xf10 [ 161.442798][ T9452] ? find_held_lock+0x2b/0x80 [ 161.442813][ T9452] add_disk_fwnode+0x279/0x480 [ 161.442832][ T9452] md_alloc+0x3dc/0x10c0 [ 161.442876][ T9452] md_alloc_and_put+0x16/0xb0 [ 161.442896][ T9452] add_named_array+0x360/0x3a0 [ 161.442916][ T9452] ? __pfx_add_named_array+0x10/0x10 [ 161.442944][ T9452] param_attr_store+0x199/0x300 [ 161.442963][ T9452] ? __pfx_param_attr_store+0x10/0x10 [ 161.442980][ T9452] module_attr_store+0x58/0x80 [ 161.442994][ T9452] ? __pfx_module_attr_store+0x10/0x10 [ 161.443009][ T9452] sysfs_kf_write+0xf2/0x150 [ 161.443026][ T9452] kernfs_fop_write_iter+0x3e0/0x5f0 [ 161.443039][ T9452] ? __pfx_sysfs_kf_write+0x10/0x10 [ 161.443057][ T9452] vfs_write+0x6af/0x1050 [ 161.443071][ T9452] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 161.443087][ T9452] ? __pfx_vfs_write+0x10/0x10 [ 161.443098][ T9452] ? find_held_lock+0x2b/0x80 [ 161.443121][ T9452] ksys_write+0x12a/0x250 [ 161.443133][ T9452] ? __pfx_ksys_write+0x10/0x10 [ 161.443150][ T9452] do_syscall_64+0x123/0x790 [ 161.443201][ T9452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.443217][ T9452] RIP: 0033:0x7f51f9d9fb19 [ 161.443236][ T9452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.443249][ T9452] RSP: 002b:00007f51fad42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.443262][ T9452] RAX: ffffffffffffffda RBX: 00007f51fa025fa0 RCX: 00007f51f9d9fb19 [ 161.443272][ T9452] RDX: 0000000000000008 RSI: 0000200000000340 RDI: 0000000000000006 [ 161.443280][ T9452] RBP: 00007f51f9e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 161.443288][ T9452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.443297][ T9452] R13: 00007f51fa026038 R14: 00007f51fa025fa0 R15: 00007ffe1b539a78 [ 161.443316][ T9452] [ 161.448622][ T9452] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 161.559279][ T8494] team0 (unregistering): Port device team_slave_1 removed [ 161.573288][ T8494] team0 (unregistering): Port device team_slave_0 removed [ 161.682639][ T9393] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.682861][ T9393] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.682966][ T9393] bridge_slave_0: entered allmulticast mode [ 161.684754][ T9393] bridge_slave_0: entered promiscuous mode [ 161.689775][ T9393] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.689846][ T9393] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.689944][ T9393] bridge_slave_1: entered allmulticast mode [ 161.691219][ T9393] bridge_slave_1: entered promiscuous mode [ 161.747460][ T9301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.820304][ T9393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.822796][ T9393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.836781][ T9393] team0: Port device team_slave_0 added [ 161.838424][ T9393] team0: Port device team_slave_1 added [ 161.851748][ T9393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.851763][ T9393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.851787][ T9393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.854073][ T9393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.854088][ T9393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.854109][ T9393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.909428][ T9393] hsr_slave_0: entered promiscuous mode [ 161.909837][ T9393] hsr_slave_1: entered promiscuous mode [ 161.910114][ T9393] debugfs: 'hsr0' already exists in 'hsr' [ 161.910123][ T9393] Cannot create hsr debugfs directory [ 162.047835][ T5794] Bluetooth: hci3: command tx timeout [ 162.053699][ T5794] Bluetooth: hci0: command tx timeout [ 162.247507][ T8494] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.334974][ T9484] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 162.334993][ T9484] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 162.335871][ T9484] vhci_hcd vhci_hcd.0: Device attached [ 162.352268][ T8494] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.364719][ T9340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.372650][ T9340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.373543][ T9340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 162.378063][ T9340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.381165][ T9340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 162.397706][ T9340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.400237][ T9340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 162.405011][ T9340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.502339][ T8494] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.518165][ T9301] veth0_vlan: entered promiscuous mode [ 162.580139][ T9301] veth1_vlan: entered promiscuous mode [ 162.591564][ T8494] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.615102][ T2225] usb 42-1: SetAddress Request (2) to port 0 [ 162.615139][ T2225] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 162.724699][ T9301] veth0_macvtap: entered promiscuous mode [ 162.757454][ T9340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.761379][ T9301] veth1_macvtap: entered promiscuous mode [ 162.800151][ T9301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.818517][ T9340] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.852426][ T8494] bridge_slave_1: left allmulticast mode [ 162.852445][ T8494] bridge_slave_1: left promiscuous mode [ 162.852549][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.863121][ T8494] bridge_slave_0: left allmulticast mode [ 162.863138][ T8494] bridge_slave_0: left promiscuous mode [ 162.863292][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.022671][ T9301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.042125][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.042206][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.078400][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.078759][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.149246][ T9485] vhci_hcd: connection reset by peer [ 163.155626][ T12] vhci_hcd vhci_hcd.2: stop threads [ 163.156188][ T12] vhci_hcd vhci_hcd.2: release socket [ 163.157765][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 163.173322][ T5794] Bluetooth: hci4: command tx timeout [ 163.183657][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.183685][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.183705][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.183724][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.186431][ T9393] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.205391][ T9393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.244826][ T9393] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.250722][ T9393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.251217][ T9393] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.259863][ T9393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.295793][ T9393] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.314998][ T9393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.451039][ T8494] hsr_slave_0: left promiscuous mode [ 163.451484][ T8494] hsr_slave_1: left promiscuous mode [ 163.451877][ T8494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.451889][ T8494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.452392][ T8494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.452403][ T8494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.457538][ T8494] veth1_macvtap: left promiscuous mode [ 163.457560][ T8494] veth0_macvtap: left promiscuous mode [ 163.457614][ T8494] veth1_vlan: left promiscuous mode [ 163.457656][ T8494] veth0_vlan: left promiscuous mode [ 163.640280][ T8494] team0 (unregistering): Port device team_slave_1 removed [ 163.655478][ T8494] team0 (unregistering): Port device team_slave_0 removed [ 163.762490][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.762544][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.809575][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.809591][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.810771][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 163.810811][ T42] audit: type=1400 audit(1793754654.550:2174): avc: denied { write } for pid=9532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.846355][ T9393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.862318][ T9393] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.870029][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.870110][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.878586][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.878667][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.928024][ T42] audit: type=1400 audit(1793754654.680:2175): avc: denied { write } for pid=9539 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.973767][ T5940] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 164.061286][ T42] audit: type=1400 audit(1793754654.810:2176): avc: denied { write } for pid=9548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.123208][ T9340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.123521][ T5794] Bluetooth: hci0: command tx timeout [ 164.123540][ T5794] Bluetooth: hci3: command tx timeout [ 164.129739][ T5940] usb 7-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00 [ 164.133019][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.133037][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.133057][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.141487][ T42] audit: type=1400 audit(1793754654.890:2177): avc: denied { write } for pid=9560 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.149344][ T5940] usb 7-1: config 0 descriptor?? [ 164.198920][ T9340] veth0_vlan: entered promiscuous mode [ 164.206699][ T9340] veth1_vlan: entered promiscuous mode [ 164.229534][ T9340] veth0_macvtap: entered promiscuous mode [ 164.231783][ T9340] veth1_macvtap: entered promiscuous mode [ 164.241931][ T9340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.250848][ T9340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.257059][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.257084][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.257103][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.257122][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.287530][ T42] audit: type=1400 audit(1793754655.040:2178): avc: denied { write } for pid=9566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.329393][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.329411][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.360265][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.360280][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.366859][ T42] audit: type=1400 audit(1793754655.120:2179): avc: denied { write } for pid=9570 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.441341][ T9393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.515496][ T42] audit: type=1400 audit(1793754655.270:2180): avc: denied { execute } for pid=9585 comm="syz.5.926" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 164.516729][ T42] audit: type=1400 audit(1793754655.270:2181): avc: denied { setattr } for pid=9585 comm="syz.5.926" name="[io_uring]" dev="anon_inodefs" ino=37318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 164.576877][ T5940] hid_parser_main: 5 callbacks suppressed [ 164.576893][ T5940] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 164.576908][ T5940] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 164.576921][ T5940] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 164.576934][ T5940] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 164.576947][ T5940] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 164.576959][ T5940] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 164.576972][ T5940] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 164.576985][ T5940] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 164.576997][ T5940] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 164.577010][ T5940] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 164.577041][ T42] audit: type=1400 audit(1793754655.330:2182): avc: denied { write } for pid=9575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.625259][ T5940] savu 0003:1E7D:2D5A.0006: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 164.641348][ T42] audit: type=1400 audit(1793754655.390:2183): avc: denied { write } for pid=9602 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.656558][ T9393] veth0_vlan: entered promiscuous mode [ 164.666825][ T9393] veth1_vlan: entered promiscuous mode [ 164.690603][ T9393] veth0_macvtap: entered promiscuous mode [ 164.695727][ T9393] veth1_macvtap: entered promiscuous mode [ 164.710408][ T9393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.718559][ T9393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.773657][ T5877] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.773686][ T5877] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.773706][ T5877] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.773725][ T5877] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.806061][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.806076][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.820522][ T110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.820536][ T110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.957620][ T9622] overlay: Unknown parameter 'pcr' [ 164.979199][ T1483] usb 7-1: USB disconnect, device number 2 [ 165.053666][ T9632] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 4, id = 0 [ 165.243420][ T5799] Bluetooth: hci4: command tx timeout [ 165.339335][ T9640] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 165.378809][ T9640] device-mapper: table: 248:13: writecache: Origin data device lookup failed (-ENOENT) [ 165.378853][ T9640] device-mapper: ioctl: error adding target to table [ 165.733011][ T9665] netlink: 20 bytes leftover after parsing attributes in process `syz.5.935'. [ 166.205514][ T5799] Bluetooth: hci3: command tx timeout [ 166.205556][ T5799] Bluetooth: hci0: command tx timeout [ 166.670105][ T9724] nfs: Unknown parameter '/ountproto' [ 166.720288][ T9732] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 4, id = 0 [ 166.867820][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.5.954'. [ 166.963435][ T5877] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.963483][ T5877] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.963517][ T5877] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.963550][ T5877] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.995567][ T9761] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 166.995892][ T9761] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 166.996128][ T9761] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 166.996723][ T9761] fuse: Bad value for 'fd' [ 167.031167][ T9763] WARNING! power/level is deprecated; use power/control instead [ 167.359599][ T9795] Cannot find add_set index 0 as target [ 167.442961][ T9800] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 167.649925][ T2225] usb 42-1: device descriptor read/8, error -110 [ 167.667264][ T9807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.976'. [ 167.667723][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 167.750085][ T9826] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 167.766338][ T9826] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 167.769351][ T9826] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 167.772824][ T9826] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 167.834146][ T9826] fuse: Bad value for 'user_id' [ 167.834161][ T9826] fuse: Bad value for 'user_id' [ 167.998563][ T9844] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 168.059487][ T9853] netlink: 'syz.5.988': attribute type 61 has an invalid length. [ 168.068063][ T2225] usb usb42-port1: attempt power cycle [ 168.160840][ T9863] input: syz0 as /devices/virtual/input/input13 [ 168.179596][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.179659][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.179705][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.179756][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.179806][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.179856][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.179911][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.179961][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180007][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180057][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180106][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180156][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180205][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180255][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180303][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180348][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180395][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180444][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180492][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180541][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180586][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180627][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180676][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180723][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180778][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180828][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180884][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180934][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.180978][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.181027][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.181077][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.181127][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.181174][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.181259][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.181305][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.181354][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.181403][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.181454][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.181502][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.181551][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.181601][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.181650][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.181699][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.186641][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.186703][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.186753][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.186798][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.186869][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.186926][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.186975][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.187025][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.187075][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.187122][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.190690][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.190746][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.190796][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.190867][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.190922][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.190971][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.191022][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.191074][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.191126][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.191175][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.191227][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.191278][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 168.284304][ T5794] Bluetooth: hci3: command tx timeout [ 168.389933][ T9833] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 168.407015][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 168.488791][ T5799] Bluetooth: hci2: sending frame failed (-49) [ 168.489493][ T5794] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 168.665106][ T2225] usb usb42-port1: unable to enumerate USB device [ 168.683574][ T1044] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 168.834564][ T1044] usb 9-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 168.835864][ T1044] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.835909][ T1044] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 168.835930][ T1044] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 168.835968][ T1044] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.904469][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 168.904523][ T42] audit: type=1400 audit(1793754659.660:2235): avc: denied { write } for pid=9898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.022047][ T42] audit: type=1400 audit(1793754659.770:2236): avc: denied { write } for pid=9904 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.152074][ T9912] xt_hashlimit: size too large, truncated to 1048576 [ 169.264237][ T42] audit: type=1400 audit(1793754660.020:2237): avc: denied { write } for pid=9916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.303020][ T42] audit: type=1400 audit(1793754660.050:2238): avc: denied { read append } for pid=9924 comm="syz.1.1005" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 169.303053][ T42] audit: type=1400 audit(1793754660.050:2239): avc: denied { ioctl open } for pid=9924 comm="syz.1.1005" path="/21/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 169.307947][ T9925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1005'. [ 169.314122][ T9925] overlayfs: workdir and upperdir must reside under the same mount [ 169.320768][ T42] audit: type=1400 audit(1793754660.070:2240): avc: denied { ioctl } for pid=9875 comm="syz.4.996" path="socket:[38578]" dev="sockfs" ino=38578 ioctlcmd=0x40106150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 169.326306][ T1044] cxacru 9-1:1.0: send of cm 0x91 failed (-71) [ 169.326338][ T1044] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 169.326346][ T1044] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 169.328021][ T1044] cxacru 9-1:1.0: probe with driver cxacru failed with error -71 [ 169.338332][ T1044] usb 9-1: USB disconnect, device number 9 [ 169.345838][ T9925] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.380317][ T42] audit: type=1400 audit(1793754660.130:2241): avc: denied { write } for pid=9926 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.396719][ T9929] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 169.399430][ T42] audit: type=1400 audit(1793754660.150:2242): avc: denied { unmount } for pid=9340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 169.508428][ T42] audit: type=1400 audit(1793754660.270:2243): avc: denied { write } for pid=9932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.671616][ T9945] comedi comedi0: aio_iiro_16: I/O base address not correctly aligned [ 169.672195][ T9945] FAULT_INJECTION: forcing a failure. [ 169.672195][ T9945] name failslab, interval 1, probability 0, space 0, times 0 [ 169.672224][ T9945] CPU: 1 UID: 0 PID: 9945 Comm: syz.2.1011 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.672241][ T9945] Tainted: [L]=SOFTLOCKUP [ 169.672246][ T9945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.672254][ T9945] Call Trace: [ 169.672270][ T9945] [ 169.672276][ T9945] dump_stack_lvl+0x100/0x190 [ 169.672384][ T9945] should_fail_ex.cold+0x5/0xa [ 169.672410][ T9945] should_failslab+0xc2/0x120 [ 169.672441][ T9945] kmem_cache_alloc_noprof+0x92/0x6a0 [ 169.672460][ T9945] ? __pfx_map_id_range_down+0x10/0x10 [ 169.672492][ T9945] ? trace_kmem_cache_alloc+0xdd/0x100 [ 169.672505][ T9945] ? security_inode_alloc+0x3b/0x2c0 [ 169.672546][ T9945] security_inode_alloc+0x3b/0x2c0 [ 169.672564][ T9945] inode_init_always_gfp+0xc75/0xfb0 [ 169.672583][ T9945] alloc_inode+0x8e/0x250 [ 169.672594][ T9945] new_inode+0x22/0x1c0 [ 169.672607][ T9945] hugetlbfs_get_inode+0x339/0x740 [ 169.672637][ T9945] hugetlb_file_setup+0x15b/0x5b0 [ 169.672652][ T9945] ksys_mmap_pgoff+0x242/0x610 [ 169.672673][ T9945] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 169.672691][ T9945] ? fput+0x7c/0x100 [ 169.672707][ T9945] ? __pfx___x64_sys_futex+0x10/0x10 [ 169.672722][ T9945] ? ksys_write+0x1ac/0x250 [ 169.672734][ T9945] ? __pfx_ksys_write+0x10/0x10 [ 169.672748][ T9945] __x64_sys_mmap+0x125/0x190 [ 169.672767][ T9945] do_syscall_64+0x123/0x790 [ 169.672837][ T9945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.672850][ T9945] RIP: 0033:0x7f51f9d9fb19 [ 169.672867][ T9945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.672880][ T9945] RSP: 002b:00007f51fad42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 169.672898][ T9945] RAX: ffffffffffffffda RBX: 00007f51fa025fa0 RCX: 00007f51f9d9fb19 [ 169.672906][ T9945] RDX: 000000000200000c RSI: 0000000000ff5000 RDI: 0000200000000000 [ 169.672914][ T9945] RBP: 00007f51f9e37b70 R08: ffffffffffffffff R09: 000000009227c000 [ 169.672921][ T9945] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000000 [ 169.672929][ T9945] R13: 00007f51fa026038 R14: 00007f51fa025fa0 R15: 00007ffe1b539a78 [ 169.672944][ T9945] [ 169.883620][ T5799] Bluetooth: hci0: command 0x0401 tx timeout [ 170.034757][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1016'. [ 170.034773][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1016'. [ 170.203423][ T1044] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 170.258176][ T9981] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 170.264058][ T9981] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 170.355927][ T1044] usb 9-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 170.356334][ T1044] usb 9-1: config 0 has no interfaces? [ 170.358166][ T1044] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 170.358189][ T1044] usb 9-1: Product: syz [ 170.358202][ T1044] usb 9-1: Manufacturer: syz [ 170.358216][ T1044] usb 9-1: SerialNumber: syz [ 170.368240][ T1044] usb 9-1: config 0 descriptor?? [ 170.502995][ T9996] program syz.5.1020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.580860][ T9967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.581062][ T9967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.581732][ T9967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.581923][ T9967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.585897][ T1044] usb 9-1: USB disconnect, device number 10 [ 170.866284][T10014] program syz.5.1025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.185163][T10049] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1035'. [ 171.190268][T10052] device-mapper: ioctl: The device has no table. [ 171.191417][T10052] Device name cannot be null; rc = [-22] [ 171.264317][T10057] FAULT_INJECTION: forcing a failure. [ 171.264317][T10057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.264350][T10057] CPU: 3 UID: 0 PID: 10057 Comm: syz.5.1036 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.264366][T10057] Tainted: [L]=SOFTLOCKUP [ 171.264371][T10057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.264379][T10057] Call Trace: [ 171.264396][T10057] [ 171.264401][T10057] dump_stack_lvl+0x100/0x190 [ 171.264511][T10057] should_fail_ex.cold+0x5/0xa [ 171.264544][T10057] strncpy_from_user+0x3b/0x2d0 [ 171.264587][T10057] do_getname+0x78/0x390 [ 171.264620][T10057] path_setxattrat+0x360/0x3b0 [ 171.264639][T10057] ? __pfx_path_setxattrat+0x10/0x10 [ 171.264658][T10057] ? ksys_write+0x190/0x250 [ 171.264669][T10057] ? ksys_write+0x190/0x250 [ 171.264691][T10057] ? fput+0x7c/0x100 [ 171.264705][T10057] ? ksys_write+0x1ac/0x250 [ 171.264717][T10057] ? __pfx_ksys_write+0x10/0x10 [ 171.264730][T10057] __x64_sys_lsetxattr+0xc9/0x140 [ 171.264747][T10057] ? do_syscall_64+0xae/0x790 [ 171.264831][T10057] ? lockdep_hardirqs_on+0x7d/0x110 [ 171.264844][T10057] do_syscall_64+0x123/0x790 [ 171.264858][T10057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.264871][T10057] RIP: 0033:0x7f8bd939fb19 [ 171.264881][T10057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.264893][T10057] RSP: 002b:00007f8bda23e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 171.264911][T10057] RAX: ffffffffffffffda RBX: 00007f8bd9625fa0 RCX: 00007f8bd939fb19 [ 171.264931][T10057] RDX: 0000200000000340 RSI: 0000200000000300 RDI: 00002000000002c0 [ 171.264940][T10057] RBP: 00007f8bda23e090 R08: 0000000000000000 R09: 0000000000000000 [ 171.264947][T10057] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 171.264955][T10057] R13: 00007f8bd9626038 R14: 00007f8bd9625fa0 R15: 00007ffc1c27bd08 [ 171.264971][T10057] [ 171.456939][T10074] tipc: Started in network mode [ 171.456958][T10074] tipc: Node identity ac14140f, cluster identity 4711 [ 171.457618][T10074] tipc: Enabled bearer , priority 10 [ 171.562550][T10077] smpboot: CPU 1 is now offline [ 171.712676][T10077] smpboot: CPU 3 is now offline [ 171.869794][T10100] loop0: detected capacity change from 0 to 4096 [ 171.964972][T10100] loop0: [ 172.007231][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1053'. [ 172.361809][T10085] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 172.441246][T10085] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 172.479125][ T5194] loop0: [ 172.525705][ T1483] tipc: Node number set to 2886997007 [ 172.664863][T10127] jffs2: notice: (10127) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 172.681274][T10130] netlink: 'syz.5.1056': attribute type 14 has an invalid length. [ 172.712963][T10130] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 172.734779][T10127] jffs2: warning: (10127) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=36 [ 172.868566][ T5498] 8021q: adding VLAN 0 to HW filter on device eth7 [ 172.886329][T10147] Bluetooth: MGMT ver 1.23 [ 172.950888][T10155] No source specified [ 173.070506][ T5498] 8021q: adding VLAN 0 to HW filter on device eth8 [ 173.260887][ T5498] 8021q: adding VLAN 0 to HW filter on device eth9 [ 173.279891][T10175] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 173.305783][T10175] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 173.306220][T10175] overlayfs: failed to look up (tracing) for ino (-66) [ 173.324370][T10183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10183 comm=syz.4.1069 [ 173.420834][ T5498] 8021q: adding VLAN 0 to HW filter on device eth10 [ 173.500331][T10196] phram: parameter too long [ 173.510155][T10196] ================================================================== [ 173.510166][T10196] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 173.510233][T10196] Write of size 8 at addr ffffc900053bd300 by task (\/10196 [ 173.510261][T10196] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 173.510271][T10196] CPU: 1 UID: 0 PID: 10196 Comm: (\ Tainted: G L syzkaller #0 PREEMPT(full) [ 173.510288][T10196] Tainted: [L]=SOFTLOCKUP [ 173.510293][T10196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.510301][T10196] Call Trace: [ 173.510317][T10196] [ 173.510322][T10196] dump_stack_lvl+0x100/0x190 [ 173.510344][T10196] print_report+0x13d/0x4b0 [ 173.510362][T10196] ? _raw_spin_lock_irqsave+0x52/0x60 [ 173.510383][T10196] ? sys_imageblit+0x19fb/0x1d60 [ 173.510401][T10196] kasan_report+0xdf/0x1c0 [ 173.510415][T10196] ? sys_imageblit+0x19fb/0x1d60 [ 173.510433][T10196] sys_imageblit+0x19fb/0x1d60 [ 173.510453][T10196] ? __pfx_sys_imageblit+0x10/0x10 [ 173.510472][T10196] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 173.510495][T10196] soft_cursor+0x524/0xa10 [ 173.510512][T10196] bit_cursor+0xcf1/0x14d0 [ 173.510533][T10196] ? __pfx_bit_cursor+0x10/0x10 [ 173.510548][T10196] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 173.510569][T10196] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 173.510584][T10196] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.510614][T10196] ? get_color+0x1da/0x450 [ 173.510625][T10196] ? __pfx_bit_cursor+0x10/0x10 [ 173.510639][T10196] fbcon_cursor+0x43c/0x5e0 [ 173.510654][T10196] hide_cursor+0x87/0x230 [ 173.510673][T10196] do_con_write+0x220c/0x4ae0 [ 173.510685][T10196] ? trace_contention_end+0x126/0x160 [ 173.510704][T10196] ? __mutex_lock+0x267/0x1c10 [ 173.510718][T10196] ? lock_acquire+0x1d1/0x380 [ 173.510735][T10196] ? __pfx___mutex_lock+0x10/0x10 [ 173.510747][T10196] ? do_raw_spin_lock+0x128/0x260 [ 173.510759][T10196] ? __pfx_do_con_write+0x10/0x10 [ 173.510774][T10196] con_write+0x23/0xb0 [ 173.510806][T10196] n_tty_write+0x440/0x1200 [ 173.510828][T10196] ? __pfx_n_tty_write+0x10/0x10 [ 173.510841][T10196] ? __kasan_kmalloc+0xaa/0xb0 [ 173.510854][T10196] ? __pfx_woken_wake_function+0x10/0x10 [ 173.510873][T10196] ? rcu_is_watching+0x13/0xc0 [ 173.510887][T10196] ? file_tty_write.isra.0+0x6ed/0x8f0 [ 173.510899][T10196] ? kfree+0x1e5/0x6d0 [ 173.510915][T10196] ? __pfx_n_tty_write+0x10/0x10 [ 173.510930][T10196] file_tty_write.isra.0+0x4ca/0x8f0 [ 173.510943][T10196] vfs_write+0x6af/0x1050 [ 173.510954][T10196] ? __pfx_tty_write+0x10/0x10 [ 173.510966][T10196] ? __pfx_vfs_write+0x10/0x10 [ 173.510976][T10196] ? find_held_lock+0x2b/0x80 [ 173.510994][T10196] ksys_write+0x12a/0x250 [ 173.511005][T10196] ? __pfx_ksys_write+0x10/0x10 [ 173.511018][T10196] do_syscall_64+0x123/0x790 [ 173.511031][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.511044][T10196] RIP: 0033:0x7f1c45b9fb19 [ 173.511055][T10196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.511067][T10196] RSP: 002b:00007f1c43dee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.511079][T10196] RAX: ffffffffffffffda RBX: 00007f1c45e25fa0 RCX: 00007f1c45b9fb19 [ 173.511088][T10196] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000007 [ 173.511095][T10196] RBP: 00007f1c45c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 173.511103][T10196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.511110][T10196] R13: 00007f1c45e26038 R14: 00007f1c45e25fa0 R15: 00007ffc229f0988 [ 173.511121][T10196] [ 173.511126][T10196] [ 173.511129][T10196] The buggy address belongs to a vmalloc virtual mapping [ 173.511148][T10196] Memory state around the buggy address: [ 173.511155][T10196] ffffc900053bd200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 173.511164][T10196] ffffc900053bd280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 173.511173][T10196] >ffffc900053bd300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 173.511180][T10196] ^ [ 173.511186][T10196] ffffc900053bd380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 173.511194][T10196] ffffc900053bd400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 173.511202][T10196] ================================================================== [ 173.511286][T10196] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 173.651172][T10196] CPU: 1 UID: 0 PID: 10196 Comm: (\ Tainted: G L syzkaller #0 PREEMPT(full) [ 173.654960][T10196] Tainted: [L]=SOFTLOCKUP [ 173.656448][T10196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.660024][T10196] Call Trace: [ 173.661248][T10196] [ 173.662346][T10196] dump_stack_lvl+0x100/0x190 [ 173.664052][T10196] vpanic+0x2dc/0x6f8 [ 173.665313][T10196] panic+0xd1/0xe0 [ 173.666508][T10196] ? __pfx_panic+0x10/0x10 [ 173.668174][T10196] ? sys_imageblit+0x19fb/0x1d60 [ 173.669903][T10196] ? preempt_schedule+0x57/0xd0 [ 173.671802][T10196] check_panic_on_warn.cold+0x19/0x34 [ 173.673686][T10196] end_report.part.0+0x3a/0x90 [ 173.675464][T10196] kasan_report.cold+0xe/0x18 [ 173.677209][T10196] ? sys_imageblit+0x19fb/0x1d60 [ 173.679047][T10196] sys_imageblit+0x19fb/0x1d60 [ 173.680592][T10196] ? __pfx_sys_imageblit+0x10/0x10 [ 173.682239][T10196] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 173.684178][T10196] soft_cursor+0x524/0xa10 [ 173.685626][T10196] bit_cursor+0xcf1/0x14d0 [ 173.687069][T10196] ? __pfx_bit_cursor+0x10/0x10 [ 173.688624][T10196] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 173.690480][T10196] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 173.692331][T10196] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.694191][T10196] ? get_color+0x1da/0x450 [ 173.695630][T10196] ? __pfx_bit_cursor+0x10/0x10 [ 173.697172][T10196] fbcon_cursor+0x43c/0x5e0 [ 173.698616][T10196] hide_cursor+0x87/0x230 [ 173.700013][T10196] do_con_write+0x220c/0x4ae0 [ 173.701513][T10196] ? trace_contention_end+0x126/0x160 [ 173.703222][T10196] ? __mutex_lock+0x267/0x1c10 [ 173.704746][T10196] ? lock_acquire+0x1d1/0x380 [ 173.706272][T10196] ? __pfx___mutex_lock+0x10/0x10 [ 173.707876][T10196] ? do_raw_spin_lock+0x128/0x260 [ 173.709482][T10196] ? __pfx_do_con_write+0x10/0x10 [ 173.711109][T10196] con_write+0x23/0xb0 [ 173.712418][T10196] n_tty_write+0x440/0x1200 [ 173.713881][T10196] ? __pfx_n_tty_write+0x10/0x10 [ 173.715482][T10196] ? __kasan_kmalloc+0xaa/0xb0 [ 173.717015][T10196] ? __pfx_woken_wake_function+0x10/0x10 [ 173.718802][T10196] ? rcu_is_watching+0x13/0xc0 [ 173.720328][T10196] ? file_tty_write.isra.0+0x6ed/0x8f0 [ 173.722048][T10196] ? kfree+0x1e5/0x6d0 [ 173.723362][T10196] ? __pfx_n_tty_write+0x10/0x10 [ 173.724935][T10196] file_tty_write.isra.0+0x4ca/0x8f0 [ 173.726604][T10196] vfs_write+0x6af/0x1050 [ 173.728000][T10196] ? __pfx_tty_write+0x10/0x10 [ 173.729525][T10196] ? __pfx_vfs_write+0x10/0x10 [ 173.731064][T10196] ? find_held_lock+0x2b/0x80 [ 173.732582][T10196] ksys_write+0x12a/0x250 [ 173.733961][T10196] ? __pfx_ksys_write+0x10/0x10 [ 173.735517][T10196] do_syscall_64+0x123/0x790 [ 173.736990][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.738856][T10196] RIP: 0033:0x7f1c45b9fb19 [ 173.740275][T10196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.746231][T10196] RSP: 002b:00007f1c43dee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.748822][T10196] RAX: ffffffffffffffda RBX: 00007f1c45e25fa0 RCX: 00007f1c45b9fb19 [ 173.751310][T10196] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000007 [ 173.753825][T10196] RBP: 00007f1c45c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 173.756631][T10196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.759138][T10196] R13: 00007f1c45e26038 R14: 00007f1c45e25fa0 R15: 00007ffc229f0988 [ 173.761630][T10196] [ 173.763203][T10196] Kernel Offset: disabled [ 173.764578][T10196] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:11:04 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000200 RCX=0000000000000101 RDX=ffffffff8fc91540 RSI=ffffffff89b9504a RDI=ffffffff89b9504f RBP=ffff88806a03e238 RSP=ffffc90000007eb8 R8 =0000000000000000 R9 =0000000000000200 R10=ffffffff926a9d5f R11=0000000000000001 R12=ffffffff8fc0a0d0 R13=8000000000000101 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8216bd1d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d447c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8176730ff8 CR3=0000000057ad9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51fab5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1b539f66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1b539f66 00007ffe1b539f6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51f9e381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51f9e381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51f9e3834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51f9e381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c6f725f6a6275 732c3d726573755f 6a4275732c00616d 692e790000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a85d4ba271c8de99 fd931dc85612c190 53ad43dd71904d7a 7902b3403269f2fe ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4be3aae0dfc91813 9760b0bfa37026c4 1bffdea9ca70f8ae cddbd22e7631d4d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69f620a027639e90 a021d506988c7c71 5f4ee107f72ca85d 4ba271c8de99fd93 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1dc85612c19053ad 43dd71904d7a7902 b3403269f2fee897 eb42f5f6902964b0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b457fd50f464002c 00616d692e797469 72756365733d656c 6f725f6a6275732c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c2bbf5 RDI=ffffffff9cf4c040 RBP=ffffffff9cf4c000 RSP=ffffc90005b7edb0 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=666f206574697257 R12=0000000000000000 R13=0000000000000030 R14=000000000000000c R15=ffffc90005b7f0c8 RIP=ffffffff85c2bc1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1c43dee6c0 ffffffff 00c00000 GS =0000 ffff8880d457c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000000 CR3=000000003f7e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc229f0e76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc229f0e76 00007ffc229f0e7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c45c381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c45c381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c45c3834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c45c381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 079b088b294b329b 53e5c67fffe738d0 060ef74b09399b0b f9520ded21ade3a2 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5219f37e8f98f367 250d249afc9b954a 339b04e7c61a0e8f 87e09008096d3732 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a47750bc755f8bf3 f239a4d1ef04f54b 3fc6c04966a71bdd b6305c52c18ea91f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff930f630c RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000001 RSI=ffffffff930f630c RDI=ffffffff9283f674 RBP=ffffc90003687088 RSP=ffffc90003686fa0 R8 =ffffffff930f6312 R9 =0000000000000007 R10=0000000000000200 R11=000000000000cb18 R12=ffffffff9283f674 R13=ffffffff81cb180b R14=ffffc90003687075 R15=ffffffff81cb180b RIP=ffffffff81bb51f3 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d467c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd613b57e20 CR3=000000002c502000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=000000000000000a DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf0e64050 00007ffdf0e64050 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd612ffa823 00007fd612ffa823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd612ffae80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd612ffae80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555582277c68 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d710001a80040100 000008060c016e8e 2010001980040100 0000080606010492 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010bb510000fffff ffffffff041cc010 000be910001c8004 0100000008060c01 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5bd60810001b8004 1a08000c08000100 000008060a0174ba 6f6e657601ffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffff7081b 80030010000fffff ffffffff043c8010 0001d710001a8004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000008060c01 6e8e201000198004 0100000008060601 04923e0200198e03 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a40300020003a203 0c020003a00304dd feeffc0800039803 0785f4d608000390 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88806a328858 RCX=0000000000000001 RDX=0000000000000001 RSI=ffffffff8e60120c RDI=ffffffff8c835380 RBP=ffff88805f26a580 RSP=ffffc90006007630 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=00000000ffffffff R13=0000000000000046 R14=ffff88805f26b180 R15=0000000000000002 RIP=ffffffff8bee3161 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555589a1f500 ffffffff 00c00000 GS =0000 ffff8880d477c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000314000 CR3=00000000485fd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51fab5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1b539f66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1b539f66 00007ffe1b539f6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51f9e381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51f9e381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51f9e3834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51f9e381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c6f725f6a6275 732c3d726573755f 6a4275732c00616d 692e790000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a85d4ba271c8de99 fd931dc85612c190 53ad43dd71904d7a 7902b3403269f2fe ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4be3aae0dfc91813 9760b0bfa37026c4 1bffdea9ca70f8ae cddbd22e7631d4d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69f620a027639e90 a021d506988c7c71 5f4ee107f72ca85d 4ba271c8de99fd93 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1dc85612c19053ad 43dd71904d7a7902 b3403269f2fee897 eb42f5f6902964b0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b457fd50f464002c 00616d692e797469 72756365733d656c 6f725f6a6275732c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000