last executing test programs: 5.427986233s ago: executing program 2 (id=255): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000003c0)='rpc_pipefs\x00', 0x1, 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000005780)='./file0\x00', 0x9400002f) umount2(&(0x7f0000000000)='./file0\x00', 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x88}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bind$nfc_llcp(r6, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r6, 0x118, 0x3, 0x0, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'erspan0\x00'}) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000140)={0x0, @isdn={0x22, 0x18, 0x10, 0x3a}, @nl=@unspec, @vsock={0x28, 0x0, 0x2711, @hyper}, 0x3, 0x0, 0x0, 0x0, 0x6c7, 0x0, 0x800, 0x4ef, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x404c800) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=r2, @ANYRESDEC=r0, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) close_range(r2, r0, 0x0) 5.35008505s ago: executing program 2 (id=256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @private1}, 0x1c) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "b0e614760b1be8bc", "72e64b3892db6b2509001600", "cfffc565", "e2b780b4bb9e0d9b"}, 0x86) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) madvise(&(0x7f0000225000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2a, 0x0, &(0x7f0000000040)) 4.478318465s ago: executing program 2 (id=257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c561f067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0xd0, 0x1f0, 0xd0, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@tos={{0x28}, {0x5, 0xff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x3a}, [0xff000000, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x2c, r2, 0x1, 0x70bd29, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) 4.339207769s ago: executing program 2 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x10, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0x4000, 0x43180}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x9, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="2e00000011008b10000f80ee59acbc04130800480f0000005ef5c62900421803001825800000000000000280000c00", 0x2f}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003020000ff2505a1a44000010203010902400001010940060904000803020600010a39060000f704def4d005240003000d240f010a0000000400040001090582023000f47e0309050302ff038101b2"], &(0x7f0000000840)={0x0, 0x0, 0xc, &(0x7f0000000340)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0x1, 0x5}]}, 0x2, [{0x0, 0x0}, {0x38, &(0x7f0000000740)=@string={0x38, 0x3, "0c71c0329b8bbddaa491344b6345c03d24b3eb014b2003cf9ceec0d4b77b64a61a25ff1b864bcc57d12607d7e7d9453f343b81718a58"}}]}) 2.050023884s ago: executing program 3 (id=284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x6f, 0xec, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x2, 0x12, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x1}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa3}, {0x8, 0x6, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 1.558657686s ago: executing program 1 (id=288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78d}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000002c0)) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000480)={0x328, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b3fd673659beaf24"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7fe2953615cafd309965621ab95de840"}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="cddc5433fc0a08f6394bc93143108a2c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d5f9268c8740d70c528bec34fd555865"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bd3e0cd2d8a56137c228f181f574d93b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cfb78047ce8d7dbf"}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e6e5f2ebc25f6bfa25b51c2da73f9899"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c32e8ee5ef4e3c4bfffe38fc93688696"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1d2707fa5c03f396"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ec9316b33135ec3bec6cc4af5909c276"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d0ba6440742b77e143ae7a8a7e91ac7b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f476b91d5cab20587191b6c41b68cf819ff2cca22a573e3b1ba378f1e53af59b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8db35dc38e45b9bcad7ff41cb050aa2a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e0857546ab31dc96c8ae05bc6f3f8c56"}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="317384c8a800cb5e2c4aad8c4f89f061"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2a1cc3fb4f9c622d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b7565edc53e359f5ef3a7ce1730238b15cacc6d5b8eab2a50c9e92e618ea17b2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b91b75d8522f2512"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4b2e45c5f69f30bed8cc346160840aa3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b8ce93a5651ad6e601bde33d6b6da51f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="635fd3343efebf863f6509e4fea39512"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6b356523d82968ee4b0483ed9f8d0393ff017c641e0ba00cae64f3674316e4f7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "56c3fe237f9ab0e7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "69186ac256766134"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "afbb16a4efe24fa4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e9ca90bd382d38031f8f20636d86f2ab"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c1bef8978ac6e46e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e8b1b932096ae012728e6c2c1cbc6216"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4f}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a76bf506328caec06962ec751a465270"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ccbf51688845a007a4dbe74ba76bf952"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4784c062c7cb53a4ac3633bd8d8cea36acc5aa9d4924b064"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d3742cf44662b91b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1c4d3fa78357242a741faa44d80b419e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2ce8316c88a14df9"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x40000}, 0x24004000) 1.448174637s ago: executing program 1 (id=291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xa031, 0xffffffffffffffff, 0x180000000) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 1.299128616s ago: executing program 1 (id=292): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000001280), 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000020601010000000000000000010000000c00078005001500efffffff050005000a0000000900020073797a3000000000050004000100000005000100060000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4008000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x80, 0x9, {{0xb, 0x4, 0x3, 0x3b, 0x2c, 0x67, 0x0, 0x1, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp_addr={0x44, 0xc, 0x77, 0x1, 0x3, [{@empty, 0x9}]}, @timestamp={0x44, 0x8, 0x76, 0x0, 0x0, [0x4]}, @noop]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000580)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000006c0)=0x14) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) (async) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001a00)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x1, 0x8, 0x2, 0x80000001, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@ssrr={0x89, 0x13, 0x8, [@local, @empty, @loopback, @rand_addr=0x64010102]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000007c0)={@rand_addr, 0x0}, &(0x7f0000000800)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000a40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1b4, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0xc0c4) (async) socket(0x2, 0xe1bab7233863f1f1, 0x1) (async, rerun: 32) r16 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) (rerun: 32) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r17, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r17, 0x4068aea3, &(0x7f0000000180)) (rerun: 64) 1.200066164s ago: executing program 2 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) setfsuid(0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000080)={r2}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f00000041c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f0000000080)={&(0x7f0000000380)={0x50, 0x0, 0xf, {0x7, 0x29, 0x9, 0x12510d21, 0xff, 0x4, 0x1, 0x10001, 0x0, 0x0, 0x4, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x7}}, 0x30) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0xffffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd11, 0x0, 0x0, 0x0}, 0x94) 1.199534777s ago: executing program 1 (id=295): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x80}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) 1.198600712s ago: executing program 1 (id=296): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x41, 0x3, 0x1c0, 0x0, 0x50020000, 0x0, 0x98, 0x0, 0x128, 0x1f0, 0x1f0, 0x128, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'syzkaller0\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x35}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x220) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x6, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="a11fa81b133d", 0x0, 0x0, 0x6, 0x3, 0x0}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r4, 0x8948, &(0x7f0000000000)) poll(&(0x7f0000000100)=[{r0, 0x2}, {r0, 0xc582}, {r0, 0x101}, {r2, 0x4002}, {r0, 0x8}, {r0, 0x1000}, {r3, 0x8}, {r0, 0x2408}], 0x8, 0x3) 1.119316713s ago: executing program 0 (id=297): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYBLOB="f96fbe649b6343611ed778f924b9e7fb919ed13c3a90e0ab9204461dc682c4345f7ae4c10d573d0b570ba9d4f5f783a8985fa78e4bb239e9748814e5752cd69ca4", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bcffffffb703000008000000b70300000000000085d56300330000009500"/65], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r2, &(0x7f0000000d40), 0x0}, 0x20) 1.114855747s ago: executing program 0 (id=298): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1c}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7f}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000880}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1080c00}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44804) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f00000003c0)={0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r4, 0xc0086442, &(0x7f0000000400)={r5}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) timer_create(0x6, &(0x7f0000000540)={0x0, 0x39, 0x1, @thr={&(0x7f0000000480)="fbea3b0127eb1e0e609e0b342095b2aa17ca664373f3e66614a948a3abbbd0d50e6c0fc23d1a23e05f6f488dea754d2e5d4d70c01e59", &(0x7f00000004c0)="47fa3e6a463a243d9c4ff439c8555baaae934d9635e7f525b49061c23e32a68ad527296d89d6ffc84ffc9393817c80bf52558e57c2d4868a94d238d049fd7ccf573b1e8d131e2a25126622d90e54302bb01cc90943de7cb636aabf73ed9d5e5e138f3e46b775f6c67cd0c74a51f728d0a2bc427be41869e45011b8024867321a"}}, &(0x7f0000000580)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000005c0)=0x17) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$int_out(r4, 0x0, &(0x7f0000000640)) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000680)={0x0, @local, 0x4e24, 0x1, 'sh\x00', 0x2, 0x2, 0x5e}, 0x2c) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x1a8, r7, 0x9, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x188, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, '/dev/dri/renderD128\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'sh\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!^)\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4cda}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0xe7, 0x4, "e68b7ee5ed8ff36f0271dfff697d3c81a8f7cf16b9243c666c564a6a777f56d3278dfd42bf7a848b21f0cc271d3f7b337fa81a18352145c64162701c2b95b2dc228edf5f6d8614f62a70871b3e2489a224f68184006159c0442c4f950cf8e3bce0251f32dfc7bcc52a72bf12ad99c73a2a3bad1dd86771a93d05507c6f83f7a71a4a68eae317aef9a1e4b03c35766dc5cbff52f0abe649317b047b557f8befb598281000914693124520d88999781ceab66c81a967b7f6a2fc1bf93b77b63a90dd589f7d59951bfa484a1521683ffa13427eae78dcf2531434ba9d24e1474358057043"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x800}, 0x4801) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000980), 0x204000, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000009c0)={r8}, 0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r10, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x4000000) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$XFS_IOC_FSGROWFSDATA(r11, 0x4010586e, &(0x7f0000000b40)={0x5, 0x5}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x48015) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000c80)=0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r12, 0x8, &(0x7f0000000cc0)) r13 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000e40)={r13, 0x0, 0x1c, 0x0, &(0x7f0000000d40)="6f8e7f7e4d125edce5211a362e86080c022733d63c605e74b592d8f9", 0x0, 0x8000, 0x0, 0x92, 0x0, &(0x7f0000000d80)="e1a79846e7e49f16818fc77026810a16e4d17fb1071585317c55a46b0357cc5c31045c5677c48d3af77e6db58d41ad07bfcb0e75745391d816d9a1068283c2457d60e8d7b6874ae61c3836a8a8922a57d1c3756313c36fe3b13fca7c18de63948bb89cdb76823354d15f1a2e7e5d903f6e07be8991bf95e6392b16052105af340920b7b542ad83e0dd3f07c8d33ebb914390", 0x0, 0x2, 0x0, 0x193c}, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000f40)={{}, {0x77359400}}, &(0x7f0000000f80)) 1.113611378s ago: executing program 3 (id=299): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000700)={&(0x7f0000000180)={0xa, 0x4e20, 0x80000, @empty, 0x1}, 0x1c, 0x0}, 0x440e0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYRES8=r1], 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000b1df705fd74a38160000000000180000000400000000000000070000002857d1b8f7ffffff186400000300000000000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1004, 0x7, 0x6, 0xef4, 0x1, 0xffffff80}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000280)={0x0, 0x0, 0x8001, 0x0, 0x0, [0x0], [0x0, 0x0, 0x1, 0x2], [0xfffffffd, 0x7, 0x8, 0x8000], [0x4000000000, 0x3, 0x400000006, 0xff]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xbe, 0x80, 0x34325241, 0x3, [0x2, 0x0, 0x0, r2], [0x80ffff], [], [0x400000000000000]}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000740)={0x0, 0x1, 0x5}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x4000008000d24, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000004c0)={r6, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x8, 0xffffffff, 0x10000], [0x2, 0x0, 0xfffffffc], [0x1, 0x0, 0x0, 0x2000000000000008]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7, 0x80000}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000780)={0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000007c0)={0x0, 0x81, 0x0, 0x5, 0x0, [r2, r3, r7, r8], [0xa6a, 0x6, 0x8, 0x6], [0x8, 0x4, 0x5, 0x80000000], [0x3, 0x7e, 0x1, 0x4]}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_GET_STC(r10, 0xc0106f32, &(0x7f0000000040)={0xb7}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r11, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="010009000180c2000001aaaaaaaaaaaa80fdbb8f4b6e12fd1142a7137a066e19aaaaaaaaaaaa0180c2000003aaaaaaaaaa06bfad57"]) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x458, 0x528, 0xfeffffff, 0x458, 0x528, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) 1.047953709s ago: executing program 0 (id=300): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003d80)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1e}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20001091}, 0x40) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000814}, 0x5c810) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r5) 899.665871ms ago: executing program 0 (id=301): r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000080)=""/133, &(0x7f0000000140)=0x85) setsockopt$sock_timeval(r0, 0x1, 0x4b, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 898.104636ms ago: executing program 0 (id=302): r0 = getpgid(0x0) get_robust_list(r0, &(0x7f0000000200)=&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={&(0x7f0000000040)}}}, &(0x7f00000002c0)=0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) r5 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r5, 0x0, 0x0, 0x8000, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={r6, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x52, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="20000280", @ANYRES32=r8, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000140)={r7}) 897.620366ms ago: executing program 3 (id=303): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)={0x1c, 0x15, 0xf15, 0x70bd29, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x7}]}, 0x1c}], 0x1}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000040)={0x30a32c0, 0x0, @ofdm={0x4, 0x7, 0x1, 0x6, 0x3, 0x0, 0x2}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f000000be80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f000000d240)={0x0, 0x0, &(0x7f000000d200)={&(0x7f000000d140)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "75f10df84769b6b42a42cc5e63b97124"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x10181, 0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@flushsa={0x40, 0x1c, 0x4, 0x70bd27, 0x25dfdbff, {0x5f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @lifetime_val={0x24, 0x9, {0x7fff, 0x7, 0xfffffffffffffc01, 0xb7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x24008008) r12 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r13 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3701) ioctl$USBDEVFS_GET_SPEED(r13, 0x551f) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES16=r10, @ANYBLOB="cf042dbd7000fcdbdf251200000008000300", @ANYRES8=r2, @ANYBLOB="0a00060700070000000200"/28], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8008) 799.731657ms ago: executing program 3 (id=304): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newnexthop={0x34, 0x68, 0x302, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x11}, [@NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}]}, 0x34}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, &(0x7f00000000c0)={0xb, 0x3, 0x0, 0x3, 'syz0\x00', 0x8}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newnexthop={0x34, 0x68, 0x302, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x11}, [@NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}]}, 0x34}}, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, &(0x7f00000000c0)={0xb, 0x3, 0x0, 0x3, 'syz0\x00', 0x8}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000080)) (async) 607.368229ms ago: executing program 3 (id=305): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000140)={0x100d, 0x1, 0xdb, 0xa, 0x187}) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) r6 = dup(r1) r7 = socket$kcm(0xa, 0x0, 0x0) close(r7) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x19) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, 0x0) socket(0x840000000002, 0x3, 0xff) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000040)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x6, &(0x7f0000000240)=0xa}) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3, 0x0, 0xd6e}}) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000002030500000000000000000002000003080001000300001a080001000200000f0800034000000004080001000100001008000100010000055d89d9ab8ff4a18999ca5d621c9379f5127a3487a692cf8503e04d5619db8ddb62972f44f1bdef5873b5bbabea4919adafbbc25cbe9877eb90c37ac1c6559a699f5eb34ad645a1f468c2aaa737a87627c33e0a4a05da3feada4fb3b36d61be"], 0x3c}, 0x1, 0x0, 0x0, 0x8000018}, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000600)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r9}) 338.378553ms ago: executing program 2 (id=306): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000140)=0xa, 0x4) sendmsg$802154_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)="1121ae", 0x3}, 0x1, 0x0, 0x0, 0x24008011}, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x7, 0x8, 0x5, 0xfffffffffffffff4, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0xd, 0x1, 0x5, 0x4, 0x8}]}, &(0x7f0000000340)='syzkaller\x00', 0x3}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) select(0x40, &(0x7f00000001c0)={0x800080000000, 0x3, 0x0, 0x9, 0x5, 0xbb, 0x3, 0x8}, &(0x7f0000000200)={0x61, 0xfffffffffffffffc, 0x0, 0x4, 0x6, 0x401, 0x1, 0x2a0b}, &(0x7f0000000240)={0xe6ee, 0x8, 0x9f9, 0x8000000000000001, 0x5, 0xfb9, 0x7, 0x4}, &(0x7f0000000280)={0x0, 0xea60}) 289.793521ms ago: executing program 1 (id=307): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x49040100}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x20c, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFQA_EXP={0x1bc, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_MASTER={0x9c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_PAYLOAD={0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x10001}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5eb, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000180)={r5, 0x2, &(0x7f00000000c0)=[0x1, 0x2], &(0x7f0000000100)=[0x0, 0x9, 0x40], &(0x7f0000000140)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB="217b000010"]) ioctl$COMEDI_CANCEL(0xffffffffffffffff, 0x6407) 179.93585ms ago: executing program 3 (id=308): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) close(0x3) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xc, 0x0, 0x0, @generic, 0x0, 0x0, 0x1}) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)={0x2c, 0x4, 0x0, {0x5, 0x4, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) 0s ago: executing program 0 (id=309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100e47c00000800034000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=&(0x7f0000000040)=0x4}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000000)={'b', ' *:* ', 'w\x00'}, 0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r9, 0x241a07f23122330d, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800) (async) sendmsg$NL80211_CMD_GET_MPP(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r9, 0x241a07f23122330d, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800) write$cgroup_devices(r8, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd699e000000140600fe800000000000000000000000000039fe8000000000000000000000872749d1203b0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8f02260048fc0300"], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd699e000000140600fe800000000000000000000000000039fe8000000000000000000000872749d1203b0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8f02260048fc0300"], 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r12, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660da000000000000000000000000000000000000e2ffffff00", "d8a024e5", "20000926000200"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r12, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660da000000000000000000000000000000000000e2ffffff00", "d8a024e5", "20000926000200"}, 0x38) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) r14 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) bind$bt_hci(r14, &(0x7f0000000240)={0x1f, 0x2}, 0x6) sendmsg$IPCTNL_MSG_CT_GET_DYING(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x4000000) dup(r13) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="0f01c80f01ca440f01df450f01c4f2426e460f01cf66b84e008ee0661a5814440f20c0350b000000440f22c0c4e28da9666c", 0x32}], 0x1, 0x6a, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:20168' (ED25519) to the list of known hosts. [ 56.976529][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 56.976541][ T40] audit: type=1400 audit(1778853073.868:141): avc: denied { mounton } for pid=5722 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.988285][ T40] audit: type=1400 audit(1778853073.878:142): avc: denied { mount } for pid=5722 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.990253][ T5722] cgroup: Unknown subsys name 'net' [ 56.998567][ T40] audit: type=1400 audit(1778853073.888:143): avc: denied { unmount } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.185170][ T5722] cgroup: Unknown subsys name 'cpuset' [ 57.192453][ T5722] cgroup: Unknown subsys name 'rlimit' [ 57.427458][ T40] audit: type=1400 audit(1778853074.318:144): avc: denied { setattr } for pid=5722 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.434889][ T40] audit: type=1400 audit(1778853074.318:145): avc: denied { create } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.441276][ T40] audit: type=1400 audit(1778853074.318:146): avc: denied { write } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.447898][ T40] audit: type=1400 audit(1778853074.318:147): avc: denied { read } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.454537][ T40] audit: type=1400 audit(1778853074.338:148): avc: denied { mounton } for pid=5722 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.462642][ T40] audit: type=1400 audit(1778853074.338:149): avc: denied { mount } for pid=5722 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 57.470032][ T40] audit: type=1400 audit(1778853074.348:150): avc: denied { read } for pid=5448 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 57.505649][ T5727] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.280004][ T5722] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.756247][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.756890][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.757516][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.759772][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.759969][ T5752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.763707][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.764763][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.765743][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.766226][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.766572][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.768189][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.771234][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.772094][ T5094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.772969][ T5752] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.773208][ T5752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.776688][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.783018][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.786311][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.788789][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.791088][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.375551][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.379753][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.383250][ T5746] bridge_slave_0: entered allmulticast mode [ 62.387032][ T5746] bridge_slave_0: entered promiscuous mode [ 62.422837][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.426254][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.429366][ T5746] bridge_slave_1: entered allmulticast mode [ 62.433398][ T5746] bridge_slave_1: entered promiscuous mode [ 62.442868][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.445437][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.447832][ T5737] bridge_slave_0: entered allmulticast mode [ 62.450580][ T5737] bridge_slave_0: entered promiscuous mode [ 62.454728][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.457075][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.459364][ T5737] bridge_slave_1: entered allmulticast mode [ 62.462202][ T5737] bridge_slave_1: entered promiscuous mode [ 62.536246][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.542399][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.556373][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.559567][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.563379][ T5738] bridge_slave_0: entered allmulticast mode [ 62.567364][ T5738] bridge_slave_0: entered promiscuous mode [ 62.574351][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.590889][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.599177][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.602959][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.605842][ T5738] bridge_slave_1: entered allmulticast mode [ 62.609471][ T5738] bridge_slave_1: entered promiscuous mode [ 62.658240][ T5737] team0: Port device team_slave_0 added [ 62.681274][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.685540][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.689461][ T5737] team0: Port device team_slave_1 added [ 62.692601][ T5746] team0: Port device team_slave_0 added [ 62.694534][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.697383][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.699699][ T5736] bridge_slave_0: entered allmulticast mode [ 62.702882][ T5736] bridge_slave_0: entered promiscuous mode [ 62.723242][ T5746] team0: Port device team_slave_1 added [ 62.725652][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.728291][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.730931][ T5736] bridge_slave_1: entered allmulticast mode [ 62.733708][ T5736] bridge_slave_1: entered promiscuous mode [ 62.749496][ T5738] team0: Port device team_slave_0 added [ 62.769267][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.772749][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.775382][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.783494][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.788742][ T5738] team0: Port device team_slave_1 added [ 62.799187][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.807937][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.810810][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.820848][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.836917][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.839615][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.849532][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.866740][ T5736] team0: Port device team_slave_0 added [ 62.869308][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.871570][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.879598][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.885113][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.887359][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.895299][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.899856][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.902580][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.912599][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.923073][ T5736] team0: Port device team_slave_1 added [ 62.979767][ T5746] hsr_slave_0: entered promiscuous mode [ 62.983049][ T5746] hsr_slave_1: entered promiscuous mode [ 62.995657][ T5737] hsr_slave_0: entered promiscuous mode [ 62.997983][ T5737] hsr_slave_1: entered promiscuous mode [ 63.000147][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 63.001990][ T5737] Cannot create hsr debugfs directory [ 63.004221][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.006445][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.014570][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.027120][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.029298][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.037320][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.051753][ T5738] hsr_slave_0: entered promiscuous mode [ 63.054878][ T5738] hsr_slave_1: entered promiscuous mode [ 63.057108][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 63.058930][ T5738] Cannot create hsr debugfs directory [ 63.161645][ T5736] hsr_slave_0: entered promiscuous mode [ 63.164054][ T5736] hsr_slave_1: entered promiscuous mode [ 63.166095][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 63.167897][ T5736] Cannot create hsr debugfs directory [ 63.433321][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.442321][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.445501][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.451421][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.454054][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.458444][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.461823][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.467134][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.521659][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.531248][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.537005][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.541512][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.544844][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.548950][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.552132][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.556935][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.616653][ T5736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.623316][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.626317][ T5736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.629846][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.632745][ T5736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.636455][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.639351][ T5736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.643453][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.707378][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.729174][ T5738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.734686][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.738209][ T5738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.743860][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.752738][ T5738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.758236][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.762707][ T5738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.767847][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.781822][ T5747] Bluetooth: hci3: command tx timeout [ 63.790863][ T5747] Bluetooth: hci0: command tx timeout [ 63.811935][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.826631][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.829952][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.839046][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.859354][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.862598][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.866396][ T5747] Bluetooth: hci1: command tx timeout [ 63.866592][ T5742] Bluetooth: hci2: command tx timeout [ 63.880470][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.900949][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.903310][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.922170][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.925047][ T1269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.940522][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.985813][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.003224][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.005625][ T1204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.019050][ T1204] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.021401][ T1204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.032633][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.049653][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.060962][ T205] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.063234][ T205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.077897][ T205] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.080209][ T205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.243087][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.283676][ T5737] veth0_vlan: entered promiscuous mode [ 64.289005][ T5737] veth1_vlan: entered promiscuous mode [ 64.309603][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.322507][ T5737] veth0_macvtap: entered promiscuous mode [ 64.338161][ T5737] veth1_macvtap: entered promiscuous mode [ 64.359747][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.370592][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.378519][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.385077][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.395281][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.398063][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.402277][ T5746] veth0_vlan: entered promiscuous mode [ 64.406003][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.427480][ T5746] veth1_vlan: entered promiscuous mode [ 64.451607][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.489590][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.493231][ T5736] veth0_vlan: entered promiscuous mode [ 64.493687][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.503533][ T5746] veth0_macvtap: entered promiscuous mode [ 64.526071][ T5736] veth1_vlan: entered promiscuous mode [ 64.531081][ T5746] veth1_macvtap: entered promiscuous mode [ 64.534060][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.537621][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.552492][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 64.552503][ T40] audit: type=1400 audit(1778853081.448:169): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.555459][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.562306][ T40] audit: type=1400 audit(1778853081.448:170): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/syzkaller.qSWTMU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.569996][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.575749][ T40] audit: type=1400 audit(1778853081.458:171): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.585511][ T40] audit: type=1400 audit(1778853081.458:172): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/syzkaller.qSWTMU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.588913][ T5738] veth0_vlan: entered promiscuous mode [ 64.595613][ T40] audit: type=1400 audit(1778853081.458:173): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/syzkaller.qSWTMU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.595639][ T40] audit: type=1400 audit(1778853081.468:174): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.595660][ T40] audit: type=1400 audit(1778853081.478:175): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.595685][ T40] audit: type=1400 audit(1778853081.478:176): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="gadgetfs" ino=7855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.595734][ T40] audit: type=1400 audit(1778853081.488:177): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 64.595767][ T40] audit: type=1400 audit(1778853081.488:178): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 64.605274][ T205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.638197][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.645073][ T205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.665730][ T5736] veth0_macvtap: entered promiscuous mode [ 64.668503][ T205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.671529][ T205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.677449][ T5738] veth1_vlan: entered promiscuous mode [ 64.691235][ T5736] veth1_macvtap: entered promiscuous mode [ 64.729563][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.733289][ T5738] veth0_macvtap: entered promiscuous mode [ 64.733711][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.744065][ T5738] veth1_macvtap: entered promiscuous mode [ 64.749474][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.765997][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.768808][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.769037][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.782762][ T1204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.791849][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.794677][ T1204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.797978][ T1204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.807385][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.811565][ T1204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.843269][ T205] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.846760][ T205] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.850929][ T1204] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.863621][ T1204] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.880388][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.886405][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.930011][ T1204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.934067][ T1204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.994903][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.004112][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.035575][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.039386][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.097664][ T5901] xt_policy: neither incoming nor outgoing policy selected [ 65.104993][ T5901] capability: warning: `syz.1.5' uses deprecated v2 capabilities in a way that may be insecure [ 65.265148][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 65.861364][ T5742] Bluetooth: hci0: command tx timeout [ 65.870290][ T5742] Bluetooth: hci3: command tx timeout [ 65.940489][ T5742] Bluetooth: hci2: command tx timeout [ 65.950291][ T5742] Bluetooth: hci1: command tx timeout [ 66.157886][ T5953] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 66.166235][ T5953] Error validating options; rc = [-22] [ 66.219423][ T5951] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 66.301528][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 66.313324][ T5972] mmap: syz.2.17 (5972) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.356588][ T5979] syzkaller0: entered promiscuous mode [ 66.358363][ T5979] syzkaller0: entered allmulticast mode [ 66.382745][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 66.385512][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 66.410722][ T5985] comedi comedi2: fl512: I/O port conflict (0x10000100,16) [ 66.414106][ T5985] Zero length message leads to an empty skb [ 66.538274][ T5996] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 66.739393][ T6003] veth0_to_team: entered promiscuous mode [ 66.743439][ T6003] veth0_to_team: left promiscuous mode [ 67.118179][ T6012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 67.125282][ T6012] tmpfs: Unknown parameter 'euid' [ 67.190372][ T5885] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.360155][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 67.372486][ T5885] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.380804][ T5885] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.386363][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.388489][ T5885] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 67.400255][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.405655][ T5885] usb 5-1: config 0 descriptor?? [ 67.539371][ T6040] netlink: 344 bytes leftover after parsing attributes in process `syz.1.32'. [ 67.697131][ T6046] syz.1.34 uses obsolete (PF_INET,SOCK_PACKET) [ 67.819477][ T5885] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 67.822976][ T5885] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 67.825697][ T5885] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 67.827925][ T5885] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 67.830230][ T5885] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 67.833799][ T5885] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 67.950517][ T5742] Bluetooth: hci0: command tx timeout [ 67.953318][ T5747] Bluetooth: hci3: command tx timeout [ 68.020808][ T5747] Bluetooth: hci1: command tx timeout [ 68.020836][ T5742] Bluetooth: hci2: command tx timeout [ 68.022158][ T5886] usb 5-1: USB disconnect, device number 2 [ 68.103820][ T6057] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 68.135670][ T6065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.40'. [ 68.164904][ T6067] netlink: 'syz.1.41': attribute type 21 has an invalid length. [ 68.168327][ T6067] netlink: 156 bytes leftover after parsing attributes in process `syz.1.41'. [ 68.226023][ T6076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.230223][ T6076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.348242][ T6082] xt_socket: unknown flags 0x48 [ 68.470244][ T1344] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 68.514023][ T6087] 9pnet_fd: Insufficient options for proto=fd [ 68.518472][ T6087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=6087 comm=syz.1.47 [ 68.621578][ T1344] usb 8-1: not running at top speed; connect to a high speed hub [ 68.625960][ T1344] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 68.638364][ T1344] usb 8-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 68.643233][ T1344] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.646575][ T1344] usb 8-1: Product: syz [ 68.648327][ T1344] usb 8-1: Manufacturer: syz [ 68.650599][ T1344] usb 8-1: SerialNumber: syz [ 68.822997][ T6029] Bluetooth: hci4: Frame reassembly failed (-84) [ 68.825652][ T6105] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 68.828484][ T6029] Bluetooth: hci4: Frame reassembly failed (-84) [ 68.868697][ T1344] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 68.872477][ T1344] usb 8-1: MIDIStreaming interface descriptor not found [ 68.903694][ T1344] usb 8-1: USB disconnect, device number 2 [ 68.944679][ T6108] udevd[6108]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.391730][ T6120] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 69.579294][ T40] kauditd_printk_skb: 143 callbacks suppressed [ 69.579304][ T40] audit: type=1400 audit(1778853086.468:322): avc: denied { setopt } for pid=6130 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.588094][ T40] audit: type=1400 audit(1778853086.478:323): avc: denied { name_bind } for pid=6130 comm="syz.3.60" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 69.596931][ T40] audit: type=1400 audit(1778853086.478:324): avc: denied { getopt } for pid=6130 comm="syz.3.60" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.605824][ T40] audit: type=1400 audit(1778853086.478:325): avc: denied { connect } for pid=6130 comm="syz.3.60" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.608218][ T6131] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 69.615416][ T40] audit: type=1400 audit(1778853086.478:326): avc: denied { name_connect } for pid=6130 comm="syz.3.60" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 69.656050][ T40] audit: type=1400 audit(1778853086.548:327): avc: denied { read write } for pid=6136 comm="syz.0.62" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.665377][ T40] audit: type=1400 audit(1778853086.548:328): avc: denied { open } for pid=6136 comm="syz.0.62" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.674878][ T40] audit: type=1400 audit(1778853086.558:329): avc: denied { connect } for pid=6138 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.740959][ T6142] syzkaller0: entered promiscuous mode [ 69.743696][ T6142] syzkaller0: entered allmulticast mode [ 69.746448][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.65'. [ 69.751561][ T6144] openvswitch: netlink: Flow actions attr not present in new flow. [ 69.763209][ T6144] netlink: 104 bytes leftover after parsing attributes in process `syz.0.65'. [ 69.765501][ T40] audit: type=1400 audit(1778853086.658:330): avc: denied { watch watch_reads } for pid=6143 comm="syz.0.65" path="/14" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.881803][ T40] audit: type=1400 audit(1778853086.778:331): avc: denied { read } for pid=6145 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 69.889423][ T6146] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio0-cursor) [ 70.032107][ T5747] Bluetooth: hci0: command tx timeout [ 70.034784][ T62] Bluetooth: hci3: command tx timeout [ 70.102505][ T62] Bluetooth: hci1: command tx timeout [ 70.110980][ T62] Bluetooth: hci2: command tx timeout [ 70.300391][ T6172] sit1: entered promiscuous mode [ 70.304158][ T6172] ======================================================= [ 70.304158][ T6172] WARNING: The mand mount option has been deprecated and [ 70.304158][ T6172] and is ignored by this kernel. Remove the mand [ 70.304158][ T6172] option from the mount to silence this warning. [ 70.304158][ T6172] ======================================================= [ 70.501695][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 70.513889][ T6183] bridge0: port 3(macvlan2) entered blocking state [ 70.516966][ T6183] bridge0: port 3(macvlan2) entered disabled state [ 70.519788][ T6183] macvlan2: entered allmulticast mode [ 70.525016][ T6183] macvlan2: left allmulticast mode [ 70.659690][ T6194] exFAT-fs (nullb0): invalid boot record signature [ 70.664867][ T6194] exFAT-fs (nullb0): failed to read boot sector [ 70.667638][ T6194] exFAT-fs (nullb0): failed to recognize exfat type [ 70.707214][ T6196] netlink: 'syz.0.84': attribute type 3 has an invalid length. [ 70.709727][ T6197] netlink: 'syz.0.84': attribute type 3 has an invalid length. [ 70.762023][ T6194] netlink: 64 bytes leftover after parsing attributes in process `syz.2.83'. [ 70.766200][ T6194] xt_hashlimit: size too large, truncated to 1048576 [ 70.795234][ T6209] netlink: 76 bytes leftover after parsing attributes in process `syz.3.87'. [ 70.798466][ T6210] netlink: 76 bytes leftover after parsing attributes in process `syz.3.87'. [ 70.823644][ T6201] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 70.856059][ T6213] process 'syz.0.88' launched './file2' with NULL argv: empty string added [ 70.901460][ T5742] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.901504][ T62] Bluetooth: hci4: command 0x1003 tx timeout [ 70.969494][ T6220] netlink: 'syz.1.92': attribute type 3 has an invalid length. [ 71.002234][ T6220] netlink: 'syz.1.92': attribute type 15 has an invalid length. [ 71.176144][ T6229] syzkaller0: create flow: hash 3295579078 index 1 [ 71.181030][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 71.200430][ T9] syzkaller0: tun_net_xmit 76 [ 71.256899][ T6228] syzkaller0: delete flow: hash 3295579078 index 1 [ 71.340859][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 71.353731][ T10] usb 8-1: config 86 has an invalid interface number: 232 but max is 2 [ 71.360888][ T10] usb 8-1: config 86 contains an unexpected descriptor of type 0x1, skipping [ 71.364015][ T10] usb 8-1: config 86 has an invalid interface number: 209 but max is 2 [ 71.366628][ T10] usb 8-1: config 86 has an invalid interface number: 49 but max is 2 [ 71.369216][ T10] usb 8-1: config 86 has no interface number 0 [ 71.372301][ T10] usb 8-1: config 86 has no interface number 1 [ 71.375179][ T10] usb 8-1: config 86 has no interface number 2 [ 71.377387][ T10] usb 8-1: config 86 interface 232 altsetting 6 endpoint 0x8 has invalid maxpacket 1080, setting to 64 [ 71.381493][ T10] usb 8-1: config 86 interface 209 altsetting 12 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 71.385292][ T10] usb 8-1: config 86 interface 209 altsetting 12 endpoint 0x89 has invalid maxpacket 1024, setting to 64 [ 71.388739][ T10] usb 8-1: config 86 interface 209 altsetting 12 endpoint 0x6 has invalid maxpacket 328, setting to 64 [ 71.392987][ T10] usb 8-1: config 86 interface 209 altsetting 12 has a duplicate endpoint with address 0x1, skipping [ 71.396900][ T10] usb 8-1: config 86 interface 209 altsetting 12 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 71.400786][ T10] usb 8-1: config 86 interface 209 altsetting 12 has an endpoint descriptor with address 0x32, changing to 0x2 [ 71.404503][ T10] usb 8-1: config 86 interface 209 altsetting 12 has a duplicate endpoint with address 0x2, skipping [ 71.407810][ T10] usb 8-1: config 86 interface 209 altsetting 12 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 71.412181][ T10] usb 8-1: config 86 interface 232 has no altsetting 0 [ 71.414461][ T10] usb 8-1: config 86 interface 209 has no altsetting 0 [ 71.416570][ T10] usb 8-1: config 86 interface 49 has no altsetting 0 [ 71.420472][ T10] usb 8-1: New USB device found, idVendor=1b3d, idProduct=0155, bcdDevice=15.ad [ 71.423387][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.425928][ T10] usb 8-1: Product: 膘䅩落㺴쮚셜鴤禨䌬뺊ꪞé³í–¬ä­®á©…ퟵᩯ쎘Ƛ䬶樎夜ⲃŵ骮븿ῆ㗺ﮢ呵洜瞆숙ç¥ë¬¥î½¼ë¤£áŸä£‰â¹°î ®å‚©í’›à°©ã¶›ì‘œæº¡âžˆéŽ„饷ä…缕ᇣ⵳ۋ둄╟믙넰Ꭶ㛭俕ᰬ飵軘ꖵ粧꒣ᤀ唭잃䞡맹柸蟉䂀ïŠçšªå¼Åžë¿Œì¸Žîœ”퉺䚫䇉꼩춪毙巠嬊㡦岌 [ 71.435263][ T10] usb 8-1: Manufacturer: ᜠ[ 71.436776][ T10] usb 8-1: SerialNumber: Ѓ [ 71.654921][ T10] ftdi_sio 8-1:86.232: FTDI USB Serial Device converter detected [ 71.672503][ T10] ftdi_sio ttyUSB0: unknown device type: 0x15ad [ 71.686167][ T10] ftdi_sio 8-1:86.209: FTDI USB Serial Device converter detected [ 71.692905][ T10] ftdi_sio ttyUSB1: unknown device type: 0x15ad [ 71.709375][ T10] ftdi_sio 8-1:86.49: FTDI USB Serial Device converter detected [ 71.714451][ T10] ftdi_sio ttyUSB2: unknown device type: 0x15ad [ 71.723472][ T10] usb 8-1: USB disconnect, device number 3 [ 71.762430][ T10] ftdi_sio 8-1:86.232: device disconnected [ 71.783286][ T10] ftdi_sio 8-1:86.209: device disconnected [ 71.795615][ T10] ftdi_sio 8-1:86.49: device disconnected [ 72.339658][ T6243] netlink: 'syz.0.97': attribute type 1 has an invalid length. [ 72.345210][ T6243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6243 comm=syz.0.97 [ 72.354601][ T10] IPVS: starting estimator thread 0... [ 72.455118][ T6247] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.98'. [ 72.458250][ T6247] openvswitch: netlink: Message has 5 unknown bytes. [ 72.460597][ T6244] IPVS: using max 45 ests per chain, 108000 per kthread [ 72.512265][ T6252] autofs: Unknown parameter 'f8æZj [ 72.512265][ T6252] rá¬+`½bvý‹¶6' [ 72.653148][ T6257] binder: 6254:6257 ioctl c0306201 200000000640 returned -22 [ 72.663187][ T6257] binder: 6254:6257 ioctl 4020ae46 200000000840 returned -22 [ 73.025453][ T6238] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 73.028173][ T6238] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.034380][ T6238] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.038772][ T6238] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.041118][ T6238] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.045157][ T6238] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.047921][ T6238] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.049855][ T6238] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.052757][ T6238] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.056768][ T6238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.059496][ T6238] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.068143][ T6238] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.960910][ T6220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.982527][ T6265] ±ÿª¨úrBº“: renamed from lo (while UP) [ 74.093726][ T6279] netlink: 'syz.0.108': attribute type 322 has an invalid length. [ 74.218864][ T6288] IPv6: addrconf: prefix option has invalid lifetime [ 74.399686][ T6301] sctp: [Deprecated]: syz.2.115 (pid 6301) Use of int in max_burst socket option. [ 74.399686][ T6301] Use struct sctp_assoc_value instead [ 74.420228][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.463204][ T6303] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 74.589955][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 74.589972][ T40] audit: type=1400 audit(1778853091.478:373): avc: denied { read write } for pid=5738 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.600376][ T40] audit: type=1400 audit(1778853091.478:374): avc: denied { open } for pid=5738 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.608680][ T40] audit: type=1400 audit(1778853091.488:375): avc: denied { ioctl } for pid=5738 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.802345][ T40] audit: type=1400 audit(1778853091.698:376): avc: denied { accept } for pid=6311 comm="syz.2.118" lport=3618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 74.945674][ T40] audit: type=1400 audit(1778853091.838:377): avc: denied { write } for pid=6315 comm="syz.3.120" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.061494][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'. [ 75.065646][ T6329] openvswitch: netlink: Flow actions attr not present in new flow. [ 75.072930][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.075079][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.075385][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.186314][ T40] audit: type=1400 audit(1778853092.078:378): avc: denied { read write } for pid=6332 comm="syz.0.124" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.195859][ T40] audit: type=1400 audit(1778853092.078:379): avc: denied { open } for pid=6332 comm="syz.0.124" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.205019][ T40] audit: type=1400 audit(1778853092.088:380): avc: denied { mounton } for pid=6332 comm="syz.0.124" path="/45/file0" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.208622][ T6334] 9pnet_virtio: no channels available for device syz [ 75.217349][ T6334] 9pnet_virtio: no channels available for device syz [ 75.220206][ T6334] 9pnet_virtio: no channels available for device syz [ 75.222509][ T6334] 9pnet_virtio: no channels available for device syz [ 75.224984][ T6334] 9pnet_virtio: no channels available for device  [ 75.227627][ T6334] 9pnet_virtio: no channels available for device  [ 75.230034][ T6334] 9pnet_virtio: no channels available for device  [ 75.233362][ T6334] 9pnet_virtio: no channels available for device  [ 75.235604][ T6334] 9pnet_virtio: no channels available for device  [ 75.237894][ T6334] 9pnet_virtio: no channels available for device  [ 75.240177][ T6334] 9pnet_virtio: no channels available for device  [ 75.242487][ T6334] 9pnet_virtio: no channels available for device  [ 75.244633][ T6334] 9pnet_virtio: no channels available for device  [ 75.247250][ T6334] 9pnet_virtio: no channels available for device  [ 75.249646][ T6334] 9pnet_virtio: no channels available for device  [ 75.251923][ T6334] 9pnet_virtio: no channels available for device  [ 75.254483][ T6334] 9pnet_virtio: no channels available for device  [ 75.256701][ T6334] 9pnet_virtio: no channels available for device  [ 75.258888][ T6334] 9pnet_virtio: no channels available for device  [ 75.260775][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 75.306571][ T40] audit: type=1400 audit(1778853092.198:381): avc: denied { shutdown } for pid=6340 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.312737][ T40] audit: type=1400 audit(1778853092.198:382): avc: denied { name_connect } for pid=6340 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 75.468446][ T6352] kvm: kvm [6351]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9123 [ 75.568736][ T6357] netlink: 'syz.0.130': attribute type 4 has an invalid length. [ 75.572541][ T6357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.589756][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 75.604035][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 75.607081][ T6364] openvswitch: netlink: Flow actions attr not present in new flow. [ 75.924905][ T6371] binder: 6370:6371 ioctl c0306201 200000000140 returned -22 [ 76.008975][ T6385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.139'. [ 76.013426][ T6385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.139'. [ 76.088977][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 76.122069][ T6389] dummy0: entered promiscuous mode [ 76.134085][ T6389] dummy0: left promiscuous mode [ 76.331826][ T6411] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3551904703 (227321900992 ns) > initial count (123586732480 ns). Using initial count to start timer. [ 76.348861][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.349315][ T6411] kvm: kvm [6410]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 76.351616][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.359056][ T6411] kvm: kvm [6410]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 76.431183][ T6411] kvm: vcpu 0: requested 130560 ns lapic timer period limited to 200000 ns [ 76.578893][ T6431] loop5: detected capacity change from 0 to 2640 [ 76.586698][ T6431] Buffer I/O error on dev loop5, logical block 0, async page read [ 76.591431][ T6431] Buffer I/O error on dev loop5, logical block 0, async page read [ 76.594696][ T6431] Buffer I/O error on dev loop5, logical block 0, async page read [ 76.597775][ T6431] Buffer I/O error on dev loop5, logical block 0, async page read [ 76.601174][ T6431] Buffer I/O error on dev loop5, logical block 0, async page read [ 76.605379][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 76.606197][ T6431] Buffer I/O error on dev loop5, logical block 0, async page read [ 76.612581][ T6431] Buffer I/O error on dev loop5, logical block 0, async page read [ 76.615830][ T6431] Buffer I/O error on dev loop5, logical block 0, async page read [ 76.618965][ T6431] ldm_validate_partition_table(): Disk read failed. [ 76.622231][ T6431] Buffer I/O error on dev loop5, logical block 0, async page read [ 76.625469][ T6431] Buffer I/O error on dev loop5, logical block 0, async page read [ 76.628720][ T6431] Dev loop5: unable to read RDB block 0 [ 76.631486][ T6431] loop5: unable to read partition table [ 76.634237][ T6431] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 76.647306][ T6435] ldm_validate_partition_table(): Disk read failed. [ 76.650642][ T6435] Dev loop5: unable to read RDB block 0 [ 76.653438][ T6435] loop5: unable to read partition table [ 76.716432][ T6440] netlink: 'syz.0.152': attribute type 49 has an invalid length. [ 76.754435][ T6442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.154'. [ 76.756643][ T6444] netlink: 45 bytes leftover after parsing attributes in process `syz.2.153'. [ 76.793425][ T6447] netlink: 'syz.0.156': attribute type 1 has an invalid length. [ 76.796689][ T6447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.878811][ T6387] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 76.951626][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 77.002810][ T6474] binder: 6471:6474 ioctl 540f 200000000040 returned -22 [ 77.074179][ T6478] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 77.099455][ T6478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.105498][ T6478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.117004][ T6478] vlan2: entered allmulticast mode [ 77.119004][ T6478] macsec0: entered allmulticast mode [ 77.121199][ T6478] veth1_macvtap: entered allmulticast mode [ 77.124486][ T6478] bond1: (slave vlan2): Error -34 calling dev_set_mtu [ 77.140280][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.140334][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.150180][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.220147][ T5145] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 77.291340][ T6489] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 77.322418][ T6489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.390224][ T5145] usb 6-1: Using ep0 maxpacket: 8 [ 77.393609][ T5145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.398050][ T5145] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.402504][ T5145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.415908][ T5145] usb 6-1: config 0 descriptor?? [ 77.634160][ T5145] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 77.716267][ T6502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.170'. [ 77.723368][ T6502] Cannot find add_set index 0 as target [ 77.770186][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.930181][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 77.934012][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.938183][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.942676][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.946802][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.954915][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.961194][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.964010][ T6516] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 77.985229][ T6517] hfsplus: unable to find HFS+ superblock [ 77.990841][ T6518] hfsplus: unable to find HFS+ superblock [ 78.042574][ T5886] usb 6-1: USB disconnect, device number 2 [ 78.101695][ T6521] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 78.175165][ T34] usb 5-1: GET_CAPABILITIES returned 0 [ 78.177525][ T34] usbtmc 5-1:16.0: can't read capabilities [ 78.378542][ T5145] usb 5-1: USB disconnect, device number 3 [ 78.909709][ T6545] fuse: Unknown parameter '0000000000000000000700000000000000000007' [ 78.963165][ T6551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6551 comm=syz.0.185 [ 78.964108][ T6550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.997096][ T6555] overlayfs: missing 'lowerdir' [ 79.054633][ T6560] Bluetooth: MGMT ver 1.23 [ 79.087028][ T6558] macvlan2: entered promiscuous mode [ 79.088886][ T6558] macvlan2: entered allmulticast mode [ 79.091798][ T6558] bond2: entered promiscuous mode [ 79.095530][ T6558] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 79.103325][ T6558] bond2: left promiscuous mode [ 79.134923][ T6567] binder: 6557:6567 ioctl c0306201 200000000040 returned -22 [ 79.220166][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.220606][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.220676][ T5747] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.465600][ T6595] CUSE: info not properly terminated [ 79.502564][ T6597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.657171][ T6612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=6612 comm=syz.3.201 [ 79.727317][ T5742] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 79.808021][ T6629] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 79.955912][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 79.955925][ T40] audit: type=1400 audit(1778853096.848:442): avc: denied { ioctl } for pid=6643 comm="syz.1.211" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.018828][ T40] audit: type=1400 audit(1778853096.908:443): avc: denied { accept } for pid=6641 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 80.047060][ T40] audit: type=1400 audit(1778853096.938:444): avc: denied { bind } for pid=6641 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.133613][ T6647] binder: 6646:6647 ioctl 660c 0 returned -22 [ 80.135588][ T40] audit: type=1400 audit(1778853097.028:445): avc: denied { setattr } for pid=6646 comm="syz.1.212" name="CAN_J1939" dev="sockfs" ino=13713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.136564][ T6647] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 80.307043][ T6655] netlink: 'syz.0.216': attribute type 7 has an invalid length. [ 80.310405][ T6655] netlink: 'syz.0.216': attribute type 8 has an invalid length. [ 80.380967][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803d767400: rx timeout, send abort [ 80.392581][ T40] audit: type=1400 audit(1778853097.288:446): avc: denied { read } for pid=5125 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 80.401419][ T40] audit: type=1400 audit(1778853097.288:447): avc: denied { search } for pid=5125 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.409634][ T40] audit: type=1400 audit(1778853097.288:448): avc: denied { write search } for pid=5125 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.418283][ T40] audit: type=1400 audit(1778853097.288:449): avc: denied { add_name } for pid=5125 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.426851][ T40] audit: type=1400 audit(1778853097.288:450): avc: denied { create } for pid=5125 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.435545][ T40] audit: type=1400 audit(1778853097.288:451): avc: denied { append open } for pid=5125 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.642886][ T6672] tmpfs: Bad value for 'mpol' [ 80.665901][ T6674] __nla_validate_parse: 23 callbacks suppressed [ 80.665918][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.222'. [ 80.845882][ T6691] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 80.881569][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803d766c00: rx timeout, send abort [ 80.885845][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803d767400: abort rx timeout. Force session deactivation [ 80.947747][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 80.959008][ T6695] netlink: 'syz.1.228': attribute type 83 has an invalid length. [ 81.003575][ T6703] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 81.099178][ T6707] xt_bpf: check failed: parse error [ 81.155987][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 81.252030][ T6728] tmpfs: Unknown parameter 'grpquotae' [ 81.359843][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 81.363379][ T6731] openvswitch: netlink: Flow actions attr not present in new flow. [ 81.384988][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803d766c00: abort rx timeout. Force session deactivation [ 81.664532][ T6741] overlayfs: missing 'lowerdir' [ 81.681353][ T6744] warning: `syz.0.243' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.703421][ T6747] batadv_slave_0: entered promiscuous mode [ 81.719929][ T6750] batadv_slave_0: left promiscuous mode [ 81.811295][ T6762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.248'. [ 81.832980][ T6762] syzkaller0: entered promiscuous mode [ 81.835322][ T6762] syzkaller0: entered allmulticast mode [ 83.331589][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.253'. [ 83.590398][ T5885] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 83.720457][ T5885] usb 6-1: device descriptor read/64, error -71 [ 83.960582][ T5885] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 84.100286][ T5885] usb 6-1: device descriptor read/64, error -71 [ 84.210788][ T5885] usb usb6-port1: attempt power cycle [ 84.550296][ T5885] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 84.571046][ T5885] usb 6-1: device descriptor read/8, error -71 [ 84.725619][ T6752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.810174][ T5885] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 84.830768][ T5885] usb 6-1: device descriptor read/8, error -71 [ 84.835816][ T6793] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 84.846707][ T6793] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 84.864110][ T6793] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 84.868977][ T6800] netlink: 'syz.0.261': attribute type 21 has an invalid length. [ 84.871525][ T6800] IPv6: NLM_F_CREATE should be specified when creating new route [ 84.879440][ T6793] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 84.887817][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 84.939792][ T6804] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 84.945002][ T6804] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 84.954237][ T6804] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 84.963615][ T5885] usb usb6-port1: unable to enumerate USB device [ 84.971883][ T6804] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.986330][ T6793] netlink: 14 bytes leftover after parsing attributes in process `syz.2.259'. [ 84.987210][ T6804] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.013090][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 85.013102][ T40] audit: type=1400 audit(1778853101.908:479): avc: denied { write } for pid=6807 comm="syz.3.264" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.050930][ T6793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.065659][ T6793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.080288][ T6793] bond0 (unregistering): Released all slaves [ 85.100177][ T34] syz1: Port: 1 Link DOWN [ 85.122612][ T6815] netlink: 'syz.0.266': attribute type 2 has an invalid length. [ 85.129104][ T12] smbdirect: ib_dev[syz1] removed [ 85.146437][ T6818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6818 comm=syz.3.267 [ 85.185178][ T40] audit: type=1400 audit(1778853102.078:480): avc: denied { view } for pid=6819 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.264673][ T40] audit: type=1400 audit(1778853102.158:481): avc: denied { block_suspend } for pid=6821 comm="syz.3.269" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xae000) [ 85.385606][ T40] audit: type=1400 audit(1778853102.278:482): avc: denied { ioctl } for pid=6830 comm="syz.0.272" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x5380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.451637][ T40] audit: type=1400 audit(1778853102.348:483): avc: denied { mount } for pid=6830 comm="syz.0.272" name="/" dev="autofs" ino=15028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 85.459726][ T40] audit: type=1400 audit(1778853102.348:484): avc: denied { read write } for pid=6830 comm="syz.0.272" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.468707][ T40] audit: type=1400 audit(1778853102.348:485): avc: denied { open } for pid=6830 comm="syz.0.272" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.476199][ T40] audit: type=1400 audit(1778853102.348:486): avc: denied { ioctl } for pid=6830 comm="syz.0.272" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 86.248698][ T40] audit: type=1400 audit(1778853103.138:487): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 86.276648][ T6841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.315502][ T40] audit: type=1400 audit(1778853103.208:488): avc: denied { create } for pid=6846 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 86.322783][ T6847] netlink: 52 bytes leftover after parsing attributes in process `syz.0.277'. [ 86.416920][ T6855] overlayfs: failed to resolve './bus': -2 [ 86.607866][ T24] cfg80211: failed to load regulatory.db [ 86.860690][ T6861] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 86.863574][ T6861] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 86.870890][ T6861] vhci_hcd vhci_hcd.0: Device attached [ 86.934860][ T6863] vhci_hcd: connection closed [ 86.938405][ T6026] vhci_hcd vhci_hcd.1: stop threads [ 86.950320][ T6026] vhci_hcd vhci_hcd.1: release socket [ 86.952638][ T6026] vhci_hcd vhci_hcd.1: disconnect device [ 87.675312][ T6885] netlink: 56 bytes leftover after parsing attributes in process `syz.0.290'. [ 87.688171][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 87.697061][ T6885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.290'. [ 87.945635][ T6904] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 88.046864][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 88.050026][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.299'. [ 88.064646][ T6912] geneve2: entered promiscuous mode [ 88.066954][ T6912] geneve2: entered allmulticast mode [ 88.250571][ T6921] binder: BC_ATTEMPT_ACQUIRE not supported [ 88.252948][ T6921] binder: 6920:6921 ioctl c0306201 200000000100 returned -22 [ 88.259726][ T6922] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 88.363107][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.367143][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.404552][ T6925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.409588][ T6925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.500562][ T6925] geneve2: left promiscuous mode [ 88.507721][ T6029] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.512637][ T6029] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.515987][ T6029] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.519260][ T6029] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.783993][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.787294][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.225301][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.227457][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 240.820294][ T41] INFO: task kworker/u32:0:12 blocked in I/O wait for more than 143 seconds. [ 240.824780][ T41] Tainted: G L syzkaller #0 [ 240.828806][ T41] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 240.831915][ T41] task:kworker/u32:0 state:D stack:20904 pid:12 tgid:12 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 240.835585][ T41] Workqueue: writeback wb_workfn (flush-8:0) [ 240.837503][ T41] Call Trace: [ 240.838582][ T41] [ 240.839530][ T41] __schedule+0x1295/0x67a0 [ 240.841163][ T41] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 240.843046][ T41] ? __blk_flush_plug+0x2f3/0x4b0 [ 240.844677][ T41] ? __pfx___schedule+0x10/0x10 [ 240.846243][ T41] ? find_held_lock+0x2b/0x80 [ 240.847773][ T41] ? schedule+0x2bf/0x390 [ 240.849131][ T41] ? rq_qos_wait+0x21c/0x330 [ 240.850721][ T41] schedule+0xdd/0x390 [ 240.852040][ T41] io_schedule+0x8a/0xf0 [ 240.853434][ T41] rq_qos_wait+0x22d/0x330 [ 240.854887][ T41] ? __pfx_rq_qos_wait+0x10/0x10 [ 240.856469][ T41] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 240.858300][ T41] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 240.859993][ T41] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.861963][ T41] wbt_wait+0x18a/0x310 [ 240.863332][ T41] ? __pfx_wbt_wait+0x10/0x10 [ 240.864877][ T41] ? bio_crypt_rq_ctx_compatible+0xd1/0x110 [ 240.866764][ T41] ? blk_attempt_bio_merge.part.0+0x155/0x4e0 [ 240.868679][ T41] ? __pfx_dd_bio_merge+0x10/0x10 [ 240.870621][ T41] ? __pfx_wbt_wait+0x10/0x10 [ 240.872183][ T41] __rq_qos_throttle+0x56/0xa0 [ 240.873838][ T41] blk_mq_submit_bio+0xb67/0x2dd0 [ 240.875479][ T41] ? __ext4_journal_stop+0xdd/0x210 [ 240.877201][ T41] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 240.878928][ T41] ? __writeback_inodes_wb+0xf8/0x2d0 [ 240.880725][ T41] ? wb_writeback+0x720/0xb90 [ 240.882243][ T41] ? wb_workfn+0x8dd/0xc00 [ 240.883664][ T41] ? worker_thread+0x5ef/0xe50 [ 240.885226][ T41] __submit_bio+0x1e1/0x6c0 [ 240.886681][ T41] ? __pfx___submit_bio+0x10/0x10 [ 240.888285][ T41] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 240.890215][ T41] ? submit_bio_noacct_nocheck+0x543/0xbf0 [ 240.892097][ T41] submit_bio_noacct_nocheck+0x543/0xbf0 [ 240.894273][ T41] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 240.896771][ T41] ? __pfx___might_resched+0x10/0x10 [ 240.898713][ T41] submit_bio_noacct+0xd18/0x2000 [ 240.900591][ T41] ext4_io_submit+0xf7/0x1a0 [ 240.902394][ T41] ext4_do_writepages+0xde6/0x3f20 [ 240.904532][ T41] ? lockdep_hardirqs_on+0x78/0x100 [ 240.906730][ T41] ? __pfx_ext4_do_writepages+0x10/0x10 [ 240.909029][ T41] ? ext4_writepages+0x347/0x790 [ 240.911187][ T41] ext4_writepages+0x347/0x790 [ 240.913244][ T41] ? __pfx_ext4_writepages+0x10/0x10 [ 240.915479][ T41] ? __pfx_ext4_writepages+0x10/0x10 [ 240.917699][ T41] do_writepages+0x278/0x600 [ 240.919607][ T41] ? __pfx_do_writepages+0x10/0x10 [ 240.921802][ T41] __writeback_single_inode+0x164/0x1350 [ 240.924150][ T41] ? find_held_lock+0x2b/0x80 [ 240.926131][ T41] ? __pfx___writeback_single_inode+0x10/0x10 [ 240.928696][ T41] ? do_raw_spin_unlock+0x145/0x1e0 [ 240.930961][ T41] writeback_sb_inodes+0x766/0x1c60 [ 240.933195][ T41] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 240.935509][ T41] ? ip6_output+0x2dc/0xa60 [ 240.937505][ T41] ? _raw_spin_unlock+0x28/0x50 [ 240.939584][ T41] ? move_expired_inodes+0x5ea/0x8f0 [ 240.941880][ T41] __writeback_inodes_wb+0xf8/0x2d0 [ 240.944055][ T41] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 240.946337][ T41] ? queue_io+0x287/0x540 [ 240.947979][ T41] wb_writeback+0x720/0xb90 [ 240.949876][ T41] ? __pfx_wb_writeback+0x10/0x10 [ 240.951950][ T41] ? get_nr_inodes+0x100/0x150 [ 240.953934][ T41] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.956122][ T41] wb_workfn+0x8dd/0xc00 [ 240.957826][ T41] ? try_to_wake_up+0x15f/0x1900 [ 240.959597][ T41] ? __pfx_wb_workfn+0x10/0x10 [ 240.961429][ T41] ? rcu_is_watching+0x12/0xc0 [ 240.963190][ T41] process_one_work+0xa0e/0x1980 [ 240.965023][ T41] ? __pfx_process_one_work+0x10/0x10 [ 240.967003][ T41] ? __pfx_wb_workfn+0x10/0x10 [ 240.968776][ T41] worker_thread+0x5ef/0xe50 [ 240.970464][ T41] ? kthread+0x13a/0x450 [ 240.971817][ T41] ? __pfx_worker_thread+0x10/0x10 [ 240.973445][ T41] kthread+0x370/0x450 [ 240.974741][ T41] ? __pfx_kthread+0x10/0x10 [ 240.976210][ T41] ret_from_fork+0x72b/0xd50 [ 240.977791][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 240.979658][ T41] ? __switch_to+0x800/0x1100 [ 240.981274][ T41] ? __pfx_kthread+0x10/0x10 [ 240.982707][ T41] ret_from_fork_asm+0x1a/0x30 [ 240.984180][ T41] [ 240.985378][ T41] INFO: task jbd2/sda1-8:5105 blocked in I/O wait for more than 143 seconds. [ 240.988543][ T41] Tainted: G L syzkaller #0 [ 240.990989][ T41] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 240.994090][ T41] task:jbd2/sda1-8 state:D stack:25752 pid:5105 tgid:5105 ppid:2 task_flags:0x240040 flags:0x00080000 [ 240.997925][ T41] Call Trace: [ 240.999001][ T41] [ 240.999981][ T41] __schedule+0x1295/0x67a0 [ 241.001512][ T41] ? __pfx___schedule+0x10/0x10 [ 241.003057][ T41] ? find_held_lock+0x2b/0x80 [ 241.004575][ T41] ? schedule+0x2bf/0x390 [ 241.005969][ T41] schedule+0xdd/0x390 [ 241.007268][ T41] io_schedule+0x8a/0xf0 [ 241.008609][ T41] bit_wait_io+0xd/0xe0 [ 241.009953][ T41] __wait_on_bit+0x65/0x180 [ 241.011440][ T41] ? __pfx_bit_wait_io+0x10/0x10 [ 241.013002][ T41] out_of_line_wait_on_bit+0xdc/0x110 [ 241.014729][ T41] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 241.016633][ T41] ? __pfx_wake_bit_function+0x10/0x10 [ 241.018355][ T41] ? __pfx___might_resched+0x10/0x10 [ 241.020150][ T41] __wait_on_buffer+0x64/0x70 [ 241.022021][ T41] jbd2_journal_commit_transaction+0x388a/0x6870 [ 241.024498][ T41] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 241.027086][ T41] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 241.029340][ T41] ? debug_object_deactivate+0x2e4/0x3b0 [ 241.031612][ T41] ? __pfx_debug_object_deactivate+0x10/0x10 [ 241.034001][ T41] ? find_held_lock+0x2b/0x80 [ 241.035853][ T41] ? __try_to_del_timer_sync+0x107/0x160 [ 241.038069][ T41] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 241.040409][ T41] ? __timer_delete_sync+0x151/0x1c0 [ 241.042469][ T41] kjournald2+0x200/0x760 [ 241.044204][ T41] ? __pfx_kjournald2+0x10/0x10 [ 241.045966][ T41] ? find_held_lock+0x2b/0x80 [ 241.047309][ T41] ? __kthread_parkme+0xbb/0x230 [ 241.048999][ T41] ? rcu_is_watching+0x12/0xc0 [ 241.050917][ T41] ? __pfx_autoremove_wake_function+0x10/0x10 [ 241.053157][ T41] ? __kthread_parkme+0x18c/0x230 [ 241.055175][ T41] ? kthread+0x13a/0x450 [ 241.056868][ T41] ? __pfx_kjournald2+0x10/0x10 [ 241.058832][ T41] kthread+0x370/0x450 [ 241.060677][ T41] ? __pfx_kthread+0x10/0x10 [ 241.062547][ T41] ret_from_fork+0x72b/0xd50 [ 241.064394][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 241.066433][ T41] ? __switch_to+0x800/0x1100 [ 241.068362][ T41] ? __pfx_kthread+0x10/0x10 [ 241.070413][ T41] ret_from_fork_asm+0x1a/0x30 [ 241.072324][ T41] [ 241.073531][ T41] INFO: task syz-executor:5722 blocked in I/O wait for more than 143 seconds. [ 241.077064][ T41] Tainted: G L syzkaller #0 [ 241.079604][ T41] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 241.083106][ T41] task:syz-executor state:D stack:22496 pid:5722 tgid:5722 ppid:5721 task_flags:0x440100 flags:0x00080000 [ 241.087919][ T41] Call Trace: [ 241.089372][ T41] [ 241.090697][ T41] __schedule+0x1295/0x67a0 [ 241.092583][ T41] ? __pfx___schedule+0x10/0x10 [ 241.094593][ T41] ? find_held_lock+0x2b/0x80 [ 241.096504][ T41] ? schedule+0x2bf/0x390 [ 241.098303][ T41] schedule+0xdd/0x390 [ 241.099934][ T41] io_schedule+0x8a/0xf0 [ 241.101806][ T41] bit_wait_io+0xd/0xe0 [ 241.103519][ T41] __wait_on_bit+0x65/0x180 [ 241.105423][ T41] ? __pfx_bit_wait_io+0x10/0x10 [ 241.107469][ T41] out_of_line_wait_on_bit+0xdc/0x110 [ 241.109668][ T41] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 241.112287][ T41] ? __pfx_wake_bit_function+0x10/0x10 [ 241.114599][ T41] do_get_write_access+0x84f/0x1220 [ 241.116724][ T41] jbd2_journal_get_write_access+0x1d6/0x280 [ 241.119159][ T41] __ext4_journal_get_write_access+0x6a/0x340 [ 241.121809][ T41] ext4_reserve_inode_write+0x1b7/0x330 [ 241.124039][ T41] __ext4_mark_inode_dirty+0x18f/0x890 [ 241.126276][ T41] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 241.128708][ T41] ? trace_jbd2_handle_start+0x82/0x260 [ 241.131167][ T41] ? jbd2__journal_start+0xf7/0x6a0 [ 241.133296][ T41] ? __ext4_journal_start_sb+0x36d/0x670 [ 241.135534][ T41] ? __ext4_journal_start_sb+0x1ce/0x670 [ 241.137908][ T41] ? ext4_dirty_inode+0xa1/0x130 [ 241.139976][ T41] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 241.142316][ T41] ext4_dirty_inode+0xd9/0x130 [ 241.144397][ T41] ? rcu_is_watching+0x12/0xc0 [ 241.146397][ T41] __mark_inode_dirty+0x1f3/0x1720 [ 241.148486][ T41] file_update_time_flags+0x46b/0x500 [ 241.150807][ T41] ext4_page_mkwrite+0x324/0x1890 [ 241.152874][ T41] ? tcp_recvmsg+0x14c/0x630 [ 241.154797][ T41] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 241.157065][ T41] ? vm_normal_page+0x1d5/0x390 [ 241.159078][ T41] ? find_held_lock+0x2b/0x80 [ 241.161181][ T41] ? rcu_read_unlock+0x2d/0xb0 [ 241.163217][ T41] do_page_mkwrite+0x17a/0x440 [ 241.165272][ T41] do_wp_page+0xa77/0x4350 [ 241.167249][ T41] ? __pfx_do_wp_page+0x10/0x10 [ 241.169250][ T41] ? do_raw_spin_lock+0x128/0x260 [ 241.171372][ T41] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 241.173535][ T41] __handle_mm_fault+0x1ab6/0x2a00 [ 241.175577][ T41] ? reacquire_held_locks+0xce/0x1e0 [ 241.177763][ T41] ? __pfx___handle_mm_fault+0x10/0x10 [ 241.179958][ T41] ? lock_vma_under_rcu+0x17c/0x590 [ 241.182283][ T41] handle_mm_fault+0x36d/0xa20 [ 241.184287][ T41] do_user_addr_fault+0x5a3/0x12f0 [ 241.186416][ T41] exc_page_fault+0x6f/0xd0 [ 241.188209][ T41] asm_exc_page_fault+0x26/0x30 [ 241.190328][ T41] RIP: 0033:0x7f0dae47b467 [ 241.192181][ T41] RSP: 002b:00007ffc6fd97170 EFLAGS: 00010202 [ 241.194666][ T41] RAX: 00007f0dac350000 RBX: 00005555690f7af0 RCX: 0000000000000007 [ 241.197831][ T41] RDX: 0000000000003d93 RSI: 00005555690e9ac8 RDI: 0000000000000080 [ 241.201158][ T41] RBP: 00007ffc6fd97670 R08: 0000000000000099 R09: 00005555690e9ad8 [ 241.204418][ T41] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc6fd974b0 [ 241.207725][ T41] R13: 00007ffc6fd972a0 R14: 585858582e7a7973 R15: 00007ffc6fd971f0 [ 241.211144][ T41] [ 241.212584][ T41] INFO: task syz.2.306:6934 blocked in I/O wait for more than 143 seconds. [ 241.216096][ T41] Tainted: G L syzkaller #0 [ 241.218677][ T41] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 241.222238][ T41] task:syz.2.306 state:D stack:27736 pid:6934 tgid:6934 ppid:5738 task_flags:0x440040 flags:0x00080002 [ 241.230212][ T41] Call Trace: [ 241.231357][ T41] [ 241.232275][ T41] __schedule+0x1295/0x67a0 [ 241.233723][ T41] ? __pfx___schedule+0x10/0x10 [ 241.235282][ T41] ? find_held_lock+0x2b/0x80 [ 241.236765][ T41] ? schedule+0x2bf/0x390 [ 241.238213][ T41] schedule+0xdd/0x390 [ 241.239527][ T41] io_schedule+0x8a/0xf0 [ 241.241318][ T41] bit_wait_io+0xd/0xe0 [ 241.242634][ T41] __wait_on_bit+0x65/0x180 [ 241.244114][ T41] ? __pfx_bit_wait_io+0x10/0x10 [ 241.245687][ T41] out_of_line_wait_on_bit+0xdc/0x110 [ 241.247560][ T41] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 241.249472][ T41] ? __pfx_wake_bit_function+0x10/0x10 [ 241.251826][ T41] do_get_write_access+0x84f/0x1220 [ 241.253549][ T41] jbd2_journal_get_write_access+0x1d6/0x280 [ 241.255551][ T41] __ext4_journal_get_write_access+0x6a/0x340 [ 241.257458][ T41] ext4_reserve_inode_write+0x1b7/0x330 [ 241.259264][ T41] __ext4_mark_inode_dirty+0x18f/0x890 [ 241.261278][ T41] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 241.263157][ T41] ? trace_jbd2_handle_start+0x82/0x260 [ 241.265000][ T41] ? jbd2__journal_start+0xf7/0x6a0 [ 241.266883][ T41] ? __ext4_journal_start_sb+0x36d/0x670 [ 241.269181][ T41] ? __ext4_journal_start_sb+0x1ce/0x670 [ 241.271689][ T41] ? ext4_dirty_inode+0xa1/0x130 [ 241.273827][ T41] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 241.276067][ T41] ext4_dirty_inode+0xd9/0x130 [ 241.277998][ T41] ? rcu_is_watching+0x12/0xc0 [ 241.279986][ T41] __mark_inode_dirty+0x1f3/0x1720 [ 241.282225][ T41] file_update_time_flags+0x46b/0x500 [ 241.284460][ T41] ext4_page_mkwrite+0x324/0x1890 [ 241.286579][ T41] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 241.288727][ T41] do_page_mkwrite+0x17a/0x440 [ 241.290734][ T41] ? __pfx_filemap_map_pages+0x10/0x10 [ 241.292928][ T41] do_fault+0x3b5/0x1750 [ 241.294727][ T41] ? __pmd_alloc+0x3fb/0x950 [ 241.296554][ T41] __handle_mm_fault+0x187d/0x2a00 [ 241.298517][ T41] ? reacquire_held_locks+0xce/0x1e0 [ 241.300640][ T41] ? __pfx___handle_mm_fault+0x10/0x10 [ 241.302745][ T41] ? lock_vma_under_rcu+0x17c/0x590 [ 241.304865][ T41] handle_mm_fault+0x36d/0xa20 [ 241.306861][ T41] do_user_addr_fault+0x5a3/0x12f0 [ 241.308959][ T41] exc_page_fault+0x6f/0xd0 [ 241.310960][ T41] asm_exc_page_fault+0x26/0x30 [ 241.312988][ T41] RIP: 0033:0x7fb43b46a903 [ 241.314885][ T41] RSP: 002b:00007fff7057b7a0 EFLAGS: 00010246 [ 241.317414][ T41] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b33264000 [ 241.320717][ T41] RDX: 0000001b33224000 RSI: 0000000000400000 RDI: 00007fb43b7db710 [ 241.323930][ T41] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.326983][ T41] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 241.330235][ T41] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff7057ba30 [ 241.333468][ T41] [ 241.334781][ T41] INFO: task syz.1.307:6936 blocked in I/O wait for more than 143 seconds. [ 241.338177][ T41] Tainted: G L syzkaller #0 [ 241.340914][ T41] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 241.344342][ T41] task:syz.1.307 state:D stack:27264 pid:6936 tgid:6936 ppid:5746 task_flags:0x440040 flags:0x00080002 [ 241.349087][ T41] Call Trace: [ 241.350581][ T41] [ 241.351824][ T41] __schedule+0x1295/0x67a0 [ 241.353844][ T41] ? mark_held_locks+0x40/0x70 [ 241.355844][ T41] ? __pfx___schedule+0x10/0x10 [ 241.357837][ T41] ? find_held_lock+0x2b/0x80 [ 241.359802][ T41] ? schedule+0x2bf/0x390 [ 241.361843][ T41] schedule+0xdd/0x390 [ 241.363546][ T41] io_schedule+0x8a/0xf0 [ 241.365385][ T41] bit_wait_io+0xd/0xe0 [ 241.367111][ T41] __wait_on_bit+0x65/0x180 [ 241.368981][ T41] ? __pfx_bit_wait_io+0x10/0x10 [ 241.371131][ T41] out_of_line_wait_on_bit+0xdc/0x110 [ 241.373351][ T41] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 241.375807][ T41] ? __pfx_wake_bit_function+0x10/0x10 [ 241.378069][ T41] do_get_write_access+0x84f/0x1220 [ 241.380311][ T41] jbd2_journal_get_write_access+0x1d6/0x280 [ 241.382790][ T41] __ext4_journal_get_write_access+0x6a/0x340 [ 241.385333][ T41] ext4_reserve_inode_write+0x1b7/0x330 [ 241.387611][ T41] __ext4_mark_inode_dirty+0x18f/0x890 [ 241.389852][ T41] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 241.392435][ T41] ? trace_jbd2_handle_start+0x82/0x260 [ 241.394741][ T41] ? jbd2__journal_start+0xf7/0x6a0 [ 241.396897][ T41] ? __ext4_journal_start_sb+0x36d/0x670 [ 241.399207][ T41] ? __ext4_journal_start_sb+0x1ce/0x670 [ 241.401660][ T41] ? ext4_dirty_inode+0xa1/0x130 [ 241.403726][ T41] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 241.405958][ T41] ext4_dirty_inode+0xd9/0x130 [ 241.407956][ T41] ? rcu_is_watching+0x12/0xc0 [ 241.409946][ T41] __mark_inode_dirty+0x1f3/0x1720 [ 241.412197][ T41] touch_atime+0x642/0x7a0 [ 241.414064][ T41] ext4_file_mmap_prepare+0x56d/0x670 [ 241.416305][ T41] ? __pfx_ext4_file_mmap_prepare+0x10/0x10 [ 241.418739][ T41] __mmap_region+0xe98/0x2da0 [ 241.420793][ T41] ? __pfx___mmap_region+0x10/0x10 [ 241.422885][ T41] ? post_alloc_hook+0x140/0x170 [ 241.424994][ T41] ? __pfx___might_resched+0x10/0x10 [ 241.427186][ T41] ? rcu_is_watching+0x12/0xc0 [ 241.429169][ T41] ? trace_mm_page_alloc+0x163/0x1d0 [ 241.431438][ T41] ? find_held_lock+0x2b/0x80 [ 241.433406][ T41] ? is_bpf_text_address+0x8a/0x1a0 [ 241.435590][ T41] ? is_bpf_text_address+0x8a/0x1a0 [ 241.437771][ T41] ? __lock_acquire+0x4a5/0x2630 [ 241.439810][ T41] ? __pfx_mt_find+0x10/0x10 [ 241.441863][ T41] mmap_region+0x527/0x620 [ 241.443719][ T41] ? __pfx_mmap_region+0x10/0x10 [ 241.445791][ T41] ? __pfx_find_vma_intersection+0x10/0x10 [ 241.448126][ T41] ? security_mmap_addr+0x71/0x1e0 [ 241.450393][ T41] ? __get_unmapped_area+0x255/0x3e0 [ 241.452579][ T41] do_mmap+0xc63/0x12f0 [ 241.454359][ T41] ? __pfx_do_mmap+0x10/0x10 [ 241.456309][ T41] ? __pfx_down_write_killable+0x10/0x10 [ 241.458648][ T41] vm_mmap_pgoff+0x29e/0x470 [ 241.460713][ T41] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 241.462844][ T41] ? __fget_files+0x215/0x3d0 [ 241.464795][ T41] ? __fget_files+0x21f/0x3d0 [ 241.466779][ T41] ksys_mmap_pgoff+0x3cb/0x610 [ 241.468755][ T41] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 241.471073][ T41] ? __do_sys_prctl+0x187/0x2310 [ 241.473186][ T41] ? __pfx___do_sys_prctl+0x10/0x10 [ 241.475364][ T41] __x64_sys_mmap+0x125/0x190 [ 241.477323][ T41] do_syscall_64+0x10b/0xf80 [ 241.479235][ T41] ? clear_bhb_loop+0x40/0x90 [ 241.481301][ T41] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.483741][ T41] RIP: 0033:0x7f930e39cbc2 [ 241.485618][ T41] RSP: 002b:00007ffe7462b9b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 241.489044][ T41] RAX: ffffffffffffffda RBX: 0000001b33164000 RCX: 00007f930e39cbc2 [ 241.492418][ T41] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b33164000 [ 241.495684][ T41] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 241.498867][ T41] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000043 [ 241.502064][ T41] R13: 00000000000927c0 R14: 0000000000015a66 R15: 00007ffe7462bc90 [ 241.505388][ T41] [ 241.506717][ T41] INFO: task syz.3.308:6937 blocked in I/O wait for more than 144 seconds. [ 241.510338][ T41] Tainted: G L syzkaller #0 [ 241.512806][ T41] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 241.516356][ T41] task:syz.3.308 state:D stack:27880 pid:6937 tgid:6937 ppid:5736 task_flags:0x440040 flags:0x00080002 [ 241.521232][ T41] Call Trace: [ 241.522599][ T41] [ 241.523839][ T41] __schedule+0x1295/0x67a0 [ 241.525733][ T41] ? __pfx___schedule+0x10/0x10 [ 241.527783][ T41] ? find_held_lock+0x2b/0x80 [ 241.529779][ T41] ? schedule+0x2bf/0x390 [ 241.531668][ T41] schedule+0xdd/0x390 [ 241.533531][ T41] io_schedule+0x8a/0xf0 [ 241.535330][ T41] bit_wait_io+0xd/0xe0 [ 241.537039][ T41] __wait_on_bit+0x65/0x180 [ 241.538957][ T41] ? __pfx_bit_wait_io+0x10/0x10 [ 241.541292][ T41] out_of_line_wait_on_bit+0xdc/0x110 [ 241.543587][ T41] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 241.546058][ T41] ? __pfx_wake_bit_function+0x10/0x10 [ 241.548278][ T41] do_get_write_access+0x84f/0x1220 [ 241.550524][ T41] jbd2_journal_get_write_access+0x1d6/0x280 [ 241.553010][ T41] __ext4_journal_get_write_access+0x6a/0x340 [ 241.555494][ T41] ext4_reserve_inode_write+0x1b7/0x330 [ 241.557738][ T41] __ext4_mark_inode_dirty+0x18f/0x890 [ 241.559968][ T41] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 241.562580][ T41] ? trace_jbd2_handle_start+0x82/0x260 [ 241.564888][ T41] ? jbd2__journal_start+0xf7/0x6a0 [ 241.567077][ T41] ? __ext4_journal_start_sb+0x36d/0x670 [ 241.569398][ T41] ? __ext4_journal_start_sb+0x1ce/0x670 [ 241.571780][ T41] ? ext4_dirty_inode+0xa1/0x130 [ 241.573837][ T41] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 241.576044][ T41] ext4_dirty_inode+0xd9/0x130 [ 241.577984][ T41] ? rcu_is_watching+0x12/0xc0 [ 241.579930][ T41] __mark_inode_dirty+0x1f3/0x1720 [ 241.582049][ T41] file_update_time_flags+0x46b/0x500 [ 241.584317][ T41] ext4_page_mkwrite+0x324/0x1890 [ 241.586385][ T41] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 241.588578][ T41] do_page_mkwrite+0x17a/0x440 [ 241.590680][ T41] ? __pfx_filemap_map_pages+0x10/0x10 [ 241.592971][ T41] do_fault+0x3b5/0x1750 [ 241.594743][ T41] ? __pmd_alloc+0x3fb/0x950 [ 241.596665][ T41] __handle_mm_fault+0x187d/0x2a00 [ 241.598747][ T41] ? reacquire_held_locks+0xce/0x1e0 [ 241.601028][ T41] ? __pfx___handle_mm_fault+0x10/0x10 [ 241.603176][ T41] ? lock_vma_under_rcu+0x17c/0x590 [ 241.605397][ T41] handle_mm_fault+0x36d/0xa20 [ 241.607364][ T41] do_user_addr_fault+0x5a3/0x12f0 [ 241.609505][ T41] exc_page_fault+0x6f/0xd0 [ 241.611491][ T41] asm_exc_page_fault+0x26/0x30 [ 241.613489][ T41] RIP: 0033:0x7f046506a903 [ 241.615305][ T41] RSP: 002b:00007ffcf9c95c00 EFLAGS: 00010246 [ 241.617811][ T41] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 241.621219][ T41] RDX: 0000001b33324000 RSI: 0000000000040000 RDI: 00007f04653db710 [ 241.624515][ T41] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.627783][ T41] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 241.631089][ T41] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcf9c95e90 [ 241.634388][ T41] [ 241.635721][ T41] INFO: task syz.0.309:6938 blocked in I/O wait for more than 144 seconds. [ 241.639179][ T41] Tainted: G L syzkaller #0 [ 241.641993][ T41] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 241.645496][ T41] task:syz.0.309 state:D stack:28424 pid:6938 tgid:6938 ppid:5737 task_flags:0x440040 flags:0x00080002 [ 241.650404][ T41] Call Trace: [ 241.651795][ T41] [ 241.653014][ T41] __schedule+0x1295/0x67a0 [ 241.654960][ T41] ? __pfx___schedule+0x10/0x10 [ 241.657166][ T41] ? find_held_lock+0x2b/0x80 [ 241.659123][ T41] ? schedule+0x2bf/0x390 [ 241.661046][ T41] schedule+0xdd/0x390 [ 241.662794][ T41] io_schedule+0x8a/0xf0 [ 241.664590][ T41] bit_wait_io+0xd/0xe0 [ 241.666335][ T41] __wait_on_bit+0x65/0x180 [ 241.668213][ T41] ? __pfx_bit_wait_io+0x10/0x10 [ 241.670395][ T41] out_of_line_wait_on_bit+0xdc/0x110 [ 241.672631][ T41] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 241.675127][ T41] ? __pfx_wake_bit_function+0x10/0x10 [ 241.677378][ T41] do_get_write_access+0x84f/0x1220 [ 241.679492][ T41] jbd2_journal_get_write_access+0x1d6/0x280 [ 241.682120][ T41] __ext4_journal_get_write_access+0x6a/0x340 [ 241.684611][ T41] ext4_reserve_inode_write+0x1b7/0x330 [ 241.686896][ T41] __ext4_mark_inode_dirty+0x18f/0x890 [ 241.689124][ T41] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 241.691643][ T41] ? trace_jbd2_handle_start+0x82/0x260 [ 241.693958][ T41] ? jbd2__journal_start+0xf7/0x6a0 [ 241.696218][ T41] ? __ext4_journal_start_sb+0x36d/0x670 [ 241.698810][ T41] ? __ext4_journal_start_sb+0x1ce/0x670 [ 241.701280][ T41] ? ext4_dirty_inode+0xa1/0x130 [ 241.703285][ T41] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 241.705497][ T41] ext4_dirty_inode+0xd9/0x130 [ 241.707458][ T41] ? rcu_is_watching+0x12/0xc0 [ 241.709455][ T41] __mark_inode_dirty+0x1f3/0x1720 [ 241.711650][ T41] file_update_time_flags+0x46b/0x500 [ 241.713903][ T41] ext4_page_mkwrite+0x324/0x1890 [ 241.715958][ T41] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 241.717708][ T41] do_page_mkwrite+0x17a/0x440 [ 241.719193][ T41] ? __pfx_filemap_map_pages+0x10/0x10 [ 241.721498][ T41] do_fault+0x3b5/0x1750 [ 241.723219][ T41] ? __pmd_alloc+0x3fb/0x950 [ 241.725052][ T41] __handle_mm_fault+0x187d/0x2a00 [ 241.727075][ T41] ? reacquire_held_locks+0xce/0x1e0 [ 241.729236][ T41] ? __pfx___handle_mm_fault+0x10/0x10 [ 241.731506][ T41] ? lock_vma_under_rcu+0x17c/0x590 [ 241.733719][ T41] handle_mm_fault+0x36d/0xa20 [ 241.735734][ T41] do_user_addr_fault+0x5a3/0x12f0 [ 241.737868][ T41] exc_page_fault+0x6f/0xd0 [ 241.739741][ T41] asm_exc_page_fault+0x26/0x30 [ 241.741833][ T41] RIP: 0033:0x7fa04e06a903 [ 241.743674][ T41] RSP: 002b:00007fff71999010 EFLAGS: 00010246 [ 241.746185][ T41] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 241.749387][ T41] RDX: 0000001b33024000 RSI: 0000000000040000 RDI: 00007fa04e3db710 [ 241.752529][ T41] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.755761][ T41] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 241.758986][ T41] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff719992a0 [ 241.762285][ T41] [ 241.763557][ T41] [ 241.763557][ T41] Showing all locks held in the system: [ 241.766679][ T41] 4 locks held by kworker/u32:0/12: [ 241.768847][ T41] #0: ffff88801cea3140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 241.773324][ T41] #1: ffffc900000f7d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 241.778065][ T41] #2: ffff88802c55e0d8 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 241.782495][ T41] #3: ffff88802d402c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 241.786743][ T41] 1 lock held by khungtaskd/41: [ 241.788718][ T41] #0: ffffffff8e7e57a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 241.792842][ T41] 2 locks held by getty/5536: [ 241.794735][ T41] #0: ffff88801bfde0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 241.798660][ T41] #1: ffffc9000337b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 241.802825][ T41] 3 locks held by syz-executor/5722: [ 241.805005][ T41] #0: ffff88803ead6088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 241.808717][ T41] #1: ffff88802c55e508 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 241.812631][ T41] #2: ffff88802ccfc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 241.816544][ T41] 5 locks held by kworker/u32:22/6032: [ 241.818765][ T41] 1 lock held by dhcpcd-run-hook/6857: [ 241.821179][ T41] #0: ffff888012f50e70 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x83f/0x2e90 [ 241.825455][ T41] 3 locks held by syz.2.306/6934: [ 241.827516][ T41] #0: ffff88803e91ea88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 241.831362][ T41] #1: ffff88802c55e508 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 241.835189][ T41] #2: ffff88802ccfc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 241.839112][ T41] 3 locks held by syz.1.307/6936: [ 241.841287][ T41] #0: ffff88803f88c078 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 241.845146][ T41] #1: ffff88802c55e410 (sb_writers#5){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x56d/0x670 [ 241.849157][ T41] #2: ffff88802ccfc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 241.853124][ T41] 3 locks held by syz.3.308/6937: [ 241.855206][ T41] #0: ffff88803ead6588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 241.858901][ T41] #1: ffff88802c55e508 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 241.862749][ T41] #2: ffff88802ccfc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 241.866643][ T41] 3 locks held by syz.0.309/6938: [ 241.868691][ T41] #0: ffff88802f57c308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 241.872518][ T41] #1: ffff88802c55e508 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 241.876300][ T41] #2: ffff88802ccfc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 241.880204][ T41] [ 241.881206][ T41] ============================================= [ 241.881206][ T41] [ 241.884540][ T41] NMI backtrace for cpu 1 [ 241.884558][ T41] CPU: 1 UID: 0 PID: 41 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 241.884582][ T41] Tainted: [L]=SOFTLOCKUP [ 241.884590][ T41] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.884599][ T41] Call Trace: [ 241.884609][ T41] [ 241.884616][ T41] dump_stack_lvl+0x100/0x190 [ 241.884643][ T41] nmi_cpu_backtrace.cold+0x12d/0x151 [ 241.884667][ T41] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 241.884689][ T41] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 241.884712][ T41] sys_info+0x141/0x190 [ 241.884739][ T41] watchdog+0xcb1/0x1030 [ 241.884765][ T41] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 241.884789][ T41] ? __pfx_watchdog+0x10/0x10 [ 241.884810][ T41] ? __kthread_parkme+0x18c/0x230 [ 241.884832][ T41] ? kthread+0x13a/0x450 [ 241.884851][ T41] ? __pfx_watchdog+0x10/0x10 [ 241.884869][ T41] kthread+0x370/0x450 [ 241.884890][ T41] ? __pfx_kthread+0x10/0x10 [ 241.884913][ T41] ret_from_fork+0x72b/0xd50 [ 241.884937][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 241.884960][ T41] ? __switch_to+0x800/0x1100 [ 241.884987][ T41] ? __pfx_kthread+0x10/0x10 [ 241.885009][ T41] ret_from_fork_asm+0x1a/0x30 [ 241.885044][ T41] [ 241.885050][ T41] Sending NMI from CPU 1 to CPUs 0,2-3: [ 241.938327][ C0] NMI backtrace for cpu 0 [ 241.938344][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.938358][ C0] Tainted: [L]=SOFTLOCKUP [ 241.938361][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.938367][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 241.938386][ C0] Code: c6 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 e1 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 241.938396][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000202 [ 241.938405][ C0] RAX: 000000000015719d RBX: ffffffff8e4955c0 RCX: ffffffff8b8ab095 [ 241.938411][ C0] RDX: 0000000000000000 RSI: ffffffff8df21e52 RDI: ffffffff8c1c3800 [ 241.938420][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d4867b5 [ 241.938426][ C0] R10: ffff88806a433dab R11: 0000000000000000 R12: 0000000000000000 [ 241.938431][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d7c150 [ 241.938437][ C0] FS: 0000000000000000(0000) GS:ffff8880d6370000(0000) knlGS:0000000000000000 [ 241.938459][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.938467][ C0] CR2: 0000563b88c45470 CR3: 000000000e596000 CR4: 0000000000352ef0 [ 241.938473][ C0] Call Trace: [ 241.938477][ C0] [ 241.938481][ C0] default_idle+0x9/0x10 [ 241.938496][ C0] default_idle_call+0x6c/0xb0 [ 241.938504][ C0] do_idle+0x464/0x590 [ 241.938515][ C0] ? __pfx_do_idle+0x10/0x10 [ 241.938523][ C0] ? finish_task_switch.isra.0+0x152/0x1010 [ 241.938535][ C0] cpu_startup_entry+0x4f/0x60 [ 241.938549][ C0] rest_init+0x251/0x260 [ 241.938558][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 241.938579][ C0] start_kernel+0x484/0x490 [ 241.938594][ C0] x86_64_start_reservations+0x24/0x30 [ 241.938608][ C0] x86_64_start_kernel+0x12b/0x130 [ 241.938622][ C0] common_startup_64+0x13e/0x148 [ 241.938639][ C0] [ 241.938645][ C3] NMI backtrace for cpu 3 [ 241.938656][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.938673][ C3] Tainted: [L]=SOFTLOCKUP [ 241.938677][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.938682][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 241.938699][ C3] Code: c6 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 e1 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 241.938708][ C3] RSP: 0018:ffffc90000197df0 EFLAGS: 00000202 [ 241.938716][ C3] RAX: 0000000000098ad5 RBX: ffff88801ee92500 RCX: ffffffff8b8ab095 [ 241.938722][ C3] RDX: 0000000000000000 RSI: ffffffff8df21e52 RDI: ffffffff8c1c3800 [ 241.938728][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d4e67b5 [ 241.938733][ C3] R10: ffff88806a733dab R11: 0000000000000000 R12: 0000000000000003 [ 241.938739][ C3] R13: ffffed1003dd24a0 R14: 0000000000000003 R15: ffffffff90d7c150 [ 241.938744][ C3] FS: 0000000000000000(0000) GS:ffff8880d6670000(0000) knlGS:0000000000000000 [ 241.938766][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.938774][ C3] CR2: 00007f848454a6e8 CR3: 00000000389ed000 CR4: 0000000000352ef0 [ 241.938780][ C3] Call Trace: [ 241.938784][ C3] [ 241.938787][ C3] default_idle+0x9/0x10 [ 241.938801][ C3] default_idle_call+0x6c/0xb0 [ 241.938809][ C3] do_idle+0x464/0x590 [ 241.938820][ C3] ? __pfx_do_idle+0x10/0x10 [ 241.938828][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 241.938841][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 241.938854][ C3] cpu_startup_entry+0x4f/0x60 [ 241.938863][ C3] start_secondary+0x21d/0x2d0 [ 241.938875][ C3] ? __pfx_start_secondary+0x10/0x10 [ 241.938886][ C3] common_startup_64+0x13e/0x148 [ 241.938903][ C3] [ 241.938908][ C2] NMI backtrace for cpu 2 [ 241.938924][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.938946][ C2] Tainted: [L]=SOFTLOCKUP [ 241.938952][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.938961][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 241.938984][ C2] Code: c6 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 e1 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 241.939000][ C2] RSP: 0018:ffffc90000187df0 EFLAGS: 00000206 [ 241.939018][ C2] RAX: 00000000001807eb RBX: ffff88801ee94a00 RCX: ffffffff8b8ab095 [ 241.939029][ C2] RDX: 0000000000000000 RSI: ffffffff8df21e52 RDI: ffffffff8c1c3800 [ 241.939039][ C2] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d4c67b5 [ 241.939049][ C2] R10: ffff88806a633dab R11: 0000000000000000 R12: 0000000000000002 [ 241.939058][ C2] R13: ffffed1003dd2940 R14: 0000000000000002 R15: ffffffff90d7c150 [ 241.939069][ C2] FS: 0000000000000000(0000) GS:ffff8880d6570000(0000) knlGS:0000000000000000 [ 241.939100][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.939112][ C2] CR2: 0000563b88c2cd48 CR3: 00000000389ed000 CR4: 0000000000352ef0 [ 241.939123][ C2] Call Trace: [ 241.939129][ C2] [ 241.939134][ C2] default_idle+0x9/0x10 [ 241.939158][ C2] default_idle_call+0x6c/0xb0 [ 241.939171][ C2] do_idle+0x464/0x590 [ 241.939188][ C2] ? __pfx_do_idle+0x10/0x10 [ 241.939201][ C2] ? finish_task_switch.isra.0+0x152/0x1010 [ 241.939222][ C2] cpu_startup_entry+0x4f/0x60 [ 241.939238][ C2] start_secondary+0x21d/0x2d0 [ 241.939257][ C2] ? __pfx_start_secondary+0x10/0x10 [ 241.939278][ C2] common_startup_64+0x13e/0x148 [ 241.939306][ C2] [ 241.940295][ T41] Kernel panic - not syncing: hung_task: blocked tasks [ 241.940311][ T41] CPU: 1 UID: 0 PID: 41 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 241.940336][ T41] Tainted: [L]=SOFTLOCKUP [ 241.940342][ T41] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.940353][ T41] Call Trace: [ 241.940360][ T41] [ 241.940368][ T41] dump_stack_lvl+0x100/0x190 [ 241.940394][ T41] vpanic+0x552/0x970 [ 241.940412][ T41] ? __pfx_vpanic+0x10/0x10 [ 241.940430][ T41] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 241.940451][ T41] ? rcu_is_watching+0x12/0xc0 [ 241.940478][ T41] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 241.940501][ T41] panic+0xd1/0xe0 [ 241.940524][ T41] ? __pfx_panic+0x10/0x10 [ 241.940544][ T41] ? wq_watchdog_touch+0xec/0x1a0 [ 241.940568][ T41] ? nmi_trigger_cpumask_backtrace+0x1be/0x230 [ 241.940585][ T41] ? watchdog.cold+0x1ec/0x234 [ 241.940606][ T41] ? watchdog+0xcc1/0x1030 [ 241.940630][ T41] watchdog.cold+0x1fd/0x234 [ 241.940654][ T41] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 241.940678][ T41] ? __pfx_watchdog+0x10/0x10 [ 241.940699][ T41] ? __kthread_parkme+0x18c/0x230 [ 241.940718][ T41] ? kthread+0x13a/0x450 [ 241.940738][ T41] ? __pfx_watchdog+0x10/0x10 [ 241.940758][ T41] kthread+0x370/0x450 [ 241.940794][ T41] ? __pfx_kthread+0x10/0x10 [ 241.940818][ T41] ret_from_fork+0x72b/0xd50 [ 241.940842][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 241.940867][ T41] ? __switch_to+0x800/0x1100 [ 241.940894][ T41] ? __pfx_kthread+0x10/0x10 [ 241.940916][ T41] ret_from_fork_asm+0x1a/0x30 [ 241.940951][ T41] [ 242.172918][ T41] Kernel Offset: disabled [ 242.174300][ T41] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:54:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000156307 RBX=ffffffff8e4955c0 RCX=ffffffff8b8ab095 RDX=0000000000000000 RSI=ffffffff8df21e52 RDI=ffffffff8c1c3800 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed100d4867b5 R10=ffff88806a433dab R11=0000000000000000 R12=0000000000000000 R13=fffffbfff1c92ab8 R14=0000000000000000 R15=ffffffff90d7c150 RIP=ffffffff8b8a987f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6370000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563b88c45470 CR3=000000000e596000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f1000000 Opmask01=000000000000ffff Opmask02=00000000ffff7fdf Opmask03=0000000000400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f542aaf26cb2bc9a cce7c71043cd8143 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 56777cdc9c616ca3 c325e76c18893bd1 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8e86c297b5b3dc63 f04a88f11e0f2c51 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f5a76280a33fbd14 b44ed7dc58e6de2b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 805c5496df4ab345 94360851cb1640f0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e45776b8ff66021b 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d1cafd3bc5a3d103 45a3e6ae69aebe9e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e9b90b9200000000 f9795843d6532b4b ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 05ac9470206f386e cdd2c1e4bdb36b48 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1baf732b883fe945 116b6c15aa71a303 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563b88c35df0 0000563b88c80600 0000563b88c3cc40 0000563b88c2bb10 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8483ff1b40 0000563eeb7a41f3 0000000000000031 0000000000000031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000281 0000000000000070 000000000000322d 6332692f7665642d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857e4f75 RDI=ffffffff9b4761c0 RBP=ffffffff9b476180 RSP=ffffc9000079f8a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000005d R14=0000000000000010 R15=ffffffff857e4f10 RIP=ffffffff857e4f9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6470000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563b88c2cd48 CR3=000000003f975000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8b898047 ffffffff8abcfd04 0000000100000004 0000000600040008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8b895fdb ffffffff8b89819b ffffffff81b916a0 ffffffff8b898707 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81b9157d ffffffff8b8963b9 ffffffff8b89883b ffffffff8b895ff7 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8b897147 ffffffff8b89650a ffffffff8b898294 ffffffff8b898774 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8b8964a4 ffffffff81b915cf ffffffff8b896b46 ffffffff81b91482 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8b895fc1 ffffffff8b8970dc ffffffff8b897109 ffffffff81b914fb ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8b89753f ffffffff8b896039 ffffffff8b8963a1 ffffffff8b89643d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81b915b0 ffffffff8b896425 ffffffff81b9151d ffffffff81b914d1 ZMM25=0d0ac09b0d0ac09b 0d0ac09b0d0ac09b 0d0ac09b0d0ac09b 0d0ac09b0d0ac09b 0d0ac09b0d0ac09b 0d0ac09b0d0ac09b 0d0ac09b0d0ac09b 0d0ac09b0d0ac09b ZMM26=455ef1f9455ef1f9 455ef1f9455ef1f9 455ef1f9455ef1f9 455ef1f9455ef1f9 455ef1f9455ef1f9 455ef1f9455ef1f9 455ef1f9455ef1f9 455ef1f9455ef1f9 ZMM27=25ae9eef25ae9eef 25ae9eef25ae9eef 25ae9eef25ae9eef 25ae9eef25ae9eef 25ae9eef25ae9eef 25ae9eef25ae9eef 25ae9eef25ae9eef 25ae9eef25ae9eef ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9402000094020000 9402000094020000 9402000094020000 9402000094020000 9402000094020000 9402000094020000 9402000094020000 9402000094020000 info registers vcpu 2 CPU#2 RAX=000000000017f3bf RBX=ffff88801ee94a00 RCX=ffffffff8b8ab095 RDX=0000000000000000 RSI=ffffffff8df21e52 RDI=ffffffff8c1c3800 RBP=0000000000000000 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c67b5 R10=ffff88806a633dab R11=0000000000000000 R12=0000000000000002 R13=ffffed1003dd2940 R14=0000000000000002 R15=ffffffff90d7c150 RIP=ffffffff8b8a987f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6570000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563b88c2cd48 CR3=000000000e596000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010444000 Opmask01=0000000000000001 Opmask02=00000000fffffbff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6da22570f8acd0dc 1bb57597703df5b0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 135d15289b9112f4 c292e0754baa7a30 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d95980357b78da3 b4fd0b42c3c4dd78 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 25caa9d95cc68003 d5616108ca846f5b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000240 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a978e8a767ce7d5a 4fbdcabf95e98452 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b3765d86bc2df5df 778d7efa8d07380f ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6bc69934795aed7e ca5d70e5ea150523 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 de1dca417654d2a9 634d77cacf968391 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fb1963d2b3a703fc 9bab2e0b05772e8b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8fa9ba9efc16c90b 136ddbc5ee198448 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002e2e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000097f47 RBX=ffff88801ee92500 RCX=ffffffff8b8ab095 RDX=0000000000000000 RSI=ffffffff8df21e52 RDI=ffffffff8c1c3800 RBP=0000000000000000 RSP=ffffc90000197df0 R8 =0000000000000001 R9 =ffffed100d4e67b5 R10=ffff88806a733dab R11=0000000000000000 R12=0000000000000003 R13=ffffed1003dd24a0 R14=0000000000000003 R15=ffffffff90d7c150 RIP=ffffffff8b8a987f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6670000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f848454a6e8 CR3=000000000e596000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=0000000000800000 Opmask03=0000000000000000 Opmask04=00000000ff7fffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6a67883bdd0158c9 bd64b13a1c7588a8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d1a9d1a7d0af875 d7786069a6eebc07 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 98b4d8fa5342fb32 51ccc226e390b870 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 21b41f8c08e5e61f 9a0236ac33b41c98 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000068 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000028 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e3e0be5073618b1a 0000000100000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7fe1274b00000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c0d439aec6242580 5124027e2660635c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000b128235d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4fcd0b9d8c9dcb66 aa22897b286a57ab ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d578b0e54032c32b cd341c37aa7e117a ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974205d30202c31 5b207465736e7520 3a326d6973766564 74656e20336d6900 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7374205730202631 5120746573647520 3032676373766564 7465642033676300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6870203435313230 3865656569205d36 33343154205b5d37 35343732322e3939 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d7265702074656b 636f735f6f747079 72635f6b6e696c74 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e3d7373616c63 7420745f6d646173 79733a725f6d6461 7379733a746f6f72 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d747865746e6f63 7420745f6d646173 79733a725f6d6461 7379733a746f6f72 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d747865746e6f63 7320223737322e30 2e7a7973223d6d6d 6f6320363438363d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865746e6f637320 6537333978303d64 6d636c74636f6920 3430313d6f6e6920 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000