last executing test programs:

1m16.578599707s ago: executing program 1 (id=1216):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01030000000000000000010000000900010073797a31000000005400fff5030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000007c000000050a01020000000000000000010020000c0002400000000000000001200004801400030076657468315f6d61637674617000000008000140000000050900010073797a31000000000a0007"], 0x308}}, 0x0)

1m16.577158134s ago: executing program 1 (id=1217):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000700000000000000000a20000000000a01020000000000000000030000000900010073797a300000000098020000160a01040000000000000000030000070c00054000000000000000040c00054000000000000000030900010073797a300000000008000740000000010c000540000000000000000508000740000000020900020073797a31000000009c000380"], 0x2f4}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)

1m16.462166086s ago: executing program 1 (id=1220):
socket$nl_route(0x10, 0x3, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x8942)
socket$netlink(0x10, 0x3, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x81d)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r1, &(0x7f0000000280), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x5e8ee000)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@buf)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_usb_connect(0x3, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="090100029e950440d107083a0b84010203010902090000010080fa"], 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000f7ffffff000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000e30000000000b7080000010000007b8af8ff3e000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000853414bbf100000085100000feffffff158891714eac4c08ffb37a3103b990c49b39d832c41a4040d5889d23837b3cb00e1c941c75019f05419c355e3d5936033edd0c9f1526a65e8d41ac748e125a1c18e233fa0187350073aeaab040a1e53c56b45892b7e4824767e8604be16e7284c4dc2280f17c126f7510d3ea121a4554da532ebe103a0829"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x80, &(0x7f0000000380)=""/128, 0x41100, 0x23, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[r1, r1, r1, r1], &(0x7f0000000540)=[{0x4, 0x1, 0xf, 0x6}, {0x0, 0x3, 0xf, 0x6}, {0x1, 0x3, 0x3, 0xa}, {0x3, 0x2, 0x4, 0x6}, {0x0, 0x2, 0x200000d, 0xa}], 0x10, 0x3}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r4, 0x0, 0x25, 0xd, @void}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1m15.901487424s ago: executing program 1 (id=1223):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)="64f56d", 0x3)
mkdirat(r2, &(0x7f00000001c0)='./mnt\x00', 0x7d)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0xc72, 0x4, 0x9, 0x8, 0xc4, 0xb, 0x5, 0x5, 0x9, 0x8, 0x3, 0x6, 0x2}, {0x1, 0xf2, 0x80, 0x4, 0x2, 0x5, 0x5, 0x6, 0x39, 0x80, 0xd1, 0x9, 0x9}, {0x0, 0x401, 0x0, 0x0, 0x6, 0xfc, 0x39, 0xfa, 0xa4, 0x3, 0x8, 0x1, 0xfe}], 0x7})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000480)=@svm={0x10d, 0x1, 0x1080, {0xa000, 0x5}, {"7fbb48a6353f7655f91cd99cad4044fe48b987298a044ab53856f8b5665f1cab3e54ab3107f28841918998662fe45c0e95c3b3b530737a00d6fa17bb3328962fe59c0553af198c6922c30c229a025aaccc09fa5e42a82ceeb692a14c172a88b9836a7dbdb28d9dd8f4223ef722378c64c5f2dbc44f86e8e3b4cd461c86ed6d7c2703e2dd673acbe19c875dc58760e003a34bdee5f5f96feaf86d8c8ad0883170bfd4c82a9eb8eb64ed246f0f37ec461e7fb981b67c56073d84e29e5adee9e9543e9aa08cdf8d1993425869b3be4c423dbb9687e13bd74bec4c44afdbcbe966d08e38dd2d9dad54d1497a86396b748568ebc7e0da275458f98e6aa06acbc4a69054515850cac506ac1b7c857971e5a171f984f5103ca92b0a0435107c219888d33cebf7559cbcff28de84060406249288adb256c10be3edf4d8e6564165262749be99deb83cabce8002c2fa26de5ec25b713552a12b1f2efb5587f00552c3a31730f7507ae1f9a576e0bcd0be4d80b0eb1d4d9f361f869e6d0258adc9651a3578cbfd664112db8f86149f937e2d372fd6d282621079e68d3667fcb44a0beb3152aa96931b45a05178fff63b212513f071b02de73b508c4260abea2a2e58aa5e19219c99ebdf6ef94665545b1d2a3e7bc7129f26c52924e95dc35f0af49beaee05cce58f139235c7606f385f1dd07f5b160beba72b976f9232f1ad8be9cf24fa5a25f9f25d38713f654d9830d0102ebe244ddf821eb32e08f83dcfe07afe371ef21d1db5718e4986bf3ff055bf22c57218dba1ed330c623460064a9acebd255b43bb06eda97f6f3984ab6a2af1464704d09485239754efc3d65e2f2aed6b06e44216badb87e0a27527182e239d4697c2ecd1b720da7f2bafdeccd872361d692bee3fc97fa629a7c72ff69bbedcadc129ca3b7eb396b58ddb65802b5bc6a6c4671572d8d512290650aff9741f4e4c6598fd5ba5f5d6c4728f080ba043524caecc73db2eea99c9ed653683e9e24d65e40e230bfd60e872c752ad14ab70e20a98baa2cbf47d8dfff50686e5212492557bee9151abca850c011fbfcdfcc230a601ef1bebd31645e382d3805760bdc3d615427a14a6af6fb33faec347ecf30ebafa83fcbfee6b61abccc24b50a7839fc74175d988a5fef049da35d203eecb20a889950151b9ce8ae160337dda8d840643428d460b9ce014fdd769c8ef4cd5f5b6ecd75822edd6ee5d5b9cde52e3a99bd30c78ddc70bca17310cac7a5d29ab4436ce6bfed7c80dbd967e548d63d2dd795bb0f2d9a0968b8a8a169b9f164ddc2303d40be8631a37ef42840ede277b513a256920d94bc47901325801a537e9797212f07dc8f5ac1fd6cf6ae870c4db5e90d2fd99eac07b650a1f675b688e30b347689b5dda21723e73c4014e674da72a9d193a6e8d252e04f6748d2b6e83996b2f7e87ce9827e4c710265e791eb6081ee7439673a048d20f66d225e37f6a818f166d342e6417ad928fdead851318a3091e4d35c1959ce5b39586952a85aa5b9c1e89b54742be18b89125103aa50b630c9b9f04a0a1edf8e465fa7393252b6676542b3e9db33ffef919853c3db6611f1ce62474112438a50b891c6553daae335da7d3f1ff96fa7c7d5961b7cbec6ab2e8ce0aa9e6469fc4fc1a1fcadf5ad8fea19b9eb6f4addf8d3f0afac39b470a403f236b07a5a06e87b28bdf055b6c0e5268bd4109ab3793264c5aa3a87f1ad45a86bf09d4dd4e8016869e027f48b54937117cf9feebd9b440218eb1e79751034d0d600991659959d508f4019f67ce93a86ed0628150e066fb412dfcc43c24e2a3e8b89516852a3d1cbb8b82b56685bff95b6a9610094ecf336cd854375b66684ccff4fb7c583a6178960556305b9abf888614b608d78d891973b38b8d1b0fa7cfeef19a774698ee899dc59244cf07a1cd94b29d8f1f8b74033dc8e8cef3ea85e82a4c696eb8b25aef6dad58340084a2542ed6e0a771d113a307b655dfb0a48131d225e949cb873cf96dc633968acfda35d29058a0aa38ff6e4fdd7a5348bae85c04e4de2cfc0049c0a23de2648c8a93df36f50f4260c88d44750fe67be4ae50b7ed3bc9b9e772425d3e7d664f22dc43809fbd8e74d3b4178dd31d1c560cab8826b06d2debd78c6f3fcaaba44d87ad9fe0711035157ac9b490c54b780f7e8f49e5e2933a825a9ba5e0fc7386fe6a730e5b15faa812df7ad65cf38bf66b262b601e892e672ffacac9343e8c3faf9fea971c94379058567aaca0ec5a06a598a841e9269f4e2595fdbb8e10e840b6fb9fa812fe6c7968106e7cb59ac3230c638510c0b5d748102f685e836a10eecb4d5e6c15ff988198d2cf5fec7e4b5add481828ac727b0ba23c0eb6c6398e4b7f655b001e505bda308c89a0f58a93d76e3c9532e7d17295f8419730e4d44a510e7873215fb130227cdf3cfe42d9287a1f1aeda9b0c65a6a2167986d98cd92753a5692e1ae5fc12cc850e2efc0b7a035313c8c8f2b4eaa6675bb737914a7f3e8fcb1e5aa29c24e232299b71aaf4ac56f3f9591eede03dc18dab5e850661ca550d37c8ce1b2a2239ce6b9eec2f13a9f1b05183fce951b1fcf85615f905dfbf50a3e206f62729b822c5309ae0aebc2ef73d701a338a57d9ec8f5f1af50b594edfa6e732b51b0ba88219f06fcf8fcbc0dac7ddbdd4290ca9483fe934d8a38401c798a91237e6c2a4be7525ffe9ccb5bbe474932b6ab3b09fa14d9d33447f6f1d57cb57808a1aec02983e330c6272a7ac41b678f0c2aee10ead321c87a133dbb1dd8a675de63c6996e02b584b59b6eacbd1845f9fe5c4bab1a9eda2e392b6cef315d7aa4bd42d786a702dcf27a3c744f237126ded8c4b3d3490af7508cdb5c87ea37bf0017c262bba74a11adbbe2c8f1224630b69942ae0da07a1f22e278bdec2c29fbca297124d4131f79a3422dc67603213481cc44cfed6cdd8359fc4c016ea1ef3ee25cbf6e52a994a33a78ed647a184c17eaa89513dfc96e04e078eed597673dfb85a083aab6b2b343bfa53f15010cfd78fdbd103443f40b7c3aabdcf470420c17f1ea39588b73a6627969aa7dc337889fb5f242089a927be21d2933da579b6ee734cad2407299526a5480d43450f87a145dbaf1c74e0e4e19e0ec553812bb7b1607371e295a8953e38f452fad01de293c2c869e199ee27f321de239067e9a8966a365135be32db370aa8e26a9b84a0fa693cc69b452924a3feaa94175039aa2d781dff6140ead799681f18266ef5e58735533fe93d5519f8ba9dda0b7134331bfa4d7f8f3df301c5a5c212552e5664b44e973d9387e3f35861211dbfa59ec3d77c6627aa3901a352e6548bd03a1a3d32bca71870e18b81f5016b48c95586314fdfc94d1586102eb07bcfb28389a06a7d28c737f8787ce8d692c0f0c5cba51e07905df6fb258e0dac56afd9c17938c482556c07f54775af907c10ac7a573cd75a80e1864de8bc7e684912714f5cacb736f8a6d6f50de3b8f4419a43668214b66ed40af6aab506fae5515d9e91145bf3856f349c8e9bddd88e6311a7d70c97a69bb5fabf2c9658634df30baae95c5c6e4bb1c4fa11d55f70787a4f284177e35ff88ae357b29ddd6757a0612d4bb3a1e0232e3abcd06fee1cf4210942e3d83c805ce52b8fa9702d7062441454b4c742b882abe0123a40e7d0a4b93878d158443e1f0012b4b60df801c27014e862a1dcb121c4f8a164eec9a1286bb41a545edd863d3428dd443b562cacc0bf97d7eb79f93cb973f43dff8dc220dea35b81464c40271fcfe97549aa64830ac59d6835fdb85624549ae5c1e356433c2b6fe0bb883ca2a81152ed1fe0cfe3480ae6e42bebfe46051a42b44a7f9ccc7fd7ffcab5c08c6f8100e172502927e4eea59b937751ec364aa50e3aea05cebe800f2cd595451d72a402ca1535d643f0150db9841a7511a1eada2b38d5ce06951086495053133ad1985ef8f14b7a8615b077826d510f84a5d429ffdc9382cef56665b4ae677b534096a02d5289052c45e8840412f1cac043255f0d1987a820924067a4bc9e7fd912c90d15c07d1c2edb5d9b930465f94e975bc6be09ef22ac006d142c489c5c0a294fb469f24fb663094773da795a4464cb8074020a99455ed73a9abb090c1e95e38a39033220f15367e2f0f879e7bb008ece4d5361694cf2d5a418753306f9d534cc5c0ed3e775364ca7c7fb9a0af8cae949c0824478a1d5c15e80c43c6a5d3bde1f522fc8d47920188c225b797b203db526b8f959ff490fbab5ef7b574885698c9431a033b8e7b2156e69d0961e59c762deac08119ae566c010b17810b0e1dfa283712803f544265fa791d5960d0a4a33886f43f6d4f46ed7bff3ee1482076e68a0cac4b4e39e681042f506d8fa6af0b285332eb92061838f57906b00baa856864de47b9371faf613adeb510118fccb8ae7b31eeb2fed94992a75dd1ae7c5f1c97aa3894be7468a4c619a5fefea7c8f2863fc94d9e06cba94128a67a2a5da9159e7001d823809a792fb8f5f824bc4a131c39c635419f1a61ca06bd250be25ca00a1830361696b0f72ea9c7b271fb81b9a2d7db0edad989da1f0b21c4a779125ff021704bd9aa54e9680e658bfb66399e55203802f5696aa0ebbd7b3a1c5cb575d75102e430463cc0a804357a15500eb8de12f1772171f3afe40ce5a9c2e4afc7f74319918025ad8aecb07a593fcbf37d4bcd625627382009637a76c8b668979cb3469e1a4100ce95d7d4b9755767e3db91daf05bebaa25cf82f6fda9c1e17dda4c54f58648f6461988d11147575dc4a4150692d5151788006a9e74ba41443de63e9d0b45a65b6034510bce32e1a7c6bd5e37a701cdeb63be0b21638c75b4dbd15c8815f1ddf0cb2931816ad596d761dc6a8f429a52a589be80a904bfe0214d76a3ee95ce07038dcf3a833603849fcbd15d75f8ce294057b7c8706d5077329e15b5e876ff0a40091d515cb3b768edc6ca67314219df2e98c89313bef54ce4c47141e5535b110ba0e9cffa451ab5cc64a15aad871878ff7396022f5865e9b2a35a7d9e0030ee75d5be2b63c685584e9344630067611c9d82c273f9f441ff1389d4726ecaf09eba39a9cc89310e7bba43ea0842db3e0ed2fc79f4ce8a2efeadffac1eabde2be966cc7bb51f005f8f5e58abc40cd60e359f6247259f531d567557eddb2886d129587d837a87f8d58be6e8756d33dd7895ed48dc348fec1653588d50ca0b82f63bb36c68ee5b8ef33325bf04258f74a7f7f628c1a2383276801c3fc5bab24979b90107c49d35ba154eaddafcf2d5dc48cde04d20779855e57fe4bb637c950ab64291e51dd06e6f6cf83f2424557e361506d5ea4b46f7d7dd141202643b6809659a79a7c781880ce2b196f8e1aa081b95fb2b6c6aef8c2050fc126d6eb98ae39eaf28f7a13fcae1c9616b6c463258adda09784ff4c94d286dff6bae8466d44b410b7187ead0d884f0a738b1def5ab70c05a085b246748c34e6a302f1b3b0a260b844b92a47e2948a07e0c65ddbf1022009cdd16b0889bc8c3433f2550eede9e5634e22a4ff89ff993e849f2a3bb3e7fae094a62e1fdf04fae3d22839bbc0b4d1f7964821fb1ee04437d36331e2bba666ea16083ef5feb0550d4b0ff0c591a16bd9d3e10b092b47f8ad345c055cb4c875e914202716212effb5a8c93189afd1a83a32e149e2b45cb368c46a11a9a2397d7a2a550f03e34fbe420d41181ac6a701305d1ff1bcdb0cd6eb575ef6df47e035c0b243827718547ec04ff0d9bcf40d6229989fba7ee2590"}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000001, 0x4, 0xf73c], 0x80a0000, 0x50})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x14c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01000000ef01010100000000000000000000000086dd00002800028005000300010000001c0002800c000180080001000a0000010c000180080001"], 0x60}}, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r7=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r7, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0x4}, 0x94)
r8 = creat(&(0x7f0000002680)='./mnt\x00', 0x111)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, r2, 0x2, 0x1, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x1e, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6521}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @func, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ldst={0x1, 0x2, 0x2, 0x1, 0xa, 0xfffffffffffffffe, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001600)='GPL\x00', 0x50f2ab8f, 0x1000, &(0x7f0000001640)=""/4096, 0x41000, 0x39, '\x00', r5, @fallback=0xe, r2, 0x8, &(0x7f0000002640)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r7, r2, 0x0, &(0x7f0000002740)=[r0, r2, r8, r9], &(0x7f0000002780), 0x10, 0x2}, 0x94)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
pivot_root(&(0x7f0000000280)='./file0/../file0/../file0\x00', &(0x7f0000000300)='./file2\x00')

1m15.642333054s ago: executing program 1 (id=1224):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7061")
write(0xffffffffffffffff, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0', 0x3e)
ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d7061746830")
ioctl(r0, 0xc138fd06, &(0x7f0000002000)="0400000000000000000000003801000000000000000000000000000000320000000000320000000000000000000000006d7061746830")

1m15.542708388s ago: executing program 1 (id=1225):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f00001000000000000000000000000300050000000001ff000000ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000002000000000000000000000000000000fc0200000000000000000000000000ff030006000000000002"], 0x80}}, 0x0)

1m15.446141499s ago: executing program 32 (id=1225):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f00001000000000000000000000000300050000000001ff000000ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000002000000000000000000000000000000fc0200000000000000000000000000ff030006000000000002"], 0x80}}, 0x0)

21.768506164s ago: executing program 2 (id=1766):
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0xc8, @rand_addr=0x64010102, 0x15, 0x0, 'rr\x00', 0x1, 0x0, 0xffffffff}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000340)={{0x3b, @loopback, 0x15, 0x0, 'rr\x00', 0x20}, {@empty, 0x15, 0x0, 0x1}}, 0x44) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) (async)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6) (async)
r4 = accept4(r2, 0x0, 0x0, 0x800)
write(r4, &(0x7f0000000500)="32323720456e746572696e85205061737369010000006f60652028312c312c312c312c312c31290d0a", 0x29)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x7}, 0x1c)
listen(r5, 0xfffffffc) (async)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async)
connect$inet(0xffffffffffffffff, 0x0, 0x0) (async)
sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xc0000, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80000702d00f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x48}], 0x1) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180000fe00000000000000000000000000002cfe8000000000000000000000000000bb330200000000000004017f04010005020453c204"], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async)
chdir(&(0x7f0000000140)='./file0\x00') (async)
openat(r0, &(0x7f00000000c0)='./file1\x00', 0x3e3443, 0x55)

18.727351466s ago: executing program 2 (id=1801):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000700000000341d8f3fee4eb6b595816a7bf2bebca0e4ebbd4add78e85959d405a73208d8cb4dcefea081585f3fbabfbce084858c7ac37cbc8613de96fd5dc919d71723f0588f99a222bdc03567c12687f2037bad50c112ce9c82948f451acb15ce800c5d3d075855b0f55e65da2b28d554daaea59936f0e1a559b919b46c9db2b4092d0c56e97464e5e6e0347d0f1f4f92a39e76a6a4411e"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1b5, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

18.656011111s ago: executing program 2 (id=1803):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

18.596727578s ago: executing program 2 (id=1804):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000980)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f00000009c0)='./file0/file0\x00', 0x0, 0x9814c6, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./mnt\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='adfs\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x1d, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c147d03daa0f4bd00", [0x7f, 0x1009]}})
syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000980)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) (async)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) (async)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) (async)
mount$bpf(0x200000000000, &(0x7f00000009c0)='./file0/file0\x00', 0x0, 0x9814c6, 0x0) (async)
mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) (async)
mount(&(0x7f00000000c0)=@filename='./mnt\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='adfs\x00', 0x8410, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
chdir(&(0x7f0000000140)='./file0\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x1d, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c147d03daa0f4bd00", [0x7f, 0x1009]}}) (async)

17.638669122s ago: executing program 2 (id=1817):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005600)={0x400, 0x10, 0x701, 0x0, 0x0, {0xa}, [@nested={0x3ec, 0xc0, 0x0, 0x1, [@nested={0x3e5, 0x24, 0x0, 0x1, [@generic="29a2f80ee615564eba39340c56fbc8edd0f7956ec23f77994e54354e349afea688ad58fe17678ffaa9d4f95aad761999b992753a7a93c6ced9fc704fa751c2cf9eb344092115569e3865226bf6cb9613bf8d4eb1bcb59e9099f6", @generic="320980175b78213524826d5880ebe9e330b5e44709e0defdbc919d032d51a0ac733a239138c5924f5a93ba147d4727e59cf270b24504fb63656e44f63c1425a9d2848c1f1a2e3be475297d41137105d87a5138b902a692a798fd120306169e079abfc958b31e0363eeaf7e592ad85738edd83245f356", @typed={0xc, 0xf, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x16b}, @generic="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"]}]}]}, 0x400}}, 0x0)
recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0)

17.047161232s ago: executing program 2 (id=1819):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ff, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x1300, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94)

16.890386128s ago: executing program 33 (id=1819):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ff, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x1300, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94)

5.099889165s ago: executing program 0 (id=1940):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async, rerun: 32)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) (async, rerun: 32)
r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = fsmount(r1, 0x0, 0x72)
fchdir(r2) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) (async)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="4000d50a000000003d1900000000000000000000bffc6eebfc32a6a3404bc86dc5ceb13db4000075999af9dc1a5dacf7e0cf7a1f5adc467161256cfb4e0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (rerun: 64)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x561145, 0x184) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async, rerun: 64)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32)
write(r4, &(0x7f0000000500)="84", 0x1) (async, rerun: 32)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c) (async, rerun: 64)
sendmmsg$inet6(r5, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x964, 0x89f8}, 0x8) (async, rerun: 64)
ioctl(r3, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000000000000000000000000000000000000000000000736e617030") (async, rerun: 64)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x22, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x79, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async)
sendmsg$nl_route_sched_retired(r3, 0x0, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r6=>r0}, './dev\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000180)='\x00', &(0x7f00000001c0)='./dev/mapper/control\x00', r6) (async, rerun: 64)
write(r3, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00snapshot\x00\x00\x00\x00\x00\x00\x00\x001:0 1:1 N 16\x00', 0x35) (rerun: 64)
ioctl(r3, 0xc138fd09, &(0x7f0000000000)="04000000000000000000000070010000380100000100"/48)

4.950049296s ago: executing program 0 (id=1944):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x28, 0xc, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x88}, 0x20040040)
write$uinput_user_dev(r0, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x80000002, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0xf242, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) (async)
write$uinput_user_dev(r0, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x80000002, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0xf242, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
ppoll(&(0x7f0000000000)=[{r0, 0x400}, {r0, 0x4202}], 0x2, &(0x7f0000000040), &(0x7f0000000080)={[0x1]}, 0x8)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) (async)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)
chdir(&(0x7f0000000140)='./file0\x00')

4.769817763s ago: executing program 0 (id=1947):
r0 = syz_io_uring_setup(0x3aeb, &(0x7f0000000540)={0x0, 0x69f0, 0x8, 0x0, 0x35}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SEND_ZC={0x2f, 0x18, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x20000040, 0x1})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)
r4 = syz_usb_connect(0x5, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = dup(r5)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', <r7=>0x0, 0x29, 0xd, 0x2, 0xc, 0x13, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x7800, 0x5, 0x6}})
sendmsg$nl_route(r6, &(0x7f00000015c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@ipv6_getnexthop={0x48, 0x6a, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4)
syz_usb_control_io(r4, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x3})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$UHID_INPUT(r9, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x7, 0x1, 0x0, 0x7, 0x0, 0x0, [{0x3, 0x4, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x38, 0x0, 0x1}, 0x28)
ioctl$KVM_SET_PIT(r9, 0x8048ae66, &(0x7f0000000140)={[{0xd, 0x7e18, 0x1, 0x5, 0xaf, 0x8, 0x6, 0x8a, 0x74, 0x7, 0x2, 0x5, 0x2}, {0x9, 0x8, 0x8, 0x6, 0x9, 0xe, 0xd3, 0x0, 0x3, 0x7, 0x3, 0x7, 0x9600029}, {0x0, 0xea8, 0x3, 0xfe, 0x8, 0x50, 0x4, 0x4, 0x0, 0x9, 0x4, 0xf, 0xbf6}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0xb, 0x6, 0xff}, 0x40, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x480, 0x808, 0xc, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3c, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x7f, 0x80, 0x5, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xd, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x4, 0xe, 0x312, 0x78, 0xea4, 0x7, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0xa7dd, 0x0, 0x6, 0x8, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d02, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xac, 0x5, 0x6, 0xd, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x3, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc6, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x226, 0x5, 0x5, 0x1, 0x30b1d68f, 0xa1f, 0xf40, 0x800, 0x1, 0x6c1b, 0x0, 0x2, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r10 = socket$key(0xf, 0x3, 0x2)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0)
r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x103a00, 0x0)
fsync(r11)
sendmsg$key(r10, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES8=r10], 0x80}}, 0x0)

2.051173765s ago: executing program 0 (id=1974):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7061")
write(0xffffffffffffffff, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0', 0x3e)
ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d7061746830")
ioctl(r0, 0xc138fd06, &(0x7f0000002000)="0400000000000000000000003801000000000000000000000000000000320000000000000000000000000032000000006d7061746830")

1.858790083s ago: executing program 0 (id=1976):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write(r0, &(0x7f0000000400)="44000000410001000300000000000000030100002a0000002c000100100004000000000000000000000000000600060086ddffff10000700010101010202020284004000", 0x44)

1.85861427s ago: executing program 3 (id=1977):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="70020000130029"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.776583433s ago: executing program 3 (id=1978):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005600)={0x458, 0x10, 0x701, 0x0, 0x0, {0xa}, [@nested={0x444, 0xc0, 0x0, 0x1, [@nested={0x43e, 0x24, 0x0, 0x1, [@generic="29a2f80ee615564eba39340c56fbc8edd0f7956ec23f77994e54354e349afea688ad58fe17678ffaa9d4f95aad761999b992753a7a93c6ced9fc704fa751c2cf9eb344092115569e3865226bf6cb9613bf8d4eb1bcb59e9099f66968e8f6b28f46aa3f84bbb6ea1dc34ae3be5cd929990db7b5ea4eb5374059cda64a8392992f4763a7c9d4b1586980d84262f6a6ce8ccb1694027c0cfadb1a48c79af90b759041e477f20accdae71fce7e61322890fbc3c360", @generic="320980175b78213524826d5880ebe9e330b5e44709e0defdbc919d032d51a0ac733a239138c5924f5a93ba147d4727e59cf270b24504fb63656e44f63c1425a9d2848c1f1a2e3be475297d41137105d87a5138b902a692a798fd120306169e079abfc958b31e0363eeaf7e592ad85738edd83245f356", @typed={0xc, 0xf, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x16b}, @generic="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"]}]}]}, 0x458}}, 0x0)
recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000054}, 0x0)

1.708809648s ago: executing program 0 (id=1979):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x0, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f00000000c0))
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
open_by_handle_at(r2, 0x0, 0x8000)
r3 = socket(0x2, 0x3, 0x6)
ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000200)={0x6, 0x3, 0x6, 0x4000000, 0xfffffff4})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0)
write(r6, &(0x7f0000000000)='3', 0x4e)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x8d, 0x8f, 0x33, 0x10, 0x5ac, 0x247, 0xc91e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x20, 0x7, "", [{{0x9, 0x4, 0x19, 0xfe, 0x0, 0x3, 0x4b, 0x2, 0xe}}]}}]}}, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10)
socket$igmp(0x2, 0x3, 0x2)

957.426301ms ago: executing program 4 (id=1994):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a3000001f001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)

859.788693ms ago: executing program 5 (id=1995):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x58a7b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}}]}}}]}, 0x64}}, 0x4008000)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)

796.383394ms ago: executing program 3 (id=1996):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x4a0, 0x4a0, 0x3b0, 0x3b0, 0x2e0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff, 0xffffffff, 0x0, 0x1fe000000], [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x11, 0x2, 0x4}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x4, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [0x0, 0x0, 0xa004], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x8, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0)

796.255205ms ago: executing program 4 (id=1997):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000001f00000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000007c000000050a01020000000000000000010020000c0002400000000000000001200004801400030076657468315f6d61637674617000000008000140000000050900010073797a31000000000a0007"], 0x308}}, 0x0)

795.781523ms ago: executing program 3 (id=1998):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="70020000130029"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

795.645471ms ago: executing program 3 (id=1999):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
pwrite64(r0, &(0x7f0000000100)='\x00\x00', 0x2, 0x1be)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
open(&(0x7f0000000140)='./bus\x00', 0x147bc2, 0x0)

795.526238ms ago: executing program 5 (id=2000):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0xfdffffff, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xbc}}, 0x0)

795.435323ms ago: executing program 4 (id=2001):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000308001400070010000800130008000300080012"], 0x44}}, 0x0)

795.156391ms ago: executing program 4 (id=2002):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182)
memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8000}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x58}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000001380))
getdents(r4, &(0x7f0000002000)=""/4096, 0x1000)

795.022788ms ago: executing program 5 (id=2003):
syz_emit_ethernet(0x66, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd01000000000014000060"], 0xfdef)

700.761679ms ago: executing program 4 (id=2004):
socket$netlink(0x10, 0x3, 0x14)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f0000000a800000121f", 0x2e}], 0x1}, 0x0)

520.641227ms ago: executing program 4 (id=2005):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x4, 0x1}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0xc23, 0x70bd2a, 0x0, {{}, {}, {0x14, 0x19, {0x8, 0x1, 0xfffffffd, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48014}, 0x4080)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r6 = syz_open_dev$sg(0x0, 0x0, 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20)
connect$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x7ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x5, 0x2}, 0x20)
ioctl$SG_IO(r6, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="12353fffeb00", 0x0, 0xbc, 0x10032, 0x2000, 0x0})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000d80)=@security={'security\x00', 0x4, 0x4, 0x390, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@local, @private0, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x1, 0x3, 0x18}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x60, 0x30, 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xffff, 0x8001, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x2a}}}, {{@ipv6={@local, @mcast2, [0xff, 0x0, 0xffffffff, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00], 'virt_wifi0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x25, 0x7, 0x4, 0x2e}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x41d)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0)
sendfile(r9, r9, 0x0, 0x30)
syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES32=r9], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004)
readv(r10, &(0x7f0000000280)=[{&(0x7f0000000240)=""/3, 0x3}], 0x1)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001600)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f9050002008300000008000640"], 0xf8}}, 0x6044040)

520.321849ms ago: executing program 3 (id=2006):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005600)={0x458, 0x10, 0x701, 0x0, 0x0, {0xa}, [@nested={0x444, 0xc0, 0x0, 0x1, [@nested={0x43e, 0x24, 0x0, 0x1, [@generic="29a2f80ee615564eba39340c56fbc8edd0f7956ec23f77994e54354e349afea688ad58fe17678ffaa9d4f95aad761999b992753a7a93c6ced9fc704fa751c2cf9eb344092115569e3865226bf6cb9613bf8d4eb1bcb59e9099f66968e8f6b28f46aa3f84bbb6ea1dc34ae3be5cd929990db7b5ea4eb5374059cda64a8392992f4763a7c9d4b1586980d84262f6a6ce8ccb1694027c0cfadb1a48c79af90b759041e477f20accdae71fce7e61322890fbc3c360", @generic="320980175b78213524826d5880ebe9e330b5e44709e0defdbc919d032d51a0ac733a239138c5924f5a93ba147d4727e59cf270b24504fb63656e44f63c1425a9d2848c1f1a2e3be475297d41137105d87a5138b902a692a798fd120306169e079abfc958b31e0363eeaf7e592ad85738edd83245f356", @typed={0xc, 0xf, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x16b}, @generic="4c2aefc24ca4c735c616962a4f791ea366aa06a4ba5ae8468929ed0f71c76adc92d22b4b129e01dbc80579e4f9271d3edc5b61186235b2f21a3b7187dc429f8df6a0f8f1b7df71e2c01c745ea64ba0b30d07496753f562b2ed7cd768cfdb7d45631c3afd4cb3ea626083d5dbd1681ff6a7fec9f9b42e85b43d10f31647fabba417f86420c154af41b6dcf8cbce48c104849c34bfc174ce36c6377aafda5a6b5de051cb9f49a7f0f8dab1c80b20afb5c5975d418016511875ca8fccfb7daa143fe610a94e4de7f74be13cff030d748e8b4be661542888ec9a3c392399379096db15a3114b8607835378415c07a35b8150ee3d0b4abcaabe740c35d5a00a38eca5482f5eca6008f0a6d5a51dfda82d987a445a679483dd242b5045ccf42941592016c9a038d4da961ada6c03d7cd29415654f40c18b80a8aa0275bc207c4e843d233bee95092f805ee6c347f8bcc952543979f48cd5fde1dfd43f10722d32099d8e1995ed3922c80095e3aea57ff2d110cfc8768b94829d642631c5b1d84e55c586a32917d225626949a536741d0812ec7fa13c151f1b9e91e03f5549219227d10381e9ada476ecdcc4d2ec77458af54c50a576a6458db1c2b736e7797e51d20046de81f111ec9952297dfe56b33e3cc8035b2a6bc0eda35a80896db909d03ddf6734298f19ad2c77156f223415d81735437efccab583dbc6ea22d789c607001ccd480d63a9120518749be8d3f21e27a4f9ceffdea95769cf323e1a0f818f1f432744fcff7d6675417361c1fb313f8bfba533f599bfb983a5d081fb64b5ccd9f21094147eab0c98c023f0ddade571b84005109b9569e7a1030b1f97f17b1fee7726d866294722613e314d91b569cf1c30083e83e182e7b7209334b4a5c1e6909a3df28d37a584a059f48dc005544a22338b4cb4bf3b2d54941cf0cdb43846f0f2568f3047831629baa3b7753faddbad58b188186eed0aa21ba4925969650d5f4b7e24555b618423e7caf494a48000414c70336e1d440a47ed3338af62d65ef87e4799ad36810be1beb850162a9d85f076292a702596668088ea8d0a1fe9bc9df54a5"]}]}]}, 0x458}}, 0x0)
recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0)

394.584771ms ago: executing program 5 (id=2007):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000200000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a80000000c0a01010000000000000000070000090900020073797a31000000000900010073797a30000000007c0003807800008008000340000000026c000b80200001800a00010071756f7461000000100002800c0001400000020000000000340001800a0001006c696d6974000000240002800c00024000000000000000000c000140", @ANYRES32=r0], 0x12c}}, 0x0)

212.936414ms ago: executing program 5 (id=2008):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="70020000130029"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

0s ago: executing program 5 (id=2009):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
io_uring_enter(0xffffffffffffffff, 0x529e, 0x7721, 0x16, 0x0, 0xfffffffffffffe0b)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newsa={0x138, 0x10, 0x401, 0x0, 0x0, {{@in=@remote, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xfd}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='1', 0x1)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22100, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x400c1, 0x28, 0x19, 0x200, &(0x7f0000000480)="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"})

kernel console output (not intermixed with test programs):

 110.492450][ T9302] netlink: 'syz.3.1239': attribute type 1 has an invalid length.
[  110.568122][ T9305] SELinux:  Context system_u:object_r:inetd_child_exec_t:s0 is not valid (left unmapped).
[  110.570650][   T43] audit: type=1400 audit(1791525612.050:648): avc:  denied  { relabelto } for  pid=9298 comm="syz.0.1238" name="tun" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:inetd_child_exec_t:s0"
[  110.572803][   T43] audit: type=1400 audit(1791525612.050:649): avc:  denied  { associate } for  pid=9298 comm="syz.0.1238" name="tun" dev="devtmpfs" ino=719 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_child_exec_t:s0"
[  110.577486][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.626205][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.636141][   T12] bond0 (unregistering): Released all slaves
[  110.648001][   T12] bond1 (unregistering): Released all slaves
[  110.667846][   T12] bond2 (unregistering): Released all slaves
[  110.689077][   T12] bond3 (unregistering): Released all slaves
[  110.709191][   T12] bond4 (unregistering): Released all slaves
[  110.828297][ T9302] 8021q: adding VLAN 0 to HW filter on device bond4
[  110.985430][   T12] tipc: Left network mode
[  111.029649][ T9315] __nla_validate_parse: 2 callbacks suppressed
[  111.029665][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'.
[  111.161834][ T5729] Bluetooth: hci0: command tx timeout
[  111.345290][   T43] kauditd_printk_skb: 6 callbacks suppressed
[  111.345300][   T43] audit: type=1400 audit(1791525612.830:656): avc:  denied  { write } for  pid=9326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.345560][   T43] audit: type=1400 audit(1791525612.830:657): avc:  denied  { create } for  pid=9326 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  111.345650][   T43] audit: type=1400 audit(1791525612.830:658): avc:  denied  { write } for  pid=9326 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  111.345908][   T43] audit: type=1400 audit(1791525612.830:659): avc:  denied  { append } for  pid=9326 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  111.442859][   T43] audit: type=1400 audit(1791525612.930:660): avc:  denied  { write } for  pid=9329 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.443010][   T43] audit: type=1400 audit(1791525612.930:661): avc:  denied  { unlink } for  pid=9329 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  111.480627][   T43] audit: type=1400 audit(1791525612.960:662): avc:  denied  { read } for  pid=9333 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:inetd_child_exec_t:s0"
[  111.659760][ T5438] 8021q: adding VLAN 0 to HW filter on device eth2
[  111.804407][   T43] audit: type=1400 audit(1791525613.290:663): avc:  denied  { write } for  pid=9348 comm="syz.3.1249" path="/net/tun" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:inetd_child_exec_t:s0"
[  112.051119][    C0] net_ratelimit: 61217 callbacks suppressed
[  112.051132][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  112.051145][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  112.051238][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  112.051245][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  112.051337][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  112.051338][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  112.051439][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  112.051491][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  112.051545][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  112.051591][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  112.134254][   T43] audit: type=1400 audit(1791525613.620:664): avc:  denied  { read } for  pid=9357 comm="syz.2.1252" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  112.134855][   T43] audit: type=1400 audit(1791525613.620:665): avc:  denied  { open } for  pid=9357 comm="syz.2.1252" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  112.253640][ T9359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1252'.
[  112.253670][ T9359] netlink: 'syz.2.1252': attribute type 7 has an invalid length.
[  112.253683][ T9359] netlink: 'syz.2.1252': attribute type 8 has an invalid length.
[  112.253693][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'.
[  112.297332][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1252'.
[  112.297352][ T9367] netlink: 'syz.2.1252': attribute type 7 has an invalid length.
[  112.297359][ T9367] netlink: 'syz.2.1252': attribute type 8 has an invalid length.
[  112.297365][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'.
[  112.393817][ T9371] netlink: 'syz.3.1254': attribute type 12 has an invalid length.
[  112.449810][ T9352] teql0: entered promiscuous mode
[  112.449819][ T9352] teql0: entered allmulticast mode
[  112.452348][ T9358] netlink: 'syz.2.1252': attribute type 29 has an invalid length.
[  112.714611][ T9375] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  112.787713][ T9264] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.791193][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.791339][ T9264] bridge_slave_0: entered allmulticast mode
[  112.799389][ T9264] bridge_slave_0: entered promiscuous mode
[  112.805128][ T9264] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.805203][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.805378][ T9264] bridge_slave_1: entered allmulticast mode
[  112.818607][ T9264] bridge_slave_1: entered promiscuous mode
[  112.916199][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'.
[  113.114785][ T9382] netlink: 'syz.0.1259': attribute type 1 has an invalid length.
[  113.191298][ T9264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.194217][ T9264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.218260][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1261'.
[  113.231101][ T5729] Bluetooth: hci0: command tx timeout
[  113.265945][ T9382] 8021q: adding VLAN 0 to HW filter on device bond4
[  113.504676][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'.
[  113.629935][ T9264] team0: Port device team_slave_0 added
[  113.634918][ T9409] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32000000
[  113.660013][ T9264] team0: Port device team_slave_1 added
[  113.958714][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.958724][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  113.958746][ T9264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.965815][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.965826][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  113.965847][ T9264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.290328][ T5438] 8021q: adding VLAN 0 to HW filter on device eth3
[  114.407162][ T9449] fuse: Bad value for 'fd'
[  114.422460][   T12] team0: Port device wlan0 removed
[  114.468798][ T9264] hsr_slave_0: entered promiscuous mode
[  114.469786][ T9264] hsr_slave_1: entered promiscuous mode
[  114.470414][ T9264] debugfs: 'hsr0' already exists in 'hsr'
[  114.470429][ T9264] Cannot create hsr debugfs directory
[  114.971623][   T12] hsr_slave_0: left promiscuous mode
[  114.993672][   T12] hsr_slave_1: left promiscuous mode
[  114.994548][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.994575][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.003747][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.003761][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.065162][   T12] veth1_macvtap: left promiscuous mode
[  115.065193][   T12] veth0_macvtap: left promiscuous mode
[  115.065316][   T12] veth1_vlan: left promiscuous mode
[  115.065354][   T12] veth0_vlan: left promiscuous mode
[  115.101542][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'.
** 1290 printk messages dropped **
** 1297 printk messages dropped **
** 1190 printk messages dropped **
** 1396 printk messages dropped **
** 140 printk messages dropped **
** 125 printk messages dropped **
** 134 printk messages dropped **
** 129 printk messages dropped **
** 118 printk messages dropped **
** 1375 printk messages dropped **
** 125 printk messages dropped **
** 116 printk messages dropped **
** 116 printk messages dropped **
** 1171 printk messages dropped **
** 1284 printk messages dropped **
** 1382 printk messages dropped **
** 114 printk messages dropped **
** 21 printk messages dropped **
** 808 printk messages dropped **
** 125 printk messages dropped **
** 140 printk messages dropped **
** 1093 printk messages dropped **
** 1491 printk messages dropped **
** 171 printk messages dropped **
** 13 printk messages dropped **
** 1393 printk messages dropped **
** 167 printk messages dropped **
** 1358 printk messages dropped **
** 1184 printk messages dropped **
** 136 printk messages dropped **
** 193 printk messages dropped **
** 1021 printk messages dropped **
** 111 printk messages dropped **
** 1396 printk messages dropped **
** 1310 printk messages dropped **
** 177 printk messages dropped **
** 179 printk messages dropped **
** 187 printk messages dropped **
** 1672 printk messages dropped **
** 1491 printk messages dropped **
** 1336 printk messages dropped **
** 174 printk messages dropped **
** 164 printk messages dropped **
** 1493 printk messages dropped **
** 185 printk messages dropped **
** 1524 printk messages dropped **
** 1808 printk messages dropped **
** 1458 printk messages dropped **
** 184 printk messages dropped **
** 170 printk messages dropped **
** 1308 printk messages dropped **
** 1339 printk messages dropped **
** 212 printk messages dropped **
** 184 printk messages dropped **
** 1271 printk messages dropped **
** 1245 printk messages dropped **
** 99 printk messages dropped **
** 101 printk messages dropped **
** 1336 printk messages dropped **
** 175 printk messages dropped **
** 146 printk messages dropped **
** 971 printk messages dropped **
** 84 printk messages dropped **
** 124 printk messages dropped **
** 1147 printk messages dropped **
** 898 printk messages dropped **
** 115 printk messages dropped **
** 117 printk messages dropped **
** 981 printk messages dropped **
** 711 printk messages dropped **
** 55 printk messages dropped **
** 100 printk messages dropped **
** 117 printk messages dropped **
** 948 printk messages dropped **
** 108 printk messages dropped **
** 112 printk messages dropped **
** 1174 printk messages dropped **
** 148 printk messages dropped **
** 1356 printk messages dropped **
** 1008 printk messages dropped **
** 896 printk messages dropped **
** 144 printk messages dropped **
** 156 printk messages dropped **
** 166 printk messages dropped **
** 146 printk messages dropped **
** 1143 printk messages dropped **
** 972 printk messages dropped **
** 108 printk messages dropped **
** 122 printk messages dropped **
** 777 printk messages dropped **
** 168 printk messages dropped **
** 867 printk messages dropped **
** 102 printk messages dropped **
** 608 printk messages dropped **
[  116.268107][ T9495] netlink: 'syz.3.1295': attribute type 10 has an invalid length.
[  116.396709][   T12] team0 (unregistering): Port device team_slave_1 removed
[  116.417658][   T12] team0 (unregistering): Port device team_slave_0 removed
[  116.671062][ T9495] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  116.814148][ T9502] netlink: 'syz.3.1298': attribute type 1 has an invalid length.
[  116.965434][   T43] kauditd_printk_skb: 7 callbacks suppressed
[  116.965445][   T43] audit: type=1400 audit(1791525618.450:673): avc:  denied  { write } for  pid=9504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.001976][ T9502] 8021q: adding VLAN 0 to HW filter on device bond5
[  117.029757][   T43] audit: type=1400 audit(1791525618.510:674): avc:  denied  { write } for  pid=9512 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.060517][    C2] net_ratelimit: 87274 callbacks suppressed
[  117.060531][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  117.060606][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  117.060624][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  117.060712][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  117.060712][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  117.060809][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  117.060823][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  117.060925][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  117.060970][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  117.061030][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  117.144209][ T5438] 8021q: adding VLAN 0 to HW filter on device eth4
[  117.255848][ T9264] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  117.320358][   T43] audit: type=1400 audit(1791525618.801:675): avc:  denied  { write } for  pid=9524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.327839][   T43] audit: type=1400 audit(1791525618.811:676): avc:  denied  { connect } for  pid=9525 comm="syz.3.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  117.331817][   T43] audit: type=1400 audit(1791525618.821:677): avc:  denied  { read } for  pid=9525 comm="syz.3.1304" laddr=fe80::cdd:61ff:fef7:f218 lport=23626 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  117.336740][ T9264] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  117.337532][ T9264] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  117.400525][ T5729] Bluetooth: hci0: command tx timeout
[  117.416735][   T43] audit: type=1400 audit(1791525618.901:678): avc:  denied  { write } for  pid=9533 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.426007][ T9264] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  117.427121][ T9264] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  117.442419][ T9536] netlink: 412 bytes leftover after parsing attributes in process `syz.0.1305'.
[  117.460907][ T9264] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  117.462964][ T9264] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  117.488919][ T9264] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  117.536401][ T5438] 8021q: adding VLAN 0 to HW filter on device eth5
[  117.635547][ T9264] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.640534][ T9536] netlink: 412 bytes leftover after parsing attributes in process `syz.0.1305'.
[  117.703177][ T9264] 8021q: adding VLAN 0 to HW filter on device team0
[  117.709288][ T6658] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.709330][ T6658] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.718817][ T6658] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.718859][ T6658] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.765196][   T43] audit: type=1400 audit(1791525619.251:679): avc:  denied  { create } for  pid=9547 comm="syz.0.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  117.768756][   T43] audit: type=1400 audit(1791525619.251:680): avc:  denied  { sys_admin } for  pid=9547 comm="syz.0.1306" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  117.885567][ T5729] Bluetooth: hci1: unexpected event for opcode 0x0c22
[  117.944951][ T9555] loop2: detected capacity change from 0 to 2640
[  117.947917][ T9555] Buffer I/O error on dev loop2, logical block 0, async page read
[  117.947943][ T9555] Buffer I/O error on dev loop2, logical block 0, async page read
[  117.947959][ T9555] Buffer I/O error on dev loop2, logical block 0, async page read
[  117.947974][ T9555] Buffer I/O error on dev loop2, logical block 0, async page read
[  117.947989][ T9555] Buffer I/O error on dev loop2, logical block 0, async page read
[  117.948011][ T9555] Buffer I/O error on dev loop2, logical block 0, async page read
[  117.948033][ T9555] Buffer I/O error on dev loop2, logical block 0, async page read
[  117.948048][ T9555] Buffer I/O error on dev loop2, logical block 0, async page read
[  117.948057][ T9555] ldm_validate_partition_table(): Disk read failed.
[  117.948070][ T9555] Buffer I/O error on dev loop2, logical block 0, async page read
[  117.948085][ T9555] Buffer I/O error on dev loop2, logical block 0, async page read
[  117.948108][ T9555] Dev loop2: unable to read RDB block 0
[  117.948192][ T9555]  loop2: unable to read partition table
[  117.986808][ T9555] loop_reread_partitions: partition scan of loop2 (3Ÿ¾‚³˜) failed (rc=-5)
[  117.996017][ T5729] Bluetooth: hci1: unexpected event for opcode 0x0c22
[  118.074369][ T5810] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  118.079852][ T9552] e1000e 0000:00:02.0: Interrupt Throttle Rate off
[  118.170188][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'.
[  118.176753][ T9552] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames
[  118.371055][   T43] audit: type=1400 audit(1791525619.851:681): avc:  denied  { write } for  pid=9570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  118.486342][   T43] audit: type=1400 audit(1791525619.971:682): avc:  denied  { write } for  pid=9579 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  118.686824][ T5871] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx
[  118.863907][ T9264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.099087][ T9264] veth0_vlan: entered promiscuous mode
[  119.111256][ T9264] veth1_vlan: entered promiscuous mode
[  119.145749][ T9264] veth0_macvtap: entered promiscuous mode
[  119.155928][ T9264] veth1_macvtap: entered promiscuous mode
[  119.197270][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.207420][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.382239][ T5874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.382280][ T5874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.382312][ T5874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.382342][ T5874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.435369][ T6674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.435382][ T6674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.500615][ T6659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.500629][ T6659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.069945][    C0] net_ratelimit: 86867 callbacks suppressed
[  122.069968][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  122.069992][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  122.070088][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  122.070175][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  122.070173][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.070262][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  122.070351][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  122.070374][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.070444][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  122.070531][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  123.344978][   T43] kauditd_printk_skb: 12 callbacks suppressed
[  123.344995][   T43] audit: type=1400 audit(1791525624.831:695): avc:  denied  { write } for  pid=9636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  123.394126][   T43] audit: type=1400 audit(1791525624.881:696): avc:  denied  { write } for  pid=9639 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  125.493991][   T43] audit: type=1400 audit(1791525626.982:697): avc:  denied  { write } for  pid=9643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  125.559931][   T43] audit: type=1400 audit(1791525627.052:698): avc:  denied  { write } for  pid=9646 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  127.079419][    C0] net_ratelimit: 94484 callbacks suppressed
[  127.079439][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.079435][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  127.079597][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.079618][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  127.079742][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  127.079786][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  127.079903][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.079953][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  127.080062][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.080117][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  127.729172][   T43] audit: type=1400 audit(1791525629.212:699): avc:  denied  { write } for  pid=9650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  127.797022][   T43] audit: type=1400 audit(1791525629.282:700): avc:  denied  { write } for  pid=9653 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  128.443799][   T43] audit: type=1400 audit(1791525629.932:701): avc:  denied  { write } for  pid=9656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  128.503299][   T43] audit: type=1400 audit(1791525629.992:702): avc:  denied  { write } for  pid=9659 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  128.601644][   T43] audit: type=1400 audit(1791525630.092:703): avc:  denied  { write } for  pid=9662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  128.670572][   T43] audit: type=1400 audit(1791525630.162:704): avc:  denied  { write } for  pid=9665 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  128.985335][   T43] audit: type=1400 audit(1791525630.472:705): avc:  denied  { write } for  pid=9668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.057815][   T43] audit: type=1400 audit(1791525630.542:706): avc:  denied  { write } for  pid=9671 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.437757][   T43] audit: type=1400 audit(1791525632.912:707): avc:  denied  { write } for  pid=9674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.499719][   T43] audit: type=1400 audit(1791525632.982:708): avc:  denied  { write } for  pid=9677 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  132.088760][    C2] net_ratelimit: 94831 callbacks suppressed
[  132.088775][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  132.088847][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  132.088889][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  132.088979][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  132.089070][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  132.089077][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.089156][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  132.089245][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  132.089284][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.089332][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  132.332181][ T9686] syzkaller1: entered promiscuous mode
[  132.332194][ T9686] syzkaller1: entered allmulticast mode
[  132.556529][   T43] audit: type=1400 audit(1791525634.032:709): avc:  denied  { ioctl } for  pid=9700 comm="syz.3.1322" path="socket:[29242]" dev="sockfs" ino=29242 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  132.589088][ T2316] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  132.708292][ T9710] netlink: 412 bytes leftover after parsing attributes in process `syz.0.1325'.
[  132.732689][ T9710] netlink: 412 bytes leftover after parsing attributes in process `syz.0.1325'.
[  132.742667][ T2316] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  132.744146][ T2316] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 32939, setting to 1024
[  132.744170][ T2316] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  132.746105][ T2316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.746121][ T2316] usb 7-1: Product: syz
[  132.746134][ T2316] usb 7-1: Manufacturer: syz
[  132.746146][ T2316] usb 7-1: SerialNumber: syz
[  132.762685][ T9686] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  132.833729][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[  132.840071][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[  132.862097][ T9713] can0: slcan on ptm0.
[  132.863777][ T9713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1326'.
[  132.969247][ T2316] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  132.980896][ T9712] can0 (unregistered): slcan off ptm0.
[  133.030473][ T9719] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1328'.
[  133.110831][ T9722] comedi comedi1: comedi_config --init_data is deprecated
[  133.183899][ T9724] netlink: 'syz.0.1329': attribute type 1 has an invalid length.
[  133.183913][ T9724] netlink: 'syz.0.1329': attribute type 2 has an invalid length.
[  133.248496][ T5830] usb 7-1: USB disconnect, device number 6
[  133.258394][ T5830] usblp0: removed
[  133.351991][ T9727] netlink: 'syz.4.1330': attribute type 12 has an invalid length.
[  133.553420][ T9742] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32
[  133.669777][ T9740] netlink: 'syz.3.1335': attribute type 1 has an invalid length.
[  133.763343][ T9740] 8021q: adding VLAN 0 to HW filter on device bond6
[  133.804048][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'.
[  133.804079][ T9757] netlink: 'syz.0.1343': attribute type 30 has an invalid length.
[  133.837293][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'.
[  133.837316][ T9757] netlink: 'syz.0.1343': attribute type 30 has an invalid length.
[  133.878611][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.879159][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.879188][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.879206][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.022459][ T9762] SET target dimension over the limit!
[  134.163144][ T9772] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1347'.
[  134.336458][ T9777] netlink: 'syz.0.1350': attribute type 46 has an invalid length.
[  134.336474][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'.
[  134.394649][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'.
[  134.402630][   T43] audit: type=1400 audit(1791525635.873:710): avc:  denied  { write } for  pid=9776 comm="syz.0.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  134.531490][ T9783] 0x000000000000-0x00000001003e : ""
[  134.569595][ T9783] ftl_cs: FTL header corrupt!
[  134.586041][ T9783] FAULT_INJECTION: forcing a failure.
[  134.586041][ T9783] name failslab, interval 1, probability 0, space 0, times 0
[  134.586071][ T9783] CPU: 3 UID: 0 PID: 9783 Comm: syz.0.1352 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  134.586097][ T9783] Tainted: [L]=SOFTLOCKUP
[  134.586105][ T9783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  134.586117][ T9783] Call Trace:
[  134.586124][ T9783]  <TASK>
[  134.586131][ T9783]  dump_stack_lvl+0x100/0x190
[  134.586156][ T9783]  should_fail_ex.cold+0x5/0xa
[  134.586174][ T9783]  should_failslab+0xc2/0x120
[  134.586192][ T9783]  kmem_cache_alloc_noprof+0x92/0x6a0
[  134.586207][ T9783]  ? __kernfs_new_node+0xd2/0xa10
[  134.586223][ T9783]  __kernfs_new_node+0xd2/0xa10
[  134.586237][ T9783]  ? __pfx___kernfs_new_node+0x10/0x10
[  134.586250][ T9783]  ? lock_acquire+0x1d1/0x380
[  134.586263][ T9783]  ? kernfs_root+0x23/0x2a0
[  134.586274][ T9783]  ? find_held_lock+0x2b/0x80
[  134.586297][ T9783]  ? kernfs_root+0xee/0x2a0
[  134.586311][ T9783]  ? kernfs_root+0xee/0x2a0
[  134.586336][ T9783]  kernfs_new_node+0x117/0x150
[  134.586362][ T9783]  __kernfs_create_file+0x53/0x350
[  134.586388][ T9783]  sysfs_add_file_mode_ns+0x207/0x3c0
[  134.586412][ T9783]  internal_create_group+0x593/0xfb0
[  134.586432][ T9783]  ? __pfx_internal_create_group+0x10/0x10
[  134.586446][ T9783]  ? kernfs_create_link+0x1bd/0x240
[  134.586463][ T9783]  internal_create_groups+0x9d/0x150
[  134.586480][ T9783]  device_add+0x77a/0x1970
[  134.586494][ T9783]  ? __pfx_device_add+0x10/0x10
[  134.586504][ T9783]  ? __pfx___might_resched+0x10/0x10
[  134.586521][ T9783]  __add_disk+0x592/0xf10
[  134.586535][ T9783]  add_disk_fwnode+0x118/0x480
[  134.586550][ T9783]  add_mtd_blktrans_dev+0xd0b/0x1520
[  134.586572][ T9783]  ? __pfx_add_mtd_blktrans_dev+0x10/0x10
[  134.586596][ T9783]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  134.586610][ T9783]  ? mtdblock_add_mtd+0x4a/0x270
[  134.586628][ T9783]  mtdblock_add_mtd+0x1cc/0x270
[  134.586644][ T9783]  blktrans_notify_add+0xa2/0xf0
[  134.586658][ T9783]  add_mtd_device+0xb6d/0x1820
[  134.586672][ T9783]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  134.586690][ T9783]  ? __pfx_add_mtd_device+0x10/0x10
[  134.586704][ T9783]  mtd_add_partition+0x376/0x6a0
[  134.586718][ T9783]  ? __pfx_mtd_add_partition+0x10/0x10
[  134.586730][ T9783]  ? __might_fault+0xc5/0x140
[  134.586740][ T9783]  ? __might_fault+0xc5/0x140
[  134.586757][ T9783]  mtdchar_blkpg_ioctl+0x207/0x250
[  134.586771][ T9783]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[  134.586815][ T9783]  mtdchar_ioctl+0x1670/0x1fd0
[  134.586833][ T9783]  ? __pfx_mtdchar_ioctl+0x10/0x10
[  134.586847][ T9783]  ? lock_acquire+0x1d1/0x380
[  134.586860][ T9783]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[  134.586879][ T9783]  ? rcu_is_watching+0x13/0xc0
[  134.586896][ T9783]  ? trace_contention_end+0x126/0x160
[  134.586913][ T9783]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[  134.586928][ T9783]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  134.586941][ T9783]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  134.586959][ T9783]  ? __pfx___mutex_lock+0x10/0x10
[  134.586975][ T9783]  ? __fget_files+0x34/0x3d0
[  134.586999][ T9783]  mtdchar_unlocked_ioctl+0xb0/0xf0
[  134.587012][ T9783]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[  134.587027][ T9783]  __x64_sys_ioctl+0x18e/0x210
[  134.587041][ T9783]  do_syscall_64+0x123/0x790
[  134.587058][ T9783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.587072][ T9783] RIP: 0033:0x7f738e19e1d9
[  134.587082][ T9783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.587093][ T9783] RSP: 002b:00007f738f0f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  134.587104][ T9783] RAX: ffffffffffffffda RBX: 00007f738e425fa0 RCX: 00007f738e19e1d9
[  134.587111][ T9783] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000006
[  134.587118][ T9783] RBP: 00007f738e235888 R08: 0000000000000000 R09: 0000000000000000
[  134.587125][ T9783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.587131][ T9783] R13: 00007f738e426038 R14: 00007f738e425fa0 R15: 00007ffd3b4dbf38
[  134.587153][ T9783]  </TASK>
[  135.173980][ T9808] program syz.0.1362 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  135.177147][ T9812] program syz.0.1362 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  135.224269][ T9816] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 3200
[  135.226688][   T43] audit: type=1400 audit(1791525636.703:711): avc:  denied  { bind } for  pid=9814 comm="syz.2.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  135.264044][ T9819] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1361'.
[  135.632658][   T43] audit: type=1400 audit(1791525637.113:712): avc:  denied  { append } for  pid=9841 comm="syz.2.1372" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  135.861852][   T43] audit: type=1400 audit(1791525637.343:713): avc:  denied  { write } for  pid=9848 comm="syz.0.1374" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  135.863561][ T9849] binder: 9848:9849 ioctl c0045516 200000000040 returned -22
[  135.981488][ T9857] netlink: 'syz.2.1378': attribute type 10 has an invalid length.
[  136.040386][ T6659] IPVS: starting estimator thread 0...
[  136.139176][ T9861] IPVS: using max 26 ests per chain, 62400 per kthread
[  136.994794][   T43] audit: type=1400 audit(1791525638.473:714): avc:  denied  { create } for  pid=9888 comm="syz.0.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  137.028602][   T43] audit: type=1400 audit(1791525638.513:715): avc:  denied  { write } for  pid=9888 comm="syz.0.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  137.029749][ T9891] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  137.098117][    C2] net_ratelimit: 79098 callbacks suppressed
[  137.098134][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  137.098171][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  137.098305][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  137.098326][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.098466][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  137.098501][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.098626][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  137.098641][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  137.098787][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.098790][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  137.205317][ T9893] gretap0: left promiscuous mode
[  137.279224][ T9893] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.291435][ T9893] 8021q: adding VLAN 0 to HW filter on device team0
[  137.303167][ T9893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.377711][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.387698][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.403319][ T9893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  137.403334][ T9893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  137.434701][ T9893] veth1_vlan: left promiscuous mode
[  137.442427][ T9893] veth0_vlan: left promiscuous mode
[  137.446924][ T9893] veth0_vlan: entered promiscuous mode
[  137.460302][ T9893] veth1_vlan: entered promiscuous mode
[  137.465309][ T9903] netlink: 'syz.2.1394': attribute type 267 has an invalid length.
[  137.467279][ T9893] veth1_macvtap: left promiscuous mode
[  137.477249][ T9893] veth0_macvtap: left promiscuous mode
[  137.482996][ T9893] veth0_macvtap: entered promiscuous mode
[  137.484166][ T9893] veth1_macvtap: entered promiscuous mode
[  137.499057][ T9893] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  137.500219][ T9893] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  137.501393][ T9893] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  137.505155][ T9893] gretap0: entered promiscuous mode
[  137.507244][ T9893] 8021q: adding VLAN 0 to HW filter on device bond1
[  137.512843][ T9893] ip6erspan0: left allmulticast mode
[  137.524812][ T9893] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.589287][ T6674] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.589378][ T6674] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.594748][ T6674] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.594827][ T6674] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.788628][ T9915] FAULT_INJECTION: forcing a failure.
[  137.788628][ T9915] name fail_futex, interval 1, probability 0, space 0, times 1
[  137.788658][ T9915] CPU: 3 UID: 0 PID: 9915 Comm: syz.4.1396 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  137.788684][ T9915] Tainted: [L]=SOFTLOCKUP
[  137.788691][ T9915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  137.788702][ T9915] Call Trace:
[  137.788708][ T9915]  <TASK>
[  137.788717][ T9915]  dump_stack_lvl+0x100/0x190
[  137.788747][ T9915]  should_fail_ex.cold+0x5/0xa
[  137.788773][ T9915]  get_futex_key+0x1d0/0x14f0
[  137.788845][ T9915]  ? __pfx_get_futex_key+0x10/0x10
[  137.788867][ T9915]  ? wakeup_preempt_fair+0x5c3/0xdc0
[  137.788891][ T9915]  ? tracing_record_taskinfo_sched_switch+0xac/0x560
[  137.788914][ T9915]  futex_wait_setup+0x91/0x540
[  137.788935][ T9915]  __futex_wait+0x19f/0x300
[  137.788952][ T9915]  ? __pfx___futex_wait+0x10/0x10
[  137.788966][ T9915]  ? __pfx_try_to_wake_up+0x10/0x10
[  137.788983][ T9915]  ? futex_hash+0x311/0x400
[  137.789003][ T9915]  ? __pfx_futex_wake_mark+0x10/0x10
[  137.789024][ T9915]  ? find_held_lock+0x2b/0x80
[  137.789044][ T9915]  ? futex_wake+0x4ea/0x5e0
[  137.789063][ T9915]  futex_wait+0xe6/0x370
[  137.789078][ T9915]  ? __pfx_futex_wait+0x10/0x10
[  137.789098][ T9915]  ? fput+0x7c/0x100
[  137.789118][ T9915]  ? __sys_recvfrom+0x258/0x2f0
[  137.789143][ T9915]  do_futex+0x265/0x440
[  137.789165][ T9915]  ? __pfx_do_futex+0x10/0x10
[  137.789191][ T9915]  __x64_sys_futex+0x34f/0x4d0
[  137.789214][ T9915]  ? __pfx___x64_sys_futex+0x10/0x10
[  137.789242][ T9915]  do_syscall_64+0x123/0x790
[  137.789264][ T9915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.789280][ T9915] RIP: 0033:0x7ff357b9e1d9
[  137.789293][ T9915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  137.789306][ T9915] RSP: 002b:00007ff358b350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  137.789322][ T9915] RAX: ffffffffffffffda RBX: 00007ff357e25fa8 RCX: 00007ff357b9e1d9
[  137.789334][ T9915] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff357e25fa8
[  137.789343][ T9915] RBP: 00007ff357e25fa0 R08: 0000000000000000 R09: 0000000000000000
[  137.789353][ T9915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.789361][ T9915] R13: 00007ff357e26038 R14: 00007ffdd1ceb770 R15: 00007ffdd1ceb858
[  137.789382][ T9915]  </TASK>
[  137.891091][   T43] audit: type=1400 audit(1791525639.373:716): avc:  denied  { read } for  pid=9917 comm="syz.4.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  138.216661][ T9922] __nla_validate_parse: 3 callbacks suppressed
[  138.216671][ T9922] netlink: 528 bytes leftover after parsing attributes in process `syz.3.1398'.
[  138.250026][ T9922] x_tables: duplicate underflow at hook 2
[  138.250569][   T43] audit: type=1400 audit(1791525639.733:717): avc:  denied  { connect } for  pid=9920 comm="syz.3.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  138.767702][ T9926] netlink: 'syz.4.1399': attribute type 46 has an invalid length.
[  138.767718][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'.
[  138.822037][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'.
[  138.840160][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.840230][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.840274][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.840292][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.990542][ T9933] netlink: 'syz.0.1400': attribute type 10 has an invalid length.
[  139.035064][ T9933] bond0: (slave veth0_to_bond): Releasing backup interface
[  139.066066][ T9930] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1401'.
[  139.161245][   T43] audit: type=1400 audit(1791525640.643:718): avc:  denied  { write } for  pid=9939 comm="syz.4.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  139.167347][ T9943] overlayfs: missing 'lowerdir'
[  139.304584][ T9950] netlink: 'syz.3.1409': attribute type 2 has an invalid length.
[  139.306183][ T9950] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1409'.
[  139.597459][ T9959] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 3200
[  139.672292][ T9962] ip6t_srh: unknown srh invflags 7863
[  139.683309][ T9966] overlayfs: missing 'workdir'
[  139.973019][ T9980] netlink: 'syz.2.1422': attribute type 46 has an invalid length.
[  139.973035][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'.
[  139.977329][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'.
[  140.070259][ T9985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1424'.
[  140.194510][ T9993] overlayfs: missing 'workdir'
[  140.424639][T10009] netlink: 'syz.4.1432': attribute type 1 has an invalid length.
[  140.759584][T10017] netlink: 'syz.0.1434': attribute type 1 has an invalid length.
[  140.759602][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'.
[  140.789059][T10022] overlayfs: missing 'workdir'
[  140.863035][   T43] audit: type=1400 audit(1791525642.343:719): avc:  denied  { ioctl } for  pid=10027 comm="syz.0.1440" path="/dev/uhid" dev="devtmpfs" ino=1293 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  140.879754][T10026] netlink: 'syz.4.1439': attribute type 46 has an invalid length.
[  140.879764][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'.
[  141.001724][   T43] audit: type=1400 audit(1791525642.483:720): avc:  denied  { read } for  pid=10032 comm="syz.0.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  141.125250][T10046] netlink: 'syz.3.1446': attribute type 1 has an invalid length.
[  141.191972][T10046] bond7: entered promiscuous mode
[  141.192351][T10046] 8021q: adding VLAN 0 to HW filter on device bond7
[  141.306867][   T43] audit: type=1400 audit(1791525642.783:721): avc:  denied  { shutdown } for  pid=10055 comm="syz.4.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  141.318724][   T43] audit: type=1400 audit(1791525642.803:722): avc:  denied  { write } for  pid=10055 comm="syz.4.1450" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  141.734591][T10046] 8021q: adding VLAN 0 to HW filter on device bond7
[  141.734951][T10046] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address
[  141.734966][T10046] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  141.752906][T10046] bond7: (slave xfrm1): making interface the new active one
[  141.752927][T10046] xfrm1: entered promiscuous mode
[  141.763569][T10046] bond7: (slave xfrm1): Enslaving as an active interface with an up link
[  142.107544][    C2] net_ratelimit: 83644 callbacks suppressed
[  142.107556][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  142.107603][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.107647][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  142.107735][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  142.107779][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.107822][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  142.107910][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  142.107948][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  142.108004][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  142.108090][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  142.110336][T10078] bond5 (unregistering): Released all slaves
[  142.254162][   T43] audit: type=1400 audit(1791525643.734:723): avc:  denied  { create } for  pid=10082 comm="syz.2.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  142.254187][   T43] audit: type=1400 audit(1791525643.734:724): avc:  denied  { ioctl } for  pid=10082 comm="syz.2.1458" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  142.416314][T10100] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 3200000000
[  142.722334][T10115] netlink: 'syz.3.1469': attribute type 46 has an invalid length.
[  143.242846][T10131] syzkaller0: entered promiscuous mode
[  143.242861][T10131] syzkaller0: entered allmulticast mode
[  143.586362][T10137] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  143.591674][   T43] audit: type=1400 audit(1791525645.074:725): avc:  denied  { write } for  pid=10136 comm="syz.4.1476" path="socket:[31206]" dev="sockfs" ino=31206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  143.620690][T10140] __nla_validate_parse: 6 callbacks suppressed
[  143.620707][T10140] netlink: 412 bytes leftover after parsing attributes in process `syz.0.1478'.
[  143.643338][T10141] netlink: 'syz.2.1477': attribute type 12 has an invalid length.
[  143.644383][T10142] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1476'.
[  143.722557][T10137] syz.4.1476 (10137) used greatest stack depth: 19768 bytes left
[  143.729218][T10140] netlink: 412 bytes leftover after parsing attributes in process `syz.0.1478'.
[  143.795996][T10145] netlink: 'syz.3.1479': attribute type 46 has an invalid length.
[  143.796012][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1479'.
[  144.101915][   T43] audit: type=1400 audit(1791525645.584:726): avc:  denied  { ioctl } for  pid=10163 comm="syz.3.1487" path="socket:[32608]" dev="sockfs" ino=32608 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  144.149358][ T5623] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  144.305426][ T5623] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00
[  144.309924][ T5623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  144.309942][ T5623] usb 5-1: Product: syz
[  144.309955][ T5623] usb 5-1: Manufacturer: syz
[  144.379322][T10176] netlink: 'syz.3.1491': attribute type 46 has an invalid length.
[  144.379339][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'.
[  144.521025][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1493'.
[  144.887480][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'.
[  144.977639][   T43] audit: type=1400 audit(1791525646.434:727): avc:  denied  { name_bind } for  pid=10149 comm="syz.0.1481" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  145.096532][ T5623] scsi host6: uas
[  145.147955][    C3] usb 5-1: stat urb: no pending cmd for uas-tag 0
[  145.352874][    C3] usb 5-1: cmd cmplt err -71
[  145.353506][ T5623] usb 5-1: USB disconnect, device number 7
[  145.393160][ T5623] scsi 6:0:0:0: tag#20 uas_zap_pending 0 uas-tag 1 inflight: CMD 
[  145.393224][ T5623] scsi 6:0:0:0: tag#20 CDB: Inquiry 12 00 00 00 24 00
[  145.498154][   T43] audit: type=1400 audit(1791525646.984:728): avc:  denied  { append } for  pid=10203 comm="syz.2.1498" name="event2" dev="devtmpfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  146.346726][T10234] netlink: 'syz.0.1505': attribute type 46 has an invalid length.
[  146.346739][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'.
[  146.492321][   T43] audit: type=1400 audit(1791525647.974:729): avc:  denied  { write } for  pid=10239 comm="syz.2.1507" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  146.521663][T10238] FAULT_INJECTION: forcing a failure.
[  146.521663][T10238] name failslab, interval 1, probability 0, space 0, times 0
[  146.521697][T10238] CPU: 3 UID: 0 PID: 10238 Comm: syz.0.1506 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  146.521725][T10238] Tainted: [L]=SOFTLOCKUP
[  146.521733][T10238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  146.521746][T10238] Call Trace:
[  146.521753][T10238]  <TASK>
[  146.521760][T10238]  dump_stack_lvl+0x100/0x190
[  146.521800][T10238]  should_fail_ex.cold+0x5/0xa
[  146.521830][T10238]  should_failslab+0xc2/0x120
[  146.521860][T10238]  kmem_cache_alloc_noprof+0x92/0x6a0
[  146.521883][T10238]  ? mas_next_range+0xa4/0x100
[  146.521911][T10238]  ? vm_area_alloc+0x1f/0x160
[  146.521944][T10238]  vm_area_alloc+0x1f/0x160
[  146.521976][T10238]  __mmap_region+0x1025/0x32e0
[  146.522003][T10238]  ? __pfx___mmap_region+0x10/0x10
[  146.522026][T10238]  ? get_page_from_freelist+0x110d/0x35d0
[  146.522058][T10238]  ? mas_prev_slot+0x768/0x11b0
[  146.522098][T10238]  ? unmapped_area_topdown+0x54e/0x6a0
[  146.522181][T10238]  mmap_region+0x3db/0x6d0
[  146.522226][T10238]  ? __pfx_mmap_region+0x10/0x10
[  146.522250][T10238]  ? thp_get_unmapped_area_vmaflags+0x2a5/0x330
[  146.522277][T10238]  ? selinux_mmap_addr+0x2b/0x110
[  146.522301][T10238]  ? bpf_lsm_mmap_addr+0x9/0x30
[  146.522325][T10238]  ? security_mmap_addr+0x71/0x1e0
[  146.522353][T10238]  ? __get_unmapped_area+0x255/0x3e0
[  146.522384][T10238]  do_mmap+0x12c7/0x1c30
[  146.522416][T10238]  ? lock_acquire+0x1d1/0x380
[  146.522438][T10238]  ? __pfx_do_mmap+0x10/0x10
[  146.522466][T10238]  ? __pfx___might_resched+0x10/0x10
[  146.522494][T10238]  ? __pfx_down_write_killable+0x10/0x10
[  146.522530][T10238]  vm_mmap_pgoff+0x28d/0x470
[  146.522558][T10238]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  146.522583][T10238]  ? find_held_lock+0x2b/0x80
[  146.522611][T10238]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  146.522636][T10238]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  146.522664][T10238]  ksys_mmap_pgoff+0xe4/0x610
[  146.522690][T10238]  ? find_held_lock+0x2b/0x80
[  146.522718][T10238]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  146.522747][T10238]  __x64_sys_mmap+0x125/0x190
[  146.522771][T10238]  do_syscall_64+0x123/0x790
[  146.522808][T10238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.522830][T10238] RIP: 0033:0x7f738e19df42
[  146.522848][T10238] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64
[  146.522866][T10238] RSP: 002b:00007f738f0f2d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  146.522884][T10238] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f738e19df42
[  146.522898][T10238] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000
[  146.522909][T10238] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000
[  146.522920][T10238] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000
[  146.522932][T10238] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f738e232fb8
[  146.522957][T10238]  </TASK>
[  147.073672][T10258] overlayfs: conflicting lowerdir path
[  147.114070][T10261] overlayfs: missing 'lowerdir'
[  147.116958][    C0] net_ratelimit: 83557 callbacks suppressed
[  147.116974][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.117019][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  147.117166][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.117193][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  147.117351][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  147.117361][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  147.117529][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.117532][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  147.117697][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  147.117707][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.298631][   T43] audit: type=1400 audit(1791525648.774:730): avc:  denied  { write } for  pid=10264 comm="syz.2.1514" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[  147.437215][   T43] audit: type=1326 audit(1791525648.924:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10270 comm="syz.0.1517" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f738e19e1d9 code=0x0
[  147.563452][   T43] audit: type=1400 audit(1791525649.044:732): avc:  denied  { append } for  pid=10270 comm="syz.0.1517" name="tun" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:inetd_child_exec_t:s0"
[  147.620091][T10281] netlink: 'syz.3.1520': attribute type 1 has an invalid length.
[  147.648795][T10281] bond8: entered promiscuous mode
[  147.651361][T10281] 8021q: adding VLAN 0 to HW filter on device bond8
[  147.729094][T10293] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32000000000000
[  147.777459][   T43] audit: type=1400 audit(1791525649.264:733): avc:  denied  { map } for  pid=10297 comm="syz.3.1525" path="socket:[31443]" dev="sockfs" ino=31443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  147.777611][   T43] audit: type=1400 audit(1791525649.264:734): avc:  denied  { read } for  pid=10297 comm="syz.3.1525" path="socket:[31443]" dev="sockfs" ino=31443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  147.813894][   T43] audit: type=1400 audit(1791525649.294:735): avc:  denied  { accept } for  pid=10301 comm="syz.3.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  147.955822][T10310] ip6tnl2: entered allmulticast mode
[  148.006997][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1531'.
[  148.758884][T10351] netlink: 'syz.2.1542': attribute type 10 has an invalid length.
[  148.809897][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1543'.
[  148.850817][T10354] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1543'.
[  148.902957][  T808] IPVS: starting estimator thread 0...
[  148.919787][   T43] audit: type=1400 audit(1791525650.404:736): avc:  denied  { write } for  pid=10356 comm="syz.4.1544" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  148.920126][   T43] audit: type=1400 audit(1791525650.404:737): avc:  denied  { ioctl } for  pid=10356 comm="syz.4.1544" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  148.930086][T10357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1544'.
[  148.930104][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1544'.
[  148.930590][T10357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1544'.
[  148.930613][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1544'.
[  148.930935][T10357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1544'.
[  148.930946][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1544'.
[  148.931191][T10357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1544'.
[  148.931201][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1544'.
[  148.996870][T10360] IPVS: using max 43 ests per chain, 103200 per kthread
[  149.159696][T10379] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  150.185505][T10451] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 3200000000
[  150.365600][ T5830] libceph: connect (1)[c::]:6789 error -101
[  150.370808][ T5830] libceph: mon0 (1)[c::]:6789 connect error
[  150.371474][ T5830] libceph: connect (1)[c::]:6789 error -101
[  150.371711][ T5830] libceph: mon0 (1)[c::]:6789 connect error
[  150.404293][T10456] ceph: No mds server is up or the cluster is laggy
[  150.589173][T10471] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 320000000000
[  150.657865][T10473] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 3200000000000000
[  150.761693][T10475] syzkaller0: entered promiscuous mode
[  150.761708][T10475] syzkaller0: entered allmulticast mode
[  150.953287][T10480] teql0: left promiscuous mode
[  150.953306][T10480] teql0: left allmulticast mode
[  151.312368][   T43] audit: type=1400 audit(1791525652.795:738): avc:  denied  { append } for  pid=10508 comm="syz.4.1597" name="loop9" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  151.320553][T10509] loop9: detected capacity change from 0 to 16384
[  151.356674][T10509] loop9: detected capacity change from 16384 to 16383
[  151.410317][T10506] FAULT_INJECTION: forcing a failure.
[  151.410317][T10506] name failslab, interval 1, probability 0, space 0, times 0
[  151.410342][T10506] CPU: 3 UID: 0 PID: 10506 Comm: syz.0.1594 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  151.410359][T10506] Tainted: [L]=SOFTLOCKUP
[  151.410365][T10506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  151.410372][T10506] Call Trace:
[  151.410377][T10506]  <TASK>
[  151.410382][T10506]  dump_stack_lvl+0x100/0x190
[  151.410403][T10506]  should_fail_ex.cold+0x5/0xa
[  151.410426][T10506]  should_failslab+0xc2/0x120
[  151.410445][T10506]  __kmalloc_cache_noprof+0x91/0x6d0
[  151.410460][T10506]  ? allocate_cgrp_cset_links+0xca/0x230
[  151.410478][T10506]  allocate_cgrp_cset_links+0xca/0x230
[  151.410495][T10506]  find_css_set+0x949/0x1ec0
[  151.410520][T10506]  ? __pfx_find_css_set+0x10/0x10
[  151.410539][T10506]  ? __lock_acquire+0xe8b/0x1f40
[  151.410561][T10506]  cgroup_migrate_prepare_dst+0x10b/0x7f0
[  151.410576][T10506]  cgroup_attach_task+0x3e4/0x770
[  151.410589][T10506]  ? __pfx_cgroup_attach_task+0x10/0x10
[  151.410602][T10506]  ? lock_acquire+0x1d1/0x380
[  151.410621][T10506]  ? get_task_cred+0x189/0x360
[  151.410634][T10506]  __cgroup1_procs_write.isra.0+0x2c4/0x420
[  151.410652][T10506]  ? __pfx___cgroup1_procs_write.isra.0+0x10/0x10
[  151.410670][T10506]  ? kernfs_root+0xf8/0x2a0
[  151.410684][T10506]  cgroup_file_write+0x1e6/0x8a0
[  151.410699][T10506]  ? __pfx_cgroup1_procs_write+0x10/0x10
[  151.410716][T10506]  ? __pfx_cgroup_file_write+0x10/0x10
[  151.410731][T10506]  ? __kmalloc_noprof+0x350/0x840
[  151.410749][T10506]  kernfs_fop_write_iter+0x3e0/0x5f0
[  151.410763][T10506]  ? __pfx_cgroup_file_write+0x10/0x10
[  151.410780][T10506]  vfs_write+0x6af/0x1050
[  151.410794][T10506]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  151.410812][T10506]  ? __pfx_vfs_write+0x10/0x10
[  151.410825][T10506]  ? find_held_lock+0x2b/0x80
[  151.410851][T10506]  ksys_write+0x12a/0x250
[  151.410865][T10506]  ? __pfx_ksys_write+0x10/0x10
[  151.410883][T10506]  do_syscall_64+0x123/0x790
[  151.410900][T10506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.410912][T10506] RIP: 0033:0x7f738e19e1d9
[  151.410923][T10506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.410933][T10506] RSP: 002b:00007f738f0d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  151.410945][T10506] RAX: ffffffffffffffda RBX: 00007f738e426090 RCX: 00007f738e19e1d9
[  151.410952][T10506] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000006
[  151.410959][T10506] RBP: 00007f738e235888 R08: 0000000000000000 R09: 0000000000000000
[  151.410966][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.410973][T10506] R13: 00007f738e426128 R14: 00007f738e426090 R15: 00007ffd3b4dbf38
[  151.410989][T10506]  </TASK>
[  151.496529][   T30] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  151.640881][T10525] netlink: 'syz.0.1599': attribute type 34 has an invalid length.
[  151.646734][   T30] usb 7-1: Using ep0 maxpacket: 8
[  151.648591][   T30] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  151.649023][   T30] usb 7-1: config 0 has no interfaces?
[  151.649404][   T30] usb 7-1: config 0 has no interfaces?
[  151.649827][   T30] usb 7-1: config 0 has no interfaces?
[  151.651493][   T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.651510][   T30] usb 7-1: Product: syz
[  151.651522][   T30] usb 7-1: Manufacturer: syz
[  151.651535][   T30] usb 7-1: SerialNumber: syz
[  151.669340][   T30] usb 7-1: config 0 descriptor??
[  151.700651][T10525] bond5: option lacp_strict: invalid value (4)
[  151.726677][T10525] bond5 (unregistering): Released all slaves
[  151.891980][T10502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.901057][T10502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.919026][T10529] kvm: user requested TSC rate below hardware speed
[  151.949278][    T9] usb 7-1: USB disconnect, device number 7
[  152.105717][   T43] audit: type=1400 audit(1791525653.585:739): avc:  denied  { getopt } for  pid=10537 comm="syz.3.1606" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  152.126390][    C2] net_ratelimit: 79501 callbacks suppressed
[  152.126397][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.126413][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  152.126521][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  152.126576][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  152.126610][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.126695][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.126735][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  152.126781][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  152.126869][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.126883][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  152.268885][T10548] netlink: 'syz.3.1610': attribute type 12 has an invalid length.
[  153.077358][   T43] audit: type=1400 audit(1791525654.565:740): avc:  denied  { write } for  pid=10584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  153.126881][   T43] audit: type=1400 audit(1791525654.605:741): avc:  denied  { write } for  pid=10592 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  153.484741][   T43] audit: type=1400 audit(1791525654.965:742): avc:  denied  { write } for  pid=10610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  153.584668][T10620] tmpfs: Bad value for 'mpol'
[  153.596879][   T43] audit: type=1400 audit(1791525655.085:743): avc:  denied  { write } for  pid=10617 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  153.715968][   T43] audit: type=1400 audit(1791525655.195:744): avc:  denied  { write } for  pid=10625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  153.783800][   T43] audit: type=1400 audit(1791525655.265:745): avc:  denied  { write } for  pid=10637 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  153.855261][   T43] audit: type=1400 audit(1791525655.335:746): avc:  denied  { write } for  pid=10642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  153.921488][   T43] audit: type=1400 audit(1791525655.405:747): avc:  denied  { write } for  pid=10648 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  154.211975][T10674] netlink: 'syz.4.1641': attribute type 12 has an invalid length.
[  154.216544][T10668] ftl_cs: FTL header not found.
[  154.304574][T10668] block2mtd: mtd2: [/dev/ram0] erase_size = 64KiB [65536]
[  155.269398][T10709] __nla_validate_parse: 22 callbacks suppressed
[  155.269410][T10709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1654'.
[  155.453659][   T43] audit: type=1400 audit(1791525656.935:748): avc:  denied  { mount } for  pid=10716 comm="syz.0.1658" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  155.591598][T10720] netlink: 'syz.4.1659': attribute type 1 has an invalid length.
[  155.707286][T10720] 8021q: adding VLAN 0 to HW filter on device bond1
[  155.769213][T10723] bond1: (slave geneve2): making interface the new active one
[  155.780241][T10723] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  155.807113][T10717] bond5: invalid NS target :: specified for addition
[  155.807124][T10717] bond5: option ns_ip6_target: invalid value (18446744073709551615)
[  155.831800][T10727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1661'.
[  155.884622][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1660'.
[  155.905743][T10717] bond5 (unregistering): Released all slaves
[  156.174223][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'.
[  156.487596][T10756] syzkaller0: entered promiscuous mode
[  156.487607][T10756] syzkaller0: entered allmulticast mode
[  157.135777][    C0] net_ratelimit: 90307 callbacks suppressed
[  157.135789][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.135809][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  157.135888][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.135977][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  157.135983][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  157.136081][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.136133][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  157.136174][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.136266][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  157.145041][T10789] netlink: 'syz.3.1684': attribute type 46 has an invalid length.
[  157.145057][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1684'.
[  157.170024][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1684'.
[  157.550452][   T43] audit: type=1400 audit(1791525659.035:749): avc:  denied  { bind } for  pid=10809 comm="syz.4.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  157.551893][   T43] audit: type=1400 audit(1791525659.035:750): avc:  denied  { setopt } for  pid=10809 comm="syz.4.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  157.720786][T10819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1697'.
[  157.753668][T10815] gadgetfs: bound to dummy_udc driver
[  157.809154][   T43] audit: type=1400 audit(1791525659.295:751): avc:  denied  { unmount } for  pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  158.237909][T10837] netlink: 'syz.3.1703': attribute type 1 has an invalid length.
[  158.292041][T10837] 8021q: adding VLAN 0 to HW filter on device bond9
[  158.321070][T10846] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 3200000000000000
[  158.361166][T10848] SET target dimension over the limit!
[  158.415407][T10852] netlink: 'syz.2.1708': attribute type 10 has an invalid length.
[  158.507081][   T43] audit: type=1400 audit(1791525659.995:752): avc:  denied  { mount } for  pid=10850 comm="syz.3.1707" name="/" dev="ramfs" ino=28455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  158.708772][   T43] audit: type=1400 audit(1791525660.195:753): avc:  denied  { execmod } for  pid=10868 comm="syz.0.1714" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  158.727680][T10870] netlink: 'syz.3.1715': attribute type 20 has an invalid length.
[  159.955039][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  160.226334][    T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  160.247716][T10899] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1728'.
[  160.300645][    T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  160.300660][    T9] usb 7-1: config 1 has an invalid descriptor of length 160, skipping remainder of the config
[  160.300670][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  160.300722][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 139, changing to 11
[  160.300735][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33973, setting to 1024
[  160.368806][    T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  160.368816][    T9] usb 7-1: Product: syz
[  160.368824][    T9] usb 7-1: Manufacturer: syz
[  160.387096][T10883] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  160.404460][    T9] cdc_wdm 7-1:1.0: skipping garbage
[  160.404467][    T9] cdc_wdm 7-1:1.0: skipping garbage
[  160.454988][    T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  160.455002][    T9] cdc_wdm 7-1:1.0: Unknown control protocol
[  160.753403][T10924] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1736'.
[  160.776573][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  160.776630][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  160.782093][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  160.782103][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  160.796517][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  160.796526][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  160.807977][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  160.807986][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  160.812886][T10927] 9p: Bad value for 'version'
[  160.813188][T10927] 9p: Bad value for 'version'
[  160.813487][T10927] 9p: Bad value for 'version'
[  160.814841][T10927] 9p: Bad value for 'version'
[  160.818484][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  160.818493][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  160.824930][T10927] 9p: Bad value for 'version'
[  160.828661][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  160.828672][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  160.838830][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  160.838839][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  160.848484][T10927] 9p: Bad value for 'version'
[  160.848835][T10927] 9p: Bad value for 'version'
[  160.849127][T10927] 9p: Bad value for 'version'
[  160.849419][T10927] 9p: Bad value for 'version'
[  160.849747][T10927] 9p: Bad value for 'version'
[  160.850039][T10927] 9p: Bad value for 'version'
[  160.850382][T10927] 9p: Bad value for 'version'
[  160.850711][T10927] 9p: Bad value for 'version'
[  160.851005][T10927] 9p: Bad value for 'version'
[  160.851368][T10927] 9p: Bad value for 'version'
[  160.851675][T10927] 9p: Bad value for 'version'
[  160.851758][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  160.851768][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  160.851952][T10927] 9p: Bad value for 'version'
[  160.852252][T10927] 9p: Bad value for 'version'
[  160.852554][T10927] 9p: Bad value for 'version'
[  160.852867][T10927] 9p: Bad value for 'version'
[  160.853167][T10927] 9p: Bad value for 'version'
[  160.853471][T10927] 9p: Bad value for 'version'
[  160.854341][T10927] 9p: Bad value for 'version'
[  160.854635][T10927] 9p: Bad value for 'version'
[  160.854932][T10927] 9p: Bad value for 'version'
[  160.858238][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  160.858247][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  160.864976][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  160.864985][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  160.888288][ T2316] usb 7-1: USB disconnect, device number 8
[  160.921100][T10927] 9p: Bad value for 'version'
[  161.172356][T10943] netlink: 'syz.4.1742': attribute type 10 has an invalid length.
[  161.540759][T10956] netlink: 'syz.3.1746': attribute type 20 has an invalid length.
[  161.573713][T10957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1745'.
[  162.145222][    C0] net_ratelimit: 102151 callbacks suppressed
[  162.145236][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.145414][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  162.145456][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  162.145588][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.145696][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  162.145762][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.145906][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  162.145929][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  162.146102][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.146131][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  162.237884][   T43] audit: type=1400 audit(1791525663.726:754): avc:  denied  { map } for  pid=10987 comm="syz.3.1760" path="socket:[36362]" dev="sockfs" ino=36362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  162.238125][   T43] audit: type=1400 audit(1791525663.726:755): avc:  denied  { read } for  pid=10987 comm="syz.3.1760" path="socket:[36362]" dev="sockfs" ino=36362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  162.300591][T10995] netlink: 'syz.2.1761': attribute type 12 has an invalid length.
[  162.492266][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1763'.
[  162.551938][T11006] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:21
[  162.880085][T11019] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  162.880118][T11019] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  162.881604][   T43] audit: type=1400 audit(1791525664.366:756): avc:  denied  { firmware_load } for  pid=11014 comm="syz.0.1768" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  162.881757][T11019] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  163.224126][ T5830] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  163.478279][ T5830] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  163.736029][T11041] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32000000000000
[  163.842610][   T43] audit: type=1400 audit(1791525665.326:757): avc:  denied  { write } for  pid=11044 comm="syz.0.1779" name="/" dev="9p" ino=71827803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  163.877069][   T43] audit: type=1400 audit(1791525665.366:758): avc:  denied  { write } for  pid=11044 comm="syz.0.1779" name="/" dev="9p" ino=71827803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  163.924660][T11027] ceph: No mds server is up or the cluster is laggy
[  163.989069][ T5830] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  164.218095][   T43] audit: type=1400 audit(1791525665.706:759): avc:  denied  { read } for  pid=11048 comm="syz.3.1782" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  164.553054][   T43] audit: type=1400 audit(1791525666.036:760): avc:  denied  { execute } for  pid=11059 comm="syz.0.1785" path="/proc/tty/drivers" dev="proc" ino=4026531852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1
[  164.573231][   T43] audit: type=1400 audit(1791525666.056:761): avc:  denied  { read } for  pid=11059 comm="syz.0.1785" dev="nsfs" ino=4026532864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  164.573582][   T43] audit: type=1400 audit(1791525666.056:762): avc:  denied  { open } for  pid=11059 comm="syz.0.1785" path="pid:[4026532864]" dev="nsfs" ino=4026532864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  164.573976][   T43] audit: type=1400 audit(1791525666.056:763): avc:  denied  { ioctl } for  pid=11059 comm="syz.0.1785" path="pid:[4026532864]" dev="nsfs" ino=4026532864 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  164.679990][T11064] netlink: 'syz.0.1786': attribute type 20 has an invalid length.
[  165.739159][T11102] ./mnt: Can't lookup blockdev
[  165.968962][T11109] ./mnt: Can't lookup blockdev
[  166.060860][   T43] audit: type=1400 audit(1791525667.546:764): avc:  denied  { read write } for  pid=11119 comm="syz.0.1809" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  166.060886][   T43] audit: type=1400 audit(1791525667.546:765): avc:  denied  { open } for  pid=11119 comm="syz.0.1809" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  166.253301][T11128] netlink: 'syz.0.1811': attribute type 1 has an invalid length.
[  166.366320][T11128] 8021q: adding VLAN 0 to HW filter on device bond5
[  166.418706][ T5803] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  166.418745][ T5803] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  166.418777][ T5803] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  166.418807][ T5803] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  166.607981][T11145] overlayfs: failed to resolve './file1/file0': -2
[  166.755173][ T2316] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  166.910680][ T2316] usb 9-1: Using ep0 maxpacket: 16
[  166.911516][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1818'.
[  166.912466][ T2316] usb 9-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  166.913502][ T2316] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 135, changing to 7
[  166.932148][ T2316] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.932165][ T2316] usb 9-1: Product: �怦ዤ�⵹յ�铓턛컱貨ꪺ렢꽦退⨌֮裎岚꽂氡惸檱覫驴湷햎Ŋ㠭�ପ㘓嶤ξ獵㩻꺧셾⒲삽䛚嘵籑쉳奺⑨ᅜ뢃
[  166.932187][ T2316] usb 9-1: Manufacturer: 
[  166.932201][ T2316] usb 9-1: SerialNumber: syz
[  167.005589][ T5733] bond0: (slave syz_tun): Releasing backup interface
[  167.154579][    C0] net_ratelimit: 83474 callbacks suppressed
[  167.154600][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  167.154770][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.154939][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  167.155105][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.155260][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  167.155373][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.155459][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  167.155513][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  167.155545][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.155638][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  167.179742][ T2316] usb 9-1: Audio class v2/v3 interfaces need an interface association
[  167.284092][ T2316] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[  167.291600][ T2316] usb 9-1: USB disconnect, device number 2
[  167.374986][ T9698] udevd[9698]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  167.408203][ T5874] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.584791][   T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  167.588719][   T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  167.589424][   T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  167.590637][   T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  167.591365][   T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  167.662439][ T5874] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.663888][T11163] sctp: [Deprecated]: syz.3.1824 (pid 11163) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.663888][T11163] Use struct sctp_sack_info instead
[  167.895209][ T5874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.950204][T11174] syzkaller0: entered promiscuous mode
[  167.950213][T11174] syzkaller0: entered allmulticast mode
[  168.181748][ T5874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.415296][T11189] CUSE: unknown device info ""
[  168.415307][T11189] CUSE: unknown device info ""
[  168.415314][T11189] CUSE: unknown device info "ÿ"
[  168.415322][T11189] CUSE: unknown device info ""
[  168.415329][T11189] CUSE: unknown device info "ý"
[  168.415336][T11189] CUSE: unknown device info ""
[  168.415344][T11189] CUSE: unknown device info ""
[  168.415351][T11189] CUSE: DEVNAME unspecified
[  168.679500][T11196] netlink: 'syz.4.1835': attribute type 2 has an invalid length.
[  168.973942][T11214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1841'.
[  169.133231][T11218] netlink: 'syz.3.1843': attribute type 1 has an invalid length.
[  169.192442][ T5874] bond1 (unregistering): (slave geneve2): Releasing active interface
[  169.279691][ T5874] bond0 (unregistering): Released all slaves
[  169.290812][ T5874] bond1 (unregistering): Released all slaves
[  169.318555][ T5874] bond2 (unregistering): Released all slaves
[  169.413483][T11218] 8021q: adding VLAN 0 to HW filter on device bond10
[  169.499232][   T43] kauditd_printk_skb: 3 callbacks suppressed
[  169.499249][   T43] audit: type=1400 audit(1791525670.987:769): avc:  denied  { write } for  pid=11222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  169.560668][ T5729] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  169.624859][ T5086] Bluetooth: hci4: command tx timeout
[  169.645655][ T5874] tipc: Disabling bearer <eth:team0>
[  169.698148][ T5874] tipc: Left network mode
[  169.727657][   T43] audit: type=1400 audit(1791525671.217:770): avc:  denied  { write } for  pid=11226 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  169.921435][ T5438] 8021q: adding VLAN 0 to HW filter on device eth6
[  170.179294][T11155] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.179893][T11155] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.180044][T11155] bridge_slave_0: entered allmulticast mode
[  170.181676][T11155] bridge_slave_0: entered promiscuous mode
[  170.194748][T11155] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.194821][T11155] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.194948][T11155] bridge_slave_1: entered allmulticast mode
[  170.212003][T11155] bridge_slave_1: entered promiscuous mode
[  170.414545][T11155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.417587][T11155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.497815][T11155] team0: Port device team_slave_0 added
[  170.557316][   T43] audit: type=1400 audit(1791525672.047:771): avc:  denied  { write } for  pid=11258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  170.573625][T11155] team0: Port device team_slave_1 added
[  170.665026][T11262] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 320000
[  170.686485][T11155] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.686492][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  170.686505][T11155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.702926][T11155] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.702937][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  170.702957][T11155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.859363][   T43] audit: type=1400 audit(1791525672.347:772): avc:  denied  { write } for  pid=11264 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  170.943306][T11272] Bluetooth: MGMT ver 1.23
[  170.950670][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1854'.
[  170.950693][T11272] block nbd0: Unsupported socket: should be TCP or UNIX.
[  171.061154][ T5438] 8021q: adding VLAN 0 to HW filter on device eth7
[  171.077376][T11155] hsr_slave_0: entered promiscuous mode
[  171.079119][T11155] hsr_slave_1: entered promiscuous mode
[  171.079520][T11155] debugfs: 'hsr0' already exists in 'hsr'
[  171.079530][T11155] Cannot create hsr debugfs directory
[  171.118518][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'.
[  171.173746][T11279] FAULT_INJECTION: forcing a failure.
[  171.173746][T11279] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  171.173868][T11279] CPU: 3 UID: 0 PID: 11279 Comm: syz.4.1857 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  171.173885][T11279] Tainted: [L]=SOFTLOCKUP
[  171.173889][T11279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  171.173896][T11279] Call Trace:
[  171.173900][T11279]  <TASK>
[  171.173905][T11279]  dump_stack_lvl+0x100/0x190
[  171.173924][T11279]  should_fail_ex.cold+0x5/0xa
[  171.173939][T11279]  ? prepare_alloc_pages+0x16d/0x5b0
[  171.173965][T11279]  should_fail_alloc_page+0xeb/0x140
[  171.173984][T11279]  prepare_alloc_pages+0x1f0/0x5b0
[  171.174018][T11279]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  171.174034][T11279]  ? __lock_acquire+0x5c0/0x1f40
[  171.174049][T11279]  ? do_raw_spin_unlock+0x145/0x1e0
[  171.174065][T11279]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  171.174081][T11279]  ? rcu_is_watching+0x13/0xc0
[  171.174098][T11279]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  171.174112][T11279]  ? hrtimer_start_range_ns_common+0x778/0x16f0
[  171.174134][T11279]  ? find_held_lock+0x2b/0x80
[  171.174150][T11279]  ? finish_task_switch.isra.0+0x2bd/0x10d0
[  171.174163][T11279]  ? finish_task_switch.isra.0+0x2bd/0x10d0
[  171.174178][T11279]  ? rcu_is_watching+0x13/0xc0
[  171.174195][T11279]  ? finish_task_switch.isra.0+0x2c2/0x10d0
[  171.174209][T11279]  ? rcu_is_watching+0x13/0xc0
[  171.174225][T11279]  ? trace_sched_exit_tp+0x120/0x160
[  171.174240][T11279]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  171.174259][T11279]  ? policy_nodemask+0xed/0x4f0
[  171.174278][T11279]  alloc_pages_mpol+0x201/0x550
[  171.174295][T11279]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  171.174315][T11279]  ? lock_acquire+0x1d1/0x380
[  171.174329][T11279]  folio_alloc_mpol_noprof+0x36/0x260
[  171.174343][T11279]  vma_alloc_folio_noprof+0xed/0x1d0
[  171.174356][T11279]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  171.174368][T11279]  ? rcu_read_unlock+0x2d/0xb0
[  171.174379][T11279]  ? rcu_read_unlock+0x2d/0xb0
[  171.174395][T11279]  do_wp_page+0x1b15/0x45c0
[  171.174414][T11279]  ? lock_acquire+0x1d1/0x380
[  171.174427][T11279]  ? __pfx_do_wp_page+0x10/0x10
[  171.174444][T11279]  ? do_raw_spin_lock+0x128/0x260
[  171.174459][T11279]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  171.174478][T11279]  __handle_mm_fault+0x1cd2/0x2f60
[  171.174491][T11279]  ? lock_vma_under_rcu+0x11d/0x590
[  171.174508][T11279]  ? __pfx___handle_mm_fault+0x10/0x10
[  171.174521][T11279]  ? lock_vma_under_rcu+0x17c/0x590
[  171.174547][T11279]  handle_mm_fault+0x363/0xa20
[  171.174561][T11279]  do_user_addr_fault+0x59c/0x12f0
[  171.174580][T11279]  exc_page_fault+0x6f/0xd0
[  171.174595][T11279]  asm_exc_page_fault+0x26/0x30
[  171.174606][T11279] RIP: 0033:0x7ff357b5dfc5
[  171.174617][T11279] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 <f0> 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00
[  171.174627][T11279] RSP: 002b:00007ff358b33de0 EFLAGS: 00010293
[  171.174637][T11279] RAX: 0000000000000008 RBX: 00007ff358957e20 RCX: 0000000000000000
[  171.174644][T11279] RDX: 0000000000000000 RSI: 00007ff357c32fb8 RDI: 00007ff358957e20
[  171.174651][T11279] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005
[  171.174658][T11279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff357c52ddf
[  171.174665][T11279] R13: ffffffffffffffe8 R14: 0000000000000058 R15: 00007ff357c32fb8
[  171.174682][T11279]  </TASK>
[  171.176745][T11279] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  171.587405][   T43] audit: type=1400 audit(1791525673.077:773): avc:  denied  { write } for  pid=11297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.587594][T11298] FAULT_INJECTION: forcing a failure.
[  171.587594][T11298] name failslab, interval 1, probability 0, space 0, times 0
[  171.587612][T11298] CPU: 3 UID: 0 PID: 11298 Comm: syz.4.1863 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  171.587627][T11298] Tainted: [L]=SOFTLOCKUP
[  171.587631][T11298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  171.587638][T11298] Call Trace:
[  171.587642][T11298]  <TASK>
[  171.587647][T11298]  dump_stack_lvl+0x100/0x190
[  171.587668][T11298]  should_fail_ex.cold+0x5/0xa
[  171.587683][T11298]  should_failslab+0xc2/0x120
[  171.587714][T11298]  __kmalloc_cache_noprof+0x91/0x6d0
[  171.587727][T11298]  ? kasan_save_track+0x14/0x30
[  171.587743][T11298]  ? cgroup_init_fs_context+0x4f/0x9c0
[  171.587762][T11298]  cgroup_init_fs_context+0x4f/0x9c0
[  171.587779][T11298]  alloc_fs_context+0x60c/0xf40
[  171.587794][T11298]  __x64_sys_fsopen+0xed/0x220
[  171.587808][T11298]  do_syscall_64+0x123/0x790
[  171.587824][T11298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.587836][T11298] RIP: 0033:0x7ff357b9e1d9
[  171.587846][T11298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.587857][T11298] RSP: 002b:00007ff358b14028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  171.587868][T11298] RAX: ffffffffffffffda RBX: 00007ff357e26090 RCX: 00007ff357b9e1d9
[  171.587875][T11298] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000
[  171.587882][T11298] RBP: 00007ff357c35888 R08: 0000000000000000 R09: 0000000000000000
[  171.587888][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.587895][T11298] R13: 00007ff357e26128 R14: 00007ff357e26090 R15: 00007ffdd1ceb858
[  171.587909][T11298]  </TASK>
[  171.704621][ T5086] Bluetooth: hci4: command tx timeout
[  171.768575][   T43] audit: type=1400 audit(1791525673.257:774): avc:  denied  { write } for  pid=11306 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.947099][ T5438] 8021q: adding VLAN 0 to HW filter on device eth8
[  172.163957][    C2] net_ratelimit: 87636 callbacks suppressed
[  172.163960][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.163974][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  172.164060][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  172.164168][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.164170][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  172.164276][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  172.164366][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  172.164372][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.164469][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  172.164547][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  172.318955][   T43] audit: type=1400 audit(1791525673.807:775): avc:  denied  { write } for  pid=11316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  172.319111][T11295] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  172.319128][T11295] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  172.352246][T11155] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  172.368347][T11295] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  172.368366][T11295] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  172.401377][T11155] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  172.402080][T11155] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  172.478252][T11155] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  172.502140][   T43] audit: type=1400 audit(1791525673.987:776): avc:  denied  { write } for  pid=11319 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  172.549534][T11155] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  172.573470][T11155] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  172.621150][T11155] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  172.672281][T11155] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  172.890715][ T5438] 8021q: adding VLAN 0 to HW filter on device eth9
[  173.052467][T11340] netlink: 'syz.0.1873': attribute type 10 has an invalid length.
[  173.298635][T11295] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  173.298649][T11295] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  173.302339][T11353] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  173.302367][T11353] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  173.302384][T11353] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  173.340891][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1877'.
[  173.417337][T11155] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.421730][   T43] audit: type=1400 audit(1791525674.907:777): avc:  denied  { write } for  pid=11354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  173.451208][T11155] 8021q: adding VLAN 0 to HW filter on device team0
[  173.468968][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.469047][ T6656] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.486965][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.487040][ T9060] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.549510][   T43] audit: type=1400 audit(1791525675.037:778): avc:  denied  { write } for  pid=11360 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  173.783833][ T5086] Bluetooth: hci4: command tx timeout
[  174.057232][T11295] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  174.057247][T11295] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  174.421222][T11390] No source specified
[  174.453301][T11391] No source specified
[  174.576196][T11403] overlay: ./file0 is not a directory
[  174.622578][ T5874] hsr_slave_0: left promiscuous mode
[  174.649079][ T5874] hsr_slave_1: left promiscuous mode
[  174.657598][   T43] kauditd_printk_skb: 3 callbacks suppressed
[  174.657606][   T43] audit: type=1400 audit(1791525676.147:782): avc:  denied  { write } for  pid=11405 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  174.676878][ T5874] veth1_macvtap: left promiscuous mode
[  174.676909][ T5874] veth0_macvtap: left promiscuous mode
[  174.682457][ T5874] veth1_vlan: left promiscuous mode
[  174.792328][   T43] audit: type=1400 audit(1791525676.277:783): avc:  denied  { write } for  pid=11415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  174.873334][   T43] audit: type=1400 audit(1791525676.357:784): avc:  denied  { write } for  pid=11423 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.100320][ T5874] team0 (unregistering): Port device vlan0 removed
[  175.568749][   T43] audit: type=1400 audit(1791525677.057:785): avc:  denied  { write } for  pid=11429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.598692][T11155] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.654684][   T43] audit: type=1400 audit(1791525677.138:786): avc:  denied  { write } for  pid=11437 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.766371][   T43] audit: type=1400 audit(1791525677.258:787): avc:  denied  { create } for  pid=11442 comm="syz.4.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  175.791681][T11447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1893'.
[  175.873986][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1892'.
[  175.950507][   T43] audit: type=1400 audit(1791525677.438:788): avc:  denied  { write } for  pid=11448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.962613][T11450] 8021q: adding VLAN 0 to HW filter on device bond2
[  175.982500][T11459] SET target dimension over the limit!
[  176.111878][   T43] audit: type=1400 audit(1791525677.598:789): avc:  denied  { write } for  pid=11463 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.263631][T11155] veth0_vlan: entered promiscuous mode
[  176.279487][T11155] veth1_vlan: entered promiscuous mode
[  176.334552][T11155] veth0_macvtap: entered promiscuous mode
[  176.350277][T11155] veth1_macvtap: entered promiscuous mode
[  176.357302][T11477] netlink: 'syz.3.1902': attribute type 10 has an invalid length.
[  176.389368][ T5874] IPVS: stop unused estimator thread 0...
[  176.426558][T11155] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.449285][T11155] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.513936][ T5803] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.514060][ T5803] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.514108][ T5803] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.514140][ T5803] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.616306][T11484] xt_hashlimit: size too large, truncated to 1048576
[  176.740002][T11487] netlink: 'syz.4.1905': attribute type 39 has an invalid length.
[  176.797320][   T43] audit: type=1400 audit(1791525678.288:790): avc:  denied  { mount } for  pid=11489 comm="syz.3.1906" name="/" dev="pstore" ino=2253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  176.940045][   T43] audit: type=1400 audit(1791525678.428:791): avc:  denied  { read } for  pid=5726 comm="syz-executor" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  177.011328][ T9052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.011338][ T9052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.079541][ T9052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.079552][ T9052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.173371][    C0] net_ratelimit: 90249 callbacks suppressed
[  177.173382][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  177.173391][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  177.173490][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.173566][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  177.173596][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  177.173726][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.173725][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  177.173877][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  177.173878][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  177.174032][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.107881][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1918'.
[  178.143366][T11356] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  178.303910][T11356] usb 9-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[  178.304750][T11356] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  178.304764][T11356] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  178.305972][T11356] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  178.305981][T11356] usb 9-1: Product: syz
[  178.305989][T11356] usb 9-1: Manufacturer: syz
[  178.310174][T11356] iuu_phoenix 9-1:1.0: iuu_phoenix converter detected
[  178.332481][T11356] usb 9-1: iuu_phoenix converter now attached to ttyUSB0
[  178.446948][T11542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1926'.
[  178.512918][T11513] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode:  is not a unsigned long
[  178.518933][T11546] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode:  is not a unsigned long
[  178.520635][T11513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.522399][T11513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.541091][ T2316] usb 9-1: USB disconnect, device number 3
[  178.608909][ T2316] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  178.612538][ T2316] iuu_phoenix 9-1:1.0: device disconnected
[  178.718927][T11549] Need at least one configuration in g1.
[  178.719192][T11549] udc dummy_udc.0: failed to start g1: -22
[  178.719209][T11549] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  178.728957][T11549] UDC core: g1: couldn't find an available UDC or it's busy
[  178.867654][T11555] SET target dimension over the limit!
[  179.015548][T11560] syz.0.1932 (11560) used greatest stack depth: 3192 bytes left
[  179.149581][T11567] netlink: 'syz.0.1936': attribute type 10 has an invalid length.
[  179.158395][T11567] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  179.417189][T11589] input: syz0 as /devices/virtual/input/input9
[  179.716639][T11603] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1942'.
[  179.793062][   T58] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  179.953082][   T58] usb 5-1: Using ep0 maxpacket: 32
[  179.956645][   T58] usb 5-1: unable to get BOS descriptor or descriptor too short
[  179.956686][   T58] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  179.957833][   T58] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  179.957853][   T58] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  179.957870][   T58] usb 5-1: config 14 has no interface number 0
[  179.957885][   T58] usb 5-1: config 14 has no interface number 1
[  179.957942][   T58] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  179.957962][   T58] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  179.957983][   T58] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  179.958005][   T58] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  179.958028][   T58] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  179.958053][   T58] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  179.958079][   T58] usb 5-1: config 14 interface 57 has no altsetting 0
[  179.958094][   T58] usb 5-1: config 14 interface 228 has no altsetting 0
[  179.960785][   T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.960801][   T58] usb 5-1: Product: syz
[  179.960813][   T58] usb 5-1: Manufacturer: syz
[  179.960826][   T58] usb 5-1: SerialNumber: syz
[  180.299178][T11610] syzkaller0: entered promiscuous mode
[  180.299200][T11610] syzkaller0: entered allmulticast mode
[  180.447147][   T58] legousbtower 5-1:14.57: interrupt endpoints not found
[  180.449252][T11619] fuse: fd is not a fuse device
[  180.592373][T11627] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=114 sclass=netlink_tcpdiag_socket pid=11627 comm=syz.3.1957
[  180.862455][   T58] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178
[  180.883113][   T58] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  180.965650][T11643] loop5: detected capacity change from 0 to 7
[  180.968302][T11643] Dev loop5: unable to read RDB block 7
[  180.968322][T11643]  loop5: unable to read partition table
[  180.968409][T11643] loop5: partition table beyond EOD, truncated
[  180.971446][T11643] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  181.436405][   T43] kauditd_printk_skb: 9 callbacks suppressed
[  181.436419][   T43] audit: type=1400 audit(1791525682.928:801): avc:  denied  { write } for  pid=11598 comm="syz.0.1947" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  181.440186][T11659] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1967'.
[  181.603898][   T58] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  181.664532][T11356] usb 5-1: USB disconnect, device number 8
[  181.756352][T11356] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected
[  181.815225][T11669] netlink: 412 bytes leftover after parsing attributes in process `syz.4.1970'.
[  181.830470][   T58] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  181.854571][   T58] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.854587][   T58] usb 10-1: Product: syz
[  181.854601][   T58] usb 10-1: Manufacturer: syz
[  181.854613][   T58] usb 10-1: SerialNumber: syz
[  181.936900][T11669] netlink: 412 bytes leftover after parsing attributes in process `syz.4.1970'.
[  182.103903][T11672] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1971'.
[  182.157670][T11675] netlink: 'syz.4.1973': attribute type 1 has an invalid length.
[  182.182778][    C2] net_ratelimit: 85608 callbacks suppressed
[  182.182790][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  182.182792][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.182877][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  182.182883][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  182.182962][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  182.182968][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.183047][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  182.183054][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  182.183133][    C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:cc:31:60:5e:69, vlan:0)
[  182.183138][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.205289][T11675] 8021q: adding VLAN 0 to HW filter on device bond3
[  182.353233][T11650] tipc: Started in network mode
[  182.353337][T11650] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  182.361293][T11650] tipc: Enabled bearer <udp:syz0>, priority 10
[  182.363453][   T58] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  182.365078][   T58] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  182.365831][   T58] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  182.371887][T11685] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32000000
[  182.409624][   T58] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[  182.418944][   T58] usb 10-1: USB disconnect, device number 2
[  182.630866][   T43] audit: type=1400 audit(1791525684.118:802): avc:  denied  { ioctl } for  pid=11695 comm="syz.0.1979" path="socket:[40652]" dev="sockfs" ino=40652 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  182.892716][ T2316] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  182.954278][T11712] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  183.024237][ T2316] usb 5-1: device descriptor read/64, error -71
[  183.051018][T11720] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  183.056904][T11720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1097 sclass=netlink_route_socket pid=11720 comm=syz.4.1989
[  183.165124][T11723] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1990'.
[  183.234002][T11725] overlayfs: failed to resolve './file1/file0': -2
[  183.263658][ T2316] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  183.355204][T11356] tipc: Node number set to 1
[  183.394885][ T2316] usb 5-1: device descriptor read/64, error -71
[  183.415297][T11735] SET target dimension over the limit!
[  183.427480][T11733] ip6tnl1: entered allmulticast mode
[  183.440384][ T9095] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  183.440497][ T9095] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  183.462824][T11356] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  183.471086][T11739] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1997'.
[  183.507805][ T2316] usb usb5-port1: attempt power cycle
[  183.557785][   T43] audit: type=1400 audit(1791525685.048:803): avc:  denied  { write } for  pid=11747 comm="syz.4.2002" name="loop8" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  183.602832][   T58] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  183.667914][T11752] netlink: 'syz.4.2004': attribute type 10 has an invalid length.
[  183.672363][T11752] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  183.763556][   T58] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  183.818024][T11754] xt_NFQUEUE: number of queues (32769) out of range (got 98303)
[  183.872979][ T2316] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  183.903260][ T2316] usb 5-1: device descriptor read/8, error -71
[  183.931675][   T43] audit: type=1400 audit(1791525685.418:804): avc:  denied  { write } for  pid=11757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.994000][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2007'.
[  184.020344][   T43] audit: type=1400 audit(1791525685.509:805): avc:  denied  { write } for  pid=11763 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  184.154390][ T2316] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  184.175904][ T2316] usb 5-1: device descriptor read/8, error -71
[  184.276638][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2005'.
[  184.294025][ T2316] usb usb5-port1: unable to enumerate USB device
[  184.339117][T11771] uhci_hcd 0000:00:1d.0: remove, state 4
[  184.340509][T11771] usb usb2: USB disconnect, device number 1
[  184.441599][T11771] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered
[  184.484448][T11773] ==================================================================
[ 
** replaying previous printk message **
[  184.484461][T11773] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x458/0xa10
[  184.484511][T11773] Read of size 125 at addr ffff88802798afa0 by task syz.5.2009/11773
[  184.484527][T11773] 
[  184.484537][T11773] CPU: 3 UID: 0 PID: 11773 Comm: syz.5.2009 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  184.484561][T11773] Tainted: [L]=SOFTLOCKUP
[  184.484568][T11773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  184.484599][T11773] Call Trace:
[  184.484607][T11773]  <TASK>
[  184.484622][T11773]  dump_stack_lvl+0x100/0x190
[  184.484651][T11773]  print_report+0x13d/0x4b0
[  184.484678][T11773]  ? __virt_addr_valid+0x239/0x430
[  184.484699][T11773]  ? soft_cursor+0x458/0xa10
[  184.484718][T11773]  kasan_report+0xdf/0x1c0
[  184.484743][T11773]  ? soft_cursor+0x458/0xa10
[  184.484769][T11773]  kasan_check_range+0x10f/0x1e0
[  184.484789][T11773]  __asan_memcpy+0x23/0x60
[  184.484809][T11773]  soft_cursor+0x458/0xa10
[  184.484831][T11773]  ud_cursor+0xdd6/0x15f0
[  184.484855][T11773]  ? __pfx_ud_cursor+0x10/0x10
[  184.484879][T11773]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  184.484900][T11773]  ? get_color+0x1da/0x450
[  184.484919][T11773]  ? __pfx_ud_cursor+0x10/0x10
[  184.484942][T11773]  fbcon_cursor+0x43c/0x5e0
[  184.484958][T11773]  ? __mutex_unlock_slowpath+0x35d/0x930
[  184.484983][T11773]  hide_cursor+0x87/0x230
[  184.485004][T11773]  redraw_screen+0x5d4/0x760
[  184.485024][T11773]  ? mark_held_locks+0x40/0x70
[  184.485043][T11773]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  184.485066][T11773]  ? __pfx_redraw_screen+0x10/0x10
[  184.485091][T11773]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  184.485114][T11773]  vc_do_resize+0xc3d/0xeb0
[  184.485140][T11773]  ? __pfx_vc_do_resize+0x10/0x10
[  184.485163][T11773]  ? __local_bh_enable_ip+0xa5/0x120
[  184.485181][T11773]  ? lockdep_hardirqs_on+0x7d/0x110
[  184.485202][T11773]  ? kernel_fpu_end+0x5f/0x80
[  184.485225][T11773]  ? __local_bh_enable_ip+0xa5/0x120
[  184.485249][T11773]  fbcon_do_set_font+0x443/0x8c0
[  184.485270][T11773]  fbcon_set_font+0x4be/0x730
[  184.485287][T11773]  ? __pfx_fbcon_set_font+0x10/0x10
[  184.485303][T11773]  con_font_op+0x991/0x1020
[  184.485330][T11773]  ? __pfx_con_font_op+0x10/0x10
[  184.485355][T11773]  ? __might_fault+0xc5/0x140
[  184.485374][T11773]  ? __might_fault+0xc5/0x140
[  184.485397][T11773]  vt_ioctl+0xe00/0x3170
[  184.485419][T11773]  ? __pfx_vt_ioctl+0x10/0x10
[  184.485437][T11773]  ? tomoyo_path_number_perm+0x28f/0x580
[  184.485462][T11773]  ? tomoyo_path_number_perm+0x188/0x580
[  184.485485][T11773]  ? __pfx_futex_wait+0x10/0x10
[  184.485502][T11773]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  184.485525][T11773]  ? tty_jobctrl_ioctl+0x152/0xce0
[  184.485547][T11773]  ? __pfx_vt_ioctl+0x10/0x10
[  184.485569][T11773]  tty_ioctl+0x26a/0x1800
[  184.485595][T11773]  ? __pfx_tty_ioctl+0x10/0x10
[  184.485623][T11773]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  184.485651][T11773]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  184.485680][T11773]  ? __fget_files+0x34/0x3d0
[  184.485715][T11773]  ? selinux_file_ioctl+0x13b/0x290
[  184.485739][T11773]  ? selinux_file_ioctl+0xb6/0x290
[  184.485764][T11773]  ? __pfx_tty_ioctl+0x10/0x10
[  184.485788][T11773]  __x64_sys_ioctl+0x18e/0x210
[  184.485809][T11773]  do_syscall_64+0x123/0x790
[  184.485833][T11773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.485854][T11773] RIP: 0033:0x7f4ae4b9e1d9
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  184.485871][T11773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.485887][T11773] RSP: 002b:00007f4ae5abf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  184.485905][T11773] RAX: ffffffffffffffda RBX: 00007f4ae4e26180 RCX: 00007f4ae4b9e1d9
[  184.485916][T11773] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000004
[  184.485926][T11773] RBP: 00007f4ae4c35888 R08: 0000000000000000 R09: 0000000000000000
[  184.485936][T11773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.485946][T11773] R13: 00007f4ae4e26218 R14: 00007f4ae4e26180 R15: 00007fff433b1d18
[  184.485963][T11773]  </TASK>
[  184.485969][T11773] 
[  184.485973][T11773] Allocated by task 10827:
[  184.485983][T11773]  kasan_save_stack+0x30/0x50
[  184.486007][T11773]  kasan_save_track+0x14/0x30
[  184.486029][T11773]  __kasan_kmalloc+0xaa/0xb0
[  184.486049][T11773]  __kmalloc_noprof+0x32f/0x840
[  184.486067][T11773]  font_data_rotate+0x15f/0x3b0
[  184.486083][T11773]  fbcon_rotate_font+0x2bf/0x510
[  184.486101][T11773]  fbcon_switch+0xccc/0x19f0
[  184.486115][T11773]  redraw_screen+0x2c1/0x760
[  184.486133][T11773]  vc_do_resize+0xc3d/0xeb0
[  184.486156][T11773]  fbcon_do_set_font+0x443/0x8c0
[  184.486172][T11773]  fbcon_set_font+0x4be/0x730
[  184.486186][T11773]  con_font_op+0x991/0x1020
[  184.486208][T11773]  vt_ioctl+0xe00/0x3170
[  184.486224][T11773]  tty_ioctl+0x26a/0x1800
[  184.486244][T11773]  __x64_sys_ioctl+0x18e/0x210
[  184.486261][T11773]  do_syscall_64+0x123/0x790
[  184.486280][T11773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.486298][T11773] 
[  184.486303][T11773] The buggy address belongs to the object at ffff88802798a000
[  184.486303][T11773]  which belongs to the cache kmalloc-4k of size 4096
[  184.486318][T11773] The buggy address is located 1440 bytes to the right of
[  184.486318][T11773]  allocated 2560-byte region [ffff88802798a000, ffff88802798aa00)
[  184.486337][T11773] 
[  184.486341][T11773] The buggy address belongs to the physical page:
[  184.486348][T11773] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27988
[  184.486362][T11773] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  184.486375][T11773] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  184.486388][T11773] page_type: f5(slab)
[  184.486402][T11773] raw: 00fff00000000040 ffff88801d043040 dead000000000100 dead000000000122
[  184.486416][T11773] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  184.486431][T11773] head: 00fff00000000040 ffff88801d043040 dead000000000100 dead000000000122
[  184.486446][T11773] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  184.486462][T11773] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  184.486480][T11773] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  184.486490][T11773] page dumped because: kasan: bad access detected
[  184.486497][T11773] page_owner tracks the page as allocated
[  184.486503][T11773] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10350614889
[  184.486528][T11773]  post_alloc_hook+0xfd/0x120
[  184.486543][T11773]  get_page_from_freelist+0x110d/0x35d0
[  184.486560][T11773]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  184.486578][T11773]  new_slab+0xa9/0x6e0
[  184.486593][T11773]  refill_objects+0xe3/0x410
[  184.486617][T11773]  __pcs_replace_empty_main+0x35e/0x650
[  184.486637][T11773]  __kmalloc_cache_noprof+0x4f4/0x6d0
[  184.486654][T11773]  kobject_uevent_env+0x263/0x18b0
[  184.486672][T11773]  param_sysfs_builtin_init+0x378/0x3f0
[  184.486699][T11773]  do_one_initcall+0x11c/0x6f0
[  184.486717][T11773]  kernel_init_freeable+0x6ea/0x7b0
[  184.486734][T11773]  kernel_init+0x21/0x1e0
[  184.486748][T11773]  ret_from_fork+0x730/0xd60
[  184.486768][T11773]  ret_from_fork_asm+0x1a/0x30
[  184.486787][T11773] page last free pid 1 tgid 1 ts 10337129275 stack trace:
[  184.486798][T11773]  __free_frozen_pages+0x79f/0x10f0
[  184.486822][T11773]  qlist_free_all+0x47/0xf0
[  184.486839][T11773]  kasan_quarantine_reduce+0x1a0/0x1f0
[  184.486858][T11773]  __kasan_krealloc+0xe7/0x160
[  184.486879][T11773]  krealloc_node_align_noprof+0x269/0x3e0
[  184.486898][T11773]  add_sysfs_param+0x196/0x970
[  184.486917][T11773]  param_sysfs_builtin_init+0x310/0x3f0
[  184.486944][T11773]  do_one_initcall+0x11c/0x6f0
[  184.486960][T11773]  kernel_init_freeable+0x6ea/0x7b0
[  184.486976][T11773]  kernel_init+0x21/0x1e0
[  184.486988][T11773]  ret_from_fork+0x730/0xd60
[  184.487004][T11773]  ret_from_fork_asm+0x1a/0x30
[  184.487020][T11773] 
[  184.487023][T11773] Memory state around the buggy address:
[  184.487031][T11773]  ffff88802798ae80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  184.487043][T11773]  ffff88802798af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  184.487054][T11773] >ffff88802798af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  184.487065][T11773]                                ^
[  184.487074][T11773]  ffff88802798b000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  184.487087][T11773]  ffff88802798b080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  184.487098][T11773] ==================================================================
[  184.496116][T11773] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  184.851102][T11773] CPU: 3 UID: 0 PID: 11773 Comm: syz.5.2009 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  184.855458][T11773] Tainted: [L]=SOFTLOCKUP
[  184.857235][T11773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  184.861306][T11773] Call Trace:
[  184.862642][T11773]  <TASK>
[  184.863829][T11773]  dump_stack_lvl+0x100/0x190
[  184.865776][T11773]  vpanic+0x553/0x970
[  184.867387][T11773]  ? __pfx_vpanic+0x10/0x10
[  184.869160][T11773]  ? mark_held_locks+0x40/0x70
[  184.871201][T11773]  ? soft_cursor+0x458/0xa10
[  184.873158][T11773]  panic+0xd1/0xe0
[  184.874711][T11773]  ? __pfx_panic+0x10/0x10
[  184.876502][T11773]  ? soft_cursor+0x458/0xa10
[  184.878394][T11773]  ? preempt_schedule_common+0x3c/0xb0
[  184.880596][T11773]  check_panic_on_warn.cold+0x19/0x34
[  184.882778][T11773]  end_report.part.0+0x3a/0x90
[  184.884794][T11773]  kasan_report.cold+0xe/0x18
[  184.886729][T11773]  ? soft_cursor+0x458/0xa10
[  184.888616][T11773]  kasan_check_range+0x10f/0x1e0
[  184.890644][T11773]  __asan_memcpy+0x23/0x60
[  184.892524][T11773]  soft_cursor+0x458/0xa10
[  184.894436][T11773]  ud_cursor+0xdd6/0x15f0
[  184.896272][T11773]  ? __pfx_ud_cursor+0x10/0x10
[  184.898328][T11773]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  184.900854][T11773]  ? get_color+0x1da/0x450
[  184.902709][T11773]  ? __pfx_ud_cursor+0x10/0x10
[  184.904741][T11773]  fbcon_cursor+0x43c/0x5e0
[  184.906605][T11773]  ? __mutex_unlock_slowpath+0x35d/0x930
[  184.908874][T11773]  hide_cursor+0x87/0x230
[  184.910687][T11773]  redraw_screen+0x5d4/0x760
[  184.912558][T11773]  ? mark_held_locks+0x40/0x70
[  184.914525][T11773]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  184.916906][T11773]  ? __pfx_redraw_screen+0x10/0x10
[  184.918995][T11773]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  184.921323][T11773]  vc_do_resize+0xc3d/0xeb0
[  184.923158][T11773]  ? __pfx_vc_do_resize+0x10/0x10
[  184.925200][T11773]  ? __local_bh_enable_ip+0xa5/0x120
[  184.927276][T11773]  ? lockdep_hardirqs_on+0x7d/0x110
[  184.929335][T11773]  ? kernel_fpu_end+0x5f/0x80
[  184.931253][T11773]  ? __local_bh_enable_ip+0xa5/0x120
[  184.933375][T11773]  fbcon_do_set_font+0x443/0x8c0
[  184.935457][T11773]  fbcon_set_font+0x4be/0x730
[  184.937387][T11773]  ? __pfx_fbcon_set_font+0x10/0x10
[  184.939406][T11773]  con_font_op+0x991/0x1020
[  184.941257][T11773]  ? __pfx_con_font_op+0x10/0x10
[  184.943210][T11773]  ? __might_fault+0xc5/0x140
[  184.945108][T11773]  ? __might_fault+0xc5/0x140
[  184.946959][T11773]  vt_ioctl+0xe00/0x3170
[  184.948663][T11773]  ? __pfx_vt_ioctl+0x10/0x10
[  184.950515][T11773]  ? tomoyo_path_number_perm+0x28f/0x580
[  184.952732][T11773]  ? tomoyo_path_number_perm+0x188/0x580
[  184.954948][T11773]  ? __pfx_futex_wait+0x10/0x10
[  184.956878][T11773]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  184.959199][T11773]  ? tty_jobctrl_ioctl+0x152/0xce0
[  184.961261][T11773]  ? __pfx_vt_ioctl+0x10/0x10
[  184.963123][T11773]  tty_ioctl+0x26a/0x1800
[  184.964944][T11773]  ? __pfx_tty_ioctl+0x10/0x10
[  184.966976][T11773]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  184.969714][T11773]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  184.972633][T11773]  ? __fget_files+0x34/0x3d0
[  184.974657][T11773]  ? selinux_file_ioctl+0x13b/0x290
[  184.976917][T11773]  ? selinux_file_ioctl+0xb6/0x290
[  184.979124][T11773]  ? __pfx_tty_ioctl+0x10/0x10
[  184.981202][T11773]  __x64_sys_ioctl+0x18e/0x210
[  184.983267][T11773]  do_syscall_64+0x123/0x790
[  184.985268][T11773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.987762][T11773] RIP: 0033:0x7f4ae4b9e1d9
[  184.989702][T11773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.997792][T11773] RSP: 002b:00007f4ae5abf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  185.001274][T11773] RAX: ffffffffffffffda RBX: 00007f4ae4e26180 RCX: 00007f4ae4b9e1d9
[  185.004656][T11773] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000004
[  185.008006][T11773] RBP: 00007f4ae4c35888 R08: 0000000000000000 R09: 0000000000000000
[  185.011362][T11773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.014725][T11773] R13: 00007f4ae4e26218 R14: 00007f4ae4e26180 R15: 00007fff433b1d18
[  185.018125][T11773]  </TASK>
[  185.020126][T11773] Kernel Offset: disabled
[  185.021978][T11773] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:57:10  Registers:
info registers vcpu 0

CPU#0
RAX=8000000000000100 RBX=ffff88803ec9dcc0 RCX=0000000000000100 RDX=ffff88801fefa580
RSI=ffffffff8999656f RDI=ffff88801fefa580 RBP=ffff888014192781 RSP=ffffc90000126da8
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=ffff88803ec9dd20 R14=ffff88803ec9dda4 R15=ffff88802827f800
RIP=ffffffff820c4a77 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d4947000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffce7bdb048 CR3=000000000fb96000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000083400008 Opmask01=000000000000003f Opmask02=00000000004fc03f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000100000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c6c616b7a0030
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100008781
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 00007fabe76af42d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005649a144b610 00005649a144b610
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005649a145ea30 00005649a14492c0
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030303030303030 3030303030303030 3030303030303030 3030303030303030
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524548544f0030 3d004c2a3a523a62 3a7374533a6c3a4f 6e3a6d5e000a0920
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524548544f0000 0d004c1a0a520a52 0a4344530a5c0a4f 5e0a5d5e000a0910
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000f 00000000873d7373 6e64725f77656e01
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffff90bd9ec0 RCX=0000000000000001 RDX=ffff88801fef8000
RSI=ffffffff81ea6c55 RDI=ffffffff90bd9ec0 RBP=ffffc90000137da8 RSP=ffffc90000137958
R8 =0000000000000000 R9 =fffffbfff217b3d8 R10=ffffffff90bd9ec3 R11=53414b203a475542
R12=0000000000000000 R13=ffffc90000137da8 R14=0000000000000000 R15=ffffc90000137db4
RIP=ffffffff820c4abb RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d4a47000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000001b2dd23ffc CR3=000000002d9fe000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 357a79732f74656e 2f70756f7267637a
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff433b2206
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff433b2206 00007fff433b220c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ae4c35e6b
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ae4c35eab
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ae4c3600f
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ae4c35e9d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffff88806242de00 RCX=ffffffff89c24833 RDX=0000000000000300
RSI=0000000000000000 RDI=ffff888020a92580 RBP=fdffffffcccc0000 RSP=ffffc9000062e7b8
R8 =0000000000000007 R9 =0000000000000000 R10=fdffffffcccc0000 R11=0000000000000001
R12=ffff888057268000 R13=0000000000000001 R14=ffff88802dafc002 R15=ffff888028f35628
RIP=ffffffff820c4a50 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d4b47000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f4ae5abeff8 CR3=000000002d9fe000 CR4=00352ef0
DR0=0000000000000000 DR1=000000000000aee9 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff433b2206
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff433b2206 00007fff433b220c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ae4c35e6b
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ae4c35eab
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ae4c3600f
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ae4c35e9d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ae4df45f8 00007f4ae4df45c8 00007f4ae4df4600 00007f4ae4df45e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85b29485 RDI=ffffffff9cc7d660 RBP=ffffffff9cc7d620 RSP=ffffc9000fae6c38
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666552
R12=0000000000000000 R13=0000000000000031 R14=0000000000000005 R15=ffffc9000fae6f50
RIP=ffffffff85b294af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4ae5abf6c0 ffffffff 00c00000
GS =0000 ffff8880d4c47000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000014000 CR3=000000002d9fe000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d74a58a600 000055d74a58a600
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6092f870 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69766564205d3137 373131545b5d3037 363634342e343831 20205b203a6c656e
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 27326273752f302e 64313a30303a3030 30302f30303a3030 30306963702f7365
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63697665642f2720 3d2068746170203a 687461705f6a626f 6b5f6c6c6966203a
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2930623030303064 3230383838666666 6628202732627375 27203a7463656a62
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6b205d31373731 31545b5d31393232 33342e3438312020 5b203a6c656e7265
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000