last executing test programs: 3.281251118s ago: executing program 2 (id=145): mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) chdir(0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ftruncate(0xffffffffffffffff, 0xffffffffffff7fff) 3.279158528s ago: executing program 2 (id=148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d5fd49b, 0x0, [0x0, 0x0, 0x13, 0xffffffffffffffff, 0x6, 0x3, 0x0, 0xda7]}) (async) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x6, 0x2, 0x1, "a34246237f65ff03ada890111097d084147973d352e293f531e943a0f46db785", 0x47524247}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000340)={0x5, 0x3, 0x2, 0x0, 0x1f}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="900000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000011010008000a00", @ANYRES64=r5, @ANYRES8=r4], 0x90}}, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x2, @sdr}) (rerun: 64) 3.059980846s ago: executing program 2 (id=152): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="2e989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf3", 0x40, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2.968492672s ago: executing program 2 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0xb, &(0x7f00000010c0)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x40085507, &(0x7f00000000c0)={{r4}, "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"}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.650168685s ago: executing program 3 (id=159): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) write$snapshot(r1, &(0x7f0000000100)="fd10c013bcf8768187ffd12b4d88b6adc37467da862797bb943b09fbc466fd0715db8bbc45256ea2e7f874694b77d8488123c0e585d88523afb9a94f8061e3cb52f643197e2b2223d086a590b6992a3589945e2bf5135f108b9ed9b3661b28b16f86d88c23ee0019002132046f23bdd8aa9e266ffbc6b83fd7db6ec820b304984be5ca5720d45397242deb79fcddd2374e80ebf4bf4d246f5ddb532eebd8b5450e007b847fed4540391701eb871791c02924f572cf92899c0c54c17895052bf2fa91b9780b7c", 0xc6) r2 = dup2(r1, r0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x1000, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000240)={0x80000001, 0x0, 0x2, "600e6ddac49a5364bd618942ca16eaf1f627115142b67339e9aaa233ba462980", 0x38414762}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x1412, 0x400, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}}, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x8000, 0x700, 0x401, 0x1, {{0x1a, 0x4, 0x1, 0xb, 0x68, 0x68, 0x0, 0x26, 0x0, 0x0, @local, @multicast2, {[@cipso={0x86, 0x45, 0x3, [{0x5, 0xa, "d5a756f2924be7cb"}, {0x0, 0x3, 'g'}, {0x6, 0x3, '\b'}, {0x5, 0x10, "75a185ee9cde41d843959570e042"}, {0x1, 0xe, "9006d6039290355ffe40bd41"}, {0x7, 0x11, "f76754784d713817af109f16e9e96d"}]}, @rr={0x7, 0x7, 0xeb, [@broadcast]}, @lsrr={0x83, 0x7, 0xda, [@multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1d8, r5, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x164, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf8, 0x4, "03420cbdc88cf8beb7803054b441e0b5bf38d2d2c2f3addd53cb9bb2c74de3fd64207bf9bd229afc291c93ff70eff88b47ebc81fdef9e70fbc24ef09b03afcd36cd432f6fac8d444fa905048c7abaedcc5c4273590b87566082ae9708b1658ee49805aeee2cdb76b577183b5e57d0a4c436b3884b16613bfc3e3929c13b8da689e5b1d4fa0c0eadef5c4abfbac1ebb04207ac465232caed1f5c53772e1db3f5597b552a8b61a9f4c2f331cf703cc252814c6cdb13141e398e10bb29a185e5ab3f3ef158ee0f91b2e64ef54ccaa122bfa30243e348ef9917a73f1a7db057ef5b71653cbdf89eaa935f24de2cb71b477bc30660e5b"}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x80#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "44912355558dd0b57e"}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "33dd96cd6e08caeae76854db94a03c37553761d701"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000000780)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f00000007c0)={0x1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000800)=0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000840)=0x4) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)) syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000001) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000008c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000900)={0x48, 0x2, r10}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r2, r6, 0x25, 0x10, @void}, 0x10) r11 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$setstatus(r11, 0x4, 0x46c00) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000009c0)=0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000d80)={&(0x7f0000000c80)=[0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0], &(0x7f0000000d40)=[0x0], 0x1, 0x5, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000dc0)={&(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x7, 0x4, 0x0, r12}) fstat(r9, &(0x7f0000000e40)) 1.55105771s ago: executing program 2 (id=163): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000007c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x4, 0xffffffb1, 0xd, 0x5, 0x14, "e9480cc7def27104c98b0c02e205988668717f"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x50}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000580)={&(0x7f0000000540)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf250a0000000e0001006e657464657673696ba1336c4cfc42676d0000000f0002002e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x438717ce4116a346}, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000180)={0x62, @rand_addr=0x64010100, 0x4e24, 0x0, 'dh\x00', 0x0, 0x0, 0x62}, 0x2c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x6, &(0x7f0000000000)=0x4, 0x4) getsockopt$inet_tcp_int(r9, 0x6, 0x6, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.499735295s ago: executing program 2 (id=165): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x4, 0x0, 0x4}}, 0x26) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xc0110, r2, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000105509147200ed00000001090224000100eaffff080400000303000000092100000001220500090581032f0f1291e3fd7f84f5e8101209e0f78dc4235da5f431b1c6a9b0f7d05cdd4a5f3b48ac9b05788aa026ea06cc858d58338f4b81b0c8a161cc526d7def40e9ab574894ad1018872c7454907135ea580ef0b92c00b404ba87454e2dc7705c212bb491cbe7e83c1990a02e6ec2648435d763cb899c2a2e4ee033a27f21ae3a77f43eaa5a899449"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="20061700"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0xe6400, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0xe) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x4000, 0x3, &(0x7f00008dd000/0x4000)=nil) mlock2(&(0x7f0000312000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) dup2(r7, r5) 487.436184ms ago: executing program 3 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES8=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="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", @ANYBLOB="4e69f29cf397673e07356b57d491c12121f4c0aad08e880610b0f1c0e8571814091b3456a97bc490562994cee03e8a736e05066b82a3c8285653dfebe23c6a6bed29b8fe48a1ad55f5b81065d0850181541959c14f7b8b8870b7bd68307cf5d068635c87c3f6c601a367403c4a387fca096a13e2c25e5517a6d180e7332c38f0d54a72c668677660c5f9813fe97b1e644ded95cbc9b13abc7c700969e97c2b8dac970fc48573fb786ba928ed3f6215354e47013962b3c4ad5a88266dbdb0897945eb1c5572c879f95e6bbf8565e7fdff4f71d402829624e58e1728785f68e853d42eecb9fd", @ANYRES64=r0], 0x7c}}, 0x0) r1 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') pread64(r2, &(0x7f0000001200)=""/99, 0x63, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) 419.617838ms ago: executing program 3 (id=173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r1, &(0x7f00000007c0)=ANY=[], 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000440)={0x24, r4, 0xa29, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}}, 0x0) 360.25241ms ago: executing program 3 (id=175): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000006480)={0x58, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2dd6}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') (async) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000006480)={0x58, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2dd6}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (async) 359.288524ms ago: executing program 1 (id=176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) io_uring_setup(0x1de0, &(0x7f00000003c0)={0x0, 0x0, 0x40, 0x20001, 0x3a3}) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x36, 0x33, @action={{{}, {}, @device_b}, @vht_group_id={0x15, 0x1, {0x0, "5584d2f515d56c029a92908b231c387c"}}}}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r8, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x4804}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="00000000001800004c001280110001006272696467655f736c6176650000000034000580050021000100000008002200", @ANYRES32], 0x90}}, 0x0) 359.033068ms ago: executing program 3 (id=177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000040)={0x80, {{0x2, 0x4e24, @private=0xa010102}}}, 0x88) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r7, 0x5) (async) accept(r7, &(0x7f0000000080)=@can, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r9 = socket(0x2, 0x80805, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) capget(0x0, &(0x7f00000001c0)) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, 0x0, 0x0) (async, rerun: 64) socket$alg(0x26, 0x5, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a00), 0x0, 0x0) (async, rerun: 64) sendto$inet6(r8, &(0x7f0000847fff)="fe", 0x1, 0xe0ff, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r5, @ANYRES8=r11, @ANYRESHEX, @ANYRESHEX=r3], 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x40844) (async, rerun: 64) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 238.656467ms ago: executing program 1 (id=178): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x4003, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @loopback, 0xff}, 0x1c) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x1, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x7f03, 0x1, 0xb4b7}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 237.84529ms ago: executing program 0 (id=179): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) lstat(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r3) setresuid(0x0, r2, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x20018, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC, @ANYBLOB, @ANYRESDEC=r1, @ANYBLOB=',blksize=0x0000000000000800,default_permissions,allow_other,default_permissions,allow_other,blksize=0x0000000000001000,allow_other,default_permissions,appraise,euid=', @ANYRESDEC=r2, @ANYBLOB=',smackfsroot=/dev/ndctl0\x00,\x00']) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x20000801) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) open(&(0x7f0000000840)='./file0\x00', 0x88c01, 0x9) r8 = inotify_init() inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x20000002) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0003802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0xfc, 0x0, 0x1, 0x401, 0x0, 0x6b8ffff, {0xa}, [@CTA_NAT_SRC={0x8c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x6}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xfc}}, 0x0) r10 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000500), 0x200800, 0x0) openat(r10, &(0x7f0000000540)='./file0\x00', 0x400100, 0xaf) umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) readv(r8, &(0x7f0000000100), 0x0) 226.585867ms ago: executing program 3 (id=180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfdfdffff}) tee(r1, r2, 0xfffffffffffffc01, 0x0) tee(r1, r2, 0x60000000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) close_range(r2, r3, 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000c4694baf000008000300", @ANYRES32=r6], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x50, r5, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x62}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1c16ed0dc36a"}]}, 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x45) 224.479107ms ago: executing program 1 (id=181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004680)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x27}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x3}]}, 0x68}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000a00)={0x1, 0x1, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 223.573719ms ago: executing program 0 (id=182): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000140)={'pim6reg0\x00', @ifru_settings={0x90, 0x8, @te1=&(0x7f0000000100)={0x100, 0x0, 0x9, 0x7f}}}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000240)=0x1) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/219, 0xdb}], 0x2, &(0x7f00000004c0)=""/24, 0x18}, 0x40002010) sched_getparam(0xffffffffffffffff, &(0x7f0000000540)) r4 = fcntl$getown(r3, 0x9) prlimit64(r4, 0x9, &(0x7f0000000580)={0xb, 0xffffffffffff0001}, &(0x7f00000005c0)) r5 = memfd_create(&(0x7f0000000600)='/dev/ptmx\x00', 0x3) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000640)={[0x80a0000, 0x2000, 0x10000, 0xffff1000], 0x3, 0x0, 0xfffffffffffffffa}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x2000, 0x0) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000780)={0x2, 0x76, 0x6, 0x81, 0x9, "201460fab4c24f1b3d567ee6da10f073f5c1a5", 0x7, 0x7}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r10, 0xc0046686, &(0x7f0000000800)={0x5, 0x61, "2b609562f171a43d8e15647082468e7395995ed8af95befd5234eb5e84725f25fe8246336582517cdfa9a427704c0f3da6161032e0192c0cb36c142de6965518ba4eaafa987551b7ac202271600f9bd14bbf9dd7fd2ce7c31c43c08a3bfbedcf8d"}) r11 = getuid() statx(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x0, 0x2, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = fcntl$dupfd(r9, 0x0, r9) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000e40)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000f40)=0xe8) r15 = getgid() statx(r2, &(0x7f0000000f80)='./file0\x00', 0x800, 0x800, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r5, {0xee00, 0xee01}}, './file0\x00'}) sendmmsg$unix(r2, &(0x7f00000011c0)=[{{&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000900)="c097947b36c3a6efaa013e819ca102cad4b983c2262e8120af54508febd892fd05147628c8f32fc1deefa4c463797d6d16262a4977d8809fb6f0ae54f12620c19479b2fabfce3b3c604f1a775c7873c9085499a04ac63dfc9323b226618ba5ebcd82cd42b28e16fb909153dd0f8880865c8e75dfe7b7bdd514c642e82edc9579b4a7c509c3021445865fb1f153f82fbb0c4746dac1a85c0945eb814777118256b7484cc32f96ef80cc2ddc755e5c1a13a118b776bd91b521d994da0b1947ad124847aaf8e18702c1324d6671d9b2d7402307013917655dc9ea", 0xd9}], 0x1, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r12}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="3464577a847adb2e7f", 0x9}, {&(0x7f0000000c00)="997329374dc0d15ee3dc4874579ce91df33f7b79d34cfdd25797a38a6aa9d8a9449632150f3ed5e0b6f7d2e052798aad986e8eb475c6bec11f43620abb9cc9a5f080c2e6b8a86e1e8ef870225e9ede38f3f686ddcd8093fb469226b48033b0b8222f7f0e598a328263b6bc5958d007954a6f17a09467ee21a311cb9407bf9ef6f75d67a8bc4184d487646b2eaa8e49d0d111cebe7e729b4290f2a83955a22c40d9d208e0bc9d21ce6f9910fc4bbe1a", 0xaf}, {&(0x7f0000000cc0)="6c839d632b88099b580081431b4524eec04d312b01b8081d1a202abe781c06303947da6ced26838a5dd764af1724bca23e9109632dc50a8395", 0x39}, {&(0x7f0000000d00)="747e875e3c191e52a758567cc958f6d4793ec2953ed9a70b61846147971fef098f", 0x21}, {&(0x7f0000000d40)="002d37903e043844b83c35ebbcb1be92add7b2750e727f602b3504f1743682042ec69046017cd060f81162ee1b8d786c2712779cf440e2ce97b39aa6745ba3f594380e819b9ee06de814e7c1175ca50a1db0264458149afc83d5087259d07ab7a9320818596ebfc3", 0x68}], 0x5, &(0x7f0000001100)=[@rights={{0x24, 0x1, 0x1, [r13, r7, r3, r9, r0]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {r4, r14, r15}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r16, r17}}}], 0x98, 0x408c0}}], 0x2, 0x80) ioctl$SCSI_IOCTL_DOORLOCK(r7, 0x5380) socket$inet_udp(0x2, 0x2, 0x0) r18 = accept$unix(r2, &(0x7f0000001240), &(0x7f00000012c0)=0x6e) setsockopt(r18, 0x9, 0x1, &(0x7f0000001300)="3e58391dd13ca1f1399dd3591c0303ecd14f5192f63300b9436f14194b81af985de38e99e6ef4bfb0285f34e95354855a402f584df59eba4fe66c7635adb8d95f09674da0fbdd0973fe5a685abb95ac898381cba0f4097852b2d03a17ebec1a07a411adf0d3b8fe329c39abd2c835d9e656eb1b48bb5b7ca11aad7a4a30246d8df3e67effa3255c487cb934251245d09e91b3940386aaa18f56797d97ecca243635f2b2fa3cfd875bf6b1d68d75278c052deec2096d9f376cffa657337e417c33366182b6d829d9e49f737660c979711d6738cdff3169da295735dff715aca705ea206466be8da4d11ff7e", 0xeb) 149.587357ms ago: executing program 0 (id=183): r0 = syz_clone(0xc040880, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00') syz_fuse_handle_req(r1, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat(r1, &(0x7f00000002c0)='./file0\x00', 0x2, 0x40) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000234c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060072720000080008000000000008000b0074"], 0x54}}, 0x0) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x123001, 0x0) write$cgroup_type(r9, &(0x7f0000000080), 0x9) 81.21272ms ago: executing program 0 (id=184): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) clock_getres(0x851be745dab4a093, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7}) (async) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7}) 78.024603ms ago: executing program 0 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x82004, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) accept$alg(r0, 0x0, 0x0) (async) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000b680)=[{0x0, 0x0, &(0x7f000000b600)=[{&(0x7f0000003540)="9e1f07bf470476882cf1e253d98aabaa9c7b5e1c3d633c5670b730c7b9dbe63a4a0e6d6e119922a20754e91c2294a151bf47bd64f2cc3ea877", 0x39}, {&(0x7f000000a340)="30099b2a35fc5362f91a9bd6300b91b2235d5c6b99fd68f548389ef13fc304509fe94fedf78da984863ef5d8e4092ce479fce9ebf46ac805279f2d521648232929d9fb22f1487b87e61af6b8bde91ce9b57fd9f03e02c02c46e9a6daacb4f91a1b528647711c07ef5d0ff84280f3dabcbbeff1d4d38b5cf9accfa5b3c61e2bd596fb3aebc67eac069714df495a0f2dfe814fcfb6b12f05b73295d7d87378a7e419e04c73f9c11550551ed69d11e36e417649691294b3bacbad70d868eeb43e919f6dda38c936c6d862c0c0f7e9ab42818d6a95fcfd049ddc286fd98c195c09bcca7495f75b9a0df02b0fca55ec047b1de8a907", 0xf3}], 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001d80)=""/198, 0xc6}, {&(0x7f0000001e80)=""/101, 0x65}], 0x2}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000004780)={0x0, 0x0, &(0x7f0000004740)={&(0x7f0000000040)=@newtaction={0x44, 0x32, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 77.614921ms ago: executing program 1 (id=186): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000280)=""/140, 0xffd0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0xbc, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x167a9291}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xdf}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x67}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xf12}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xdd2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x20004041) getdents(r3, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000000a440)={0x0, 0x0, &(0x7f000000a400)={&(0x7f0000009d40)=@deltclass={0x24, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x2, 0x9}}}, 0x24}}, 0x0) recvmmsg(r1, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/5, 0x5}, {&(0x7f0000000340)=""/154, 0x9a}], 0x2}, 0x6}], 0x2, 0x0, 0x0) 953.641µs ago: executing program 1 (id=187): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f00000001c0)={r5, 0x2, &(0x7f0000000040)=[0x8, 0x9], &(0x7f0000000080)=[0x8, 0xffff, 0x9], &(0x7f0000000140)=[0x12, 0x2c69, 0x8, 0xd, 0x6]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 515.738µs ago: executing program 1 (id=188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @dev, @remote}, &(0x7f00000009c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000a00)={'syztnl2\x00', r2, 0x4, 0x76, 0x8, 0x7f, 0x34, @private1, @empty, 0x700, 0x20, 0x825, 0x80000001}}) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xf}, {0xfff3, 0xc}, {0x8, 0x10}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r0, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0xd0a3, 0x8}, &(0x7f0000000040)=0x90) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r6) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x3e8, r9, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NODE={0x1d4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa, 0x3, "1388290f1318"}, @TIPC_NLA_NODE_ID={0xab, 0x3, "5ddcef7a3f2c13c7ca1cc6dca6bb3531a2b744bef1d2c5182dd97bd5621fb5cb7420e7b66121add81a10e4e89a8e74be6f9af051604948318b20bc4da0b2443acc2045e2b15700455b416875ccce53139f59adc4b4111ac8c195c86fd3053e455ae5abaa1a8a91df909b19b078e0815f38a89b742ab4fc6f8c672f35fb78ac24b1917ebb63d28638da8431ba7d23e304c60e07661a0fb1ca92d13b7186bb0248c6559d8a8fc61b"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "fff25139a9cf8959817e1e803427d38d51a852ac203e920473e1efac"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0xbe, 0x3, "e32b4eda4b443a7605d1ce13338d011c5658f5739277cc029f5cb36cb4b0dee13300045f546845a58e3ad5eff0f401dabdbec86a6752c6a32ed809393544f660b769ca0e11dbaf627e1f76953531c437a3d7eb0cd7fbab2c8a207f7a9f549f299ba9054408b714ceff4ee312f5c226bc500cd28c712d5e516dd17276862d38ac4ad4c64b38c4c7dd0b246939adcefb7d4973ae7999f3724eda31b1873e8ff3c5308fd406a2b88a58add9c51c5ce166adf1643c5818dfb58daf14"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9646}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6e5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x14}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81eb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xed}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x700}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000200)={r8, 0x9}, &(0x7f0000000280)=0x8) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 0s ago: executing program 0 (id=189): ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x311c01, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6010104000140600fe2e02d28000000000000000000000000000bbfe8000000000080000000000000000aa01004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c2000090780000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180), 0x0) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349bfd2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socket(0x10, 0x803, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)={'bridge_slave_1\x00', 0x400}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x4a) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040004}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000039000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="8fe848ee06380f01d10f21f83500000d000f23f8b8f83aa9970f23d80f21f835800000f00f23f80f01c866bad104b0d1eec4e3b96802ff0f97fe0f0010660f63c4360f78b9fc000000", 0x49}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="650f8a020066b9030100c00f32f20f320fc7a9406366b8005000000f23d00f21f866353000000d0f23f8f3260f32b805008ed8b800088ec80f01c40fdf840b00", 0x40}], 0x1, 0x41, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 30.277825][ T39] audit: type=1400 audit(1731345885.613:81): avc: denied { rlimitinh } for pid=5854 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.283397][ T39] audit: type=1400 audit(1731345885.613:82): avc: denied { siginh } for pid=5854 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.721367][ T39] audit: type=1400 audit(1731345886.063:83): avc: denied { read } for pid=5338 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 30.727124][ T39] audit: type=1400 audit(1731345886.063:84): avc: denied { append } for pid=5338 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.733891][ T39] audit: type=1400 audit(1731345886.063:85): avc: denied { open } for pid=5338 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.739582][ T39] audit: type=1400 audit(1731345886.063:86): avc: denied { getattr } for pid=5338 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:4412' (ED25519) to the list of known hosts. [ 31.781356][ T39] audit: type=1400 audit(1731345887.123:87): avc: denied { name_bind } for pid=5858 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.331370][ T5860] cgroup: Unknown subsys name 'net' [ 33.447218][ T5860] cgroup: Unknown subsys name 'cpuset' [ 33.450285][ T5860] cgroup: Unknown subsys name 'rlimit' [ 33.651755][ T5901] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.222124][ T5860] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.809379][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 35.809390][ T39] audit: type=1400 audit(1731345891.153:105): avc: denied { execmem } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.965824][ T39] audit: type=1400 audit(1731345891.313:106): avc: denied { create } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.973277][ T39] audit: type=1400 audit(1731345891.313:107): avc: denied { read write } for pid=5940 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.981816][ T39] audit: type=1400 audit(1731345891.313:108): avc: denied { open } for pid=5940 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.989460][ T39] audit: type=1400 audit(1731345891.333:109): avc: denied { ioctl } for pid=5940 comm="syz-executor" path="socket:[5723]" dev="sockfs" ino=5723 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.009535][ T5306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.012995][ T5306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.015406][ T5306] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.017703][ T5306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.021047][ T5306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.021057][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.023234][ T5306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.026451][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.028609][ T5306] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.029936][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.031974][ T5306] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.034146][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.034389][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.035195][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.035578][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.035985][ T5953] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.036077][ T5306] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.036141][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.038139][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.039995][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.041459][ T5306] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.043175][ T5951] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.043293][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.043686][ T39] audit: type=1400 audit(1731345891.383:110): avc: denied { read } for pid=5946 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.047142][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.047914][ T39] audit: type=1400 audit(1731345891.383:111): avc: denied { open } for pid=5946 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.076699][ T39] audit: type=1400 audit(1731345891.393:112): avc: denied { mounton } for pid=5946 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 36.169064][ T39] audit: type=1400 audit(1731345891.513:113): avc: denied { module_request } for pid=5946 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 36.204682][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 36.241136][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 36.272554][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 36.281784][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 36.315554][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.317515][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.319736][ T5946] bridge_slave_0: entered allmulticast mode [ 36.321844][ T5946] bridge_slave_0: entered promiscuous mode [ 36.373254][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.375435][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.377437][ T5946] bridge_slave_1: entered allmulticast mode [ 36.379543][ T5946] bridge_slave_1: entered promiscuous mode [ 36.437403][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.439369][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.441278][ T5941] bridge_slave_0: entered allmulticast mode [ 36.443407][ T5941] bridge_slave_0: entered promiscuous mode [ 36.455502][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.457952][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.460467][ T5940] bridge_slave_0: entered allmulticast mode [ 36.462997][ T5940] bridge_slave_0: entered promiscuous mode [ 36.476533][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.479204][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.481195][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.483311][ T5941] bridge_slave_1: entered allmulticast mode [ 36.485462][ T5941] bridge_slave_1: entered promiscuous mode [ 36.487902][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.489815][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.491723][ T5940] bridge_slave_1: entered allmulticast mode [ 36.493862][ T5940] bridge_slave_1: entered promiscuous mode [ 36.504054][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.514530][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.516471][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.518354][ T5948] bridge_slave_0: entered allmulticast mode [ 36.520424][ T5948] bridge_slave_0: entered promiscuous mode [ 36.549094][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.567160][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.569124][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.571278][ T5948] bridge_slave_1: entered allmulticast mode [ 36.573430][ T5948] bridge_slave_1: entered promiscuous mode [ 36.576592][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.580034][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.584057][ T5946] team0: Port device team_slave_0 added [ 36.594597][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.605543][ T5946] team0: Port device team_slave_1 added [ 36.642668][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.654579][ T5941] team0: Port device team_slave_0 added [ 36.657900][ T5940] team0: Port device team_slave_0 added [ 36.668709][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.671116][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.678158][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.683182][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.697239][ T5941] team0: Port device team_slave_1 added [ 36.707262][ T5940] team0: Port device team_slave_1 added [ 36.709310][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.711791][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.718684][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.757874][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.760243][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.769815][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.779587][ T5948] team0: Port device team_slave_0 added [ 36.782448][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.785299][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.795406][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.799515][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.801442][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.808111][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.811784][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.814259][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.820884][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.826945][ T5948] team0: Port device team_slave_1 added [ 36.849819][ T5946] hsr_slave_0: entered promiscuous mode [ 36.852672][ T5946] hsr_slave_1: entered promiscuous mode [ 36.890197][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.892076][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.898818][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.903397][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.905921][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.915168][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.936529][ T5941] hsr_slave_0: entered promiscuous mode [ 36.938513][ T5941] hsr_slave_1: entered promiscuous mode [ 36.940334][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.942426][ T5941] Cannot create hsr debugfs directory [ 36.955517][ T5940] hsr_slave_0: entered promiscuous mode [ 36.957995][ T5940] hsr_slave_1: entered promiscuous mode [ 36.959902][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.961895][ T5940] Cannot create hsr debugfs directory [ 37.028370][ T5948] hsr_slave_0: entered promiscuous mode [ 37.030997][ T5948] hsr_slave_1: entered promiscuous mode [ 37.033283][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.035386][ T5948] Cannot create hsr debugfs directory [ 37.179959][ T5941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.198679][ T5941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.203072][ T5941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.206948][ T5941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.227593][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.231124][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.236050][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.239177][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.259305][ T5946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.263949][ T5946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.273129][ T5946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.279630][ T5946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.304223][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.311508][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.315673][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.319931][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.347128][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.372356][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.378558][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.386518][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.390278][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.392295][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.400322][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.406817][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.408716][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.412896][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.414808][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.427249][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.429245][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.434534][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.450409][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.452312][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.459867][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.465821][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.467888][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.491676][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.504808][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.506741][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.515336][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.517251][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.525375][ T39] audit: type=1400 audit(1731345892.873:114): avc: denied { sys_module } for pid=5941 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.537454][ T5948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.580500][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.584969][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.602690][ T5941] veth0_vlan: entered promiscuous mode [ 37.610118][ T5941] veth1_vlan: entered promiscuous mode [ 37.619867][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.627530][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.639407][ T5940] veth0_vlan: entered promiscuous mode [ 37.655934][ T5940] veth1_vlan: entered promiscuous mode [ 37.660424][ T5941] veth0_macvtap: entered promiscuous mode [ 37.664615][ T5941] veth1_macvtap: entered promiscuous mode [ 37.672468][ T5946] veth0_vlan: entered promiscuous mode [ 37.682773][ T5946] veth1_vlan: entered promiscuous mode [ 37.686632][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.696705][ T5948] veth0_vlan: entered promiscuous mode [ 37.699615][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.703994][ T5941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.706394][ T5941] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.708658][ T5941] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.710912][ T5941] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.720119][ T5940] veth0_macvtap: entered promiscuous mode [ 37.728106][ T5940] veth1_macvtap: entered promiscuous mode [ 37.732421][ T5948] veth1_vlan: entered promiscuous mode [ 37.738781][ T5946] veth0_macvtap: entered promiscuous mode [ 37.753035][ T5946] veth1_macvtap: entered promiscuous mode [ 37.771663][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.775012][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.778355][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.781522][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.784516][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.787069][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.789770][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.793382][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.800730][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.805520][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.806097][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.810830][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.815079][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.817643][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.820356][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.822897][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.825974][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.829108][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.840909][ T5940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.843249][ T5940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.845762][ T5940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.848032][ T5940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.855978][ T5946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.858348][ T5946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.860644][ T5946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.862927][ T5946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.867258][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.869319][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.876150][ T5948] veth0_macvtap: entered promiscuous mode [ 37.884175][ T5948] veth1_macvtap: entered promiscuous mode [ 37.897168][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.900598][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.903153][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.906079][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.908911][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.911607][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.915545][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.922639][ T5941] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.926408][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.929231][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.931838][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.935255][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.937865][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.940577][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.943903][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.954618][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.955595][ T5948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.956727][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.959011][ T5948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.964273][ T5948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.967215][ T5948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.982104][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.984758][ T6004] Zero length message leads to an empty skb [ 37.985415][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.999186][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.005404][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.012728][ T5950] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 38.015844][ T5950] CPU: 3 UID: 0 PID: 5950 Comm: kworker/u33:4 Not tainted 6.12.0-rc7-syzkaller #0 [ 38.018245][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 38.020584][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.021041][ T5950] Workqueue: hci1 hci_rx_work [ 38.023128][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.024410][ T5950] [ 38.024419][ T5950] Call Trace: [ 38.024423][ T5950] [ 38.024429][ T5950] dump_stack_lvl+0x16c/0x1f0 [ 38.024446][ T5950] sysfs_warn_dup+0x7f/0xa0 [ 38.024460][ T5950] sysfs_create_dir_ns+0x24d/0x2b0 [ 38.024473][ T5950] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 38.024486][ T5950] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 38.024500][ T5950] ? kobject_add_internal+0x12d/0x990 [ 38.024513][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 38.024526][ T5950] kobject_add_internal+0x2c8/0x990 [ 38.024540][ T5950] kobject_add+0x16f/0x240 [ 38.024553][ T5950] ? __pfx_kobject_add+0x10/0x10 [ 38.024565][ T5950] ? class_to_subsys+0x3e/0x160 [ 38.024577][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 38.028016][ T5950] ? kobject_put+0xab/0x5a0 [ 38.030935][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.031318][ T5950] device_add+0x289/0x1a70 [ 38.032673][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.034121][ T5950] ? __pfx_dev_set_name+0x10/0x10 [ 38.034138][ T5950] ? __pfx_device_add+0x10/0x10 [ 38.034149][ T5950] ? mgmt_send_event_skb+0x2f2/0x460 [ 38.034169][ T5950] hci_conn_add_sysfs+0x17e/0x230 [ 38.047558][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.047966][ T5950] le_conn_complete_evt+0x1078/0x1d80 [ 38.049204][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.051064][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 38.051088][ T5950] ? trace_contention_end+0xea/0x140 [ 38.064684][ T5950] hci_le_conn_complete_evt+0x23c/0x370 [ 38.066153][ T5950] hci_le_meta_evt+0x2e2/0x5d0 [ 38.067453][ T5950] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 38.069061][ T5950] hci_event_packet+0x666/0x1180 [ 38.070389][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 38.071821][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 38.073239][ T5950] ? mark_held_locks+0x9f/0xe0 [ 38.074521][ T5950] ? kcov_remote_start+0x3cf/0x6e0 [ 38.074594][ T5942] Bluetooth: hci3: command tx timeout [ 38.075843][ T5950] ? lockdep_hardirqs_on+0x7c/0x110 [ 38.075866][ T5950] hci_rx_work+0x2c6/0x16c0 [ 38.077154][ T5945] Bluetooth: hci2: command tx timeout [ 38.081713][ T5950] ? lock_acquire+0x2f/0xb0 [ 38.082967][ T5950] ? process_one_work+0x921/0x1ba0 [ 38.084330][ T5950] process_one_work+0x9c5/0x1ba0 [ 38.085656][ T5950] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 38.087134][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 38.088525][ T5950] ? assign_work+0x1a0/0x250 [ 38.089784][ T5950] worker_thread+0x6c8/0xf00 [ 38.091020][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 38.092384][ T5950] kthread+0x2c1/0x3a0 [ 38.093479][ T5950] ? _raw_spin_unlock_irq+0x23/0x50 [ 38.094871][ T5950] ? __pfx_kthread+0x10/0x10 [ 38.096103][ T5950] ret_from_fork+0x45/0x80 [ 38.097285][ T5950] ? __pfx_kthread+0x10/0x10 [ 38.098514][ T5950] ret_from_fork_asm+0x1a/0x30 [ 38.099794][ T5950] [ 38.101096][ T5942] Bluetooth: hci0: command tx timeout [ 38.102526][ T5950] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 38.106656][ T5950] Bluetooth: hci1: failed to register connection device [ 38.109729][ T5950] Bluetooth: hci1: command tx timeout [ 38.186881][ T6009] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 38.190114][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.192508][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.197054][ T6019] xt_TPROXY: Can be used only with -p tcp or -p udp [ 38.200562][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.202505][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.204982][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.206900][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.215101][ T6009] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 38.299300][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5'. [ 38.302436][ T6034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5'. [ 38.427319][ T5950] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 38.429966][ T5950] CPU: 2 UID: 0 PID: 5950 Comm: kworker/u33:4 Not tainted 6.12.0-rc7-syzkaller #0 [ 38.432388][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 38.435925][ T5950] Workqueue: hci2 hci_rx_work [ 38.436235][ T6049] netlink: 'syz.2.21': attribute type 10 has an invalid length. [ 38.437478][ T5950] Call Trace: [ 38.440851][ T5950] [ 38.441868][ T5950] dump_stack_lvl+0x16c/0x1f0 [ 38.443196][ T5950] sysfs_warn_dup+0x7f/0xa0 [ 38.444656][ T5950] sysfs_create_dir_ns+0x24d/0x2b0 [ 38.446536][ T5950] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 38.448642][ T5950] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 38.450516][ T5950] ? kobject_add_internal+0x12d/0x990 [ 38.452307][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 38.453671][ T5950] kobject_add_internal+0x2c8/0x990 [ 38.455063][ T5950] kobject_add+0x16f/0x240 [ 38.456288][ T5950] ? __pfx_kobject_add+0x10/0x10 [ 38.457621][ T5950] ? class_to_subsys+0x3e/0x160 [ 38.458968][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 38.460380][ T5950] ? kobject_put+0xab/0x5a0 [ 38.461604][ T5950] device_add+0x289/0x1a70 [ 38.462817][ T5950] ? __pfx_dev_set_name+0x10/0x10 [ 38.464316][ T5950] ? __pfx_device_add+0x10/0x10 [ 38.465610][ T5950] ? mgmt_send_event_skb+0x2f2/0x460 [ 38.467010][ T5950] hci_conn_add_sysfs+0x17e/0x230 [ 38.468397][ T5950] le_conn_complete_evt+0x1078/0x1d80 [ 38.469957][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 38.471873][ T5950] ? trace_contention_end+0xea/0x140 [ 38.473445][ T5950] hci_le_conn_complete_evt+0x23c/0x370 [ 38.474934][ T5950] hci_le_meta_evt+0x2e2/0x5d0 [ 38.476615][ T5950] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 38.478714][ T5950] hci_event_packet+0x666/0x1180 [ 38.480463][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 38.482299][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 38.484144][ T5950] ? mark_held_locks+0x9f/0xe0 [ 38.485896][ T5950] ? kcov_remote_start+0x3cf/0x6e0 [ 38.487300][ T5950] ? lockdep_hardirqs_on+0x7c/0x110 [ 38.488724][ T5950] hci_rx_work+0x2c6/0x16c0 [ 38.489947][ T5950] ? lock_acquire+0x2f/0xb0 [ 38.491625][ T5950] ? process_one_work+0x921/0x1ba0 [ 38.493429][ T5950] process_one_work+0x9c5/0x1ba0 [ 38.495128][ T5950] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 38.497055][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 38.498900][ T5950] ? assign_work+0x1a0/0x250 [ 38.500520][ T5950] worker_thread+0x6c8/0xf00 [ 38.502116][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 38.503881][ T5950] kthread+0x2c1/0x3a0 [ 38.505291][ T5950] ? _raw_spin_unlock_irq+0x23/0x50 [ 38.507085][ T5950] ? __pfx_kthread+0x10/0x10 [ 38.508698][ T5950] ret_from_fork+0x45/0x80 [ 38.510233][ T5950] ? __pfx_kthread+0x10/0x10 [ 38.511830][ T5950] ret_from_fork_asm+0x1a/0x30 [ 38.513489][ T5950] [ 38.516870][ T5950] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 38.521675][ T5950] Bluetooth: hci2: failed to register connection device [ 38.521851][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.526154][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.530592][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.532481][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.534636][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.536485][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.539606][ T6049] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 38.588827][ T6056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16'. [ 38.707063][ T6073] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 38.709380][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 38.818674][ T5950] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 38.821336][ T5950] CPU: 2 UID: 0 PID: 5950 Comm: kworker/u33:4 Not tainted 6.12.0-rc7-syzkaller #0 [ 38.823787][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 38.826590][ T5950] Workqueue: hci0 hci_rx_work [ 38.827876][ T5950] Call Trace: [ 38.828774][ T5950] [ 38.829561][ T5950] dump_stack_lvl+0x16c/0x1f0 [ 38.830818][ T5950] sysfs_warn_dup+0x7f/0xa0 [ 38.832038][ T5950] sysfs_create_dir_ns+0x24d/0x2b0 [ 38.833395][ T5950] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 38.834878][ T5950] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 38.836322][ T5950] ? kobject_add_internal+0x12d/0x990 [ 38.837751][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 38.839140][ T5950] kobject_add_internal+0x2c8/0x990 [ 38.840538][ T5950] kobject_add+0x16f/0x240 [ 38.841732][ T5950] ? __pfx_kobject_add+0x10/0x10 [ 38.843089][ T5950] ? class_to_subsys+0x3e/0x160 [ 38.844401][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 38.846054][ T5950] ? kobject_put+0xab/0x5a0 [ 38.848014][ T5950] device_add+0x289/0x1a70 [ 38.849582][ T5950] ? __pfx_dev_set_name+0x10/0x10 [ 38.851346][ T5950] ? __pfx_device_add+0x10/0x10 [ 38.853038][ T5950] ? mgmt_send_event_skb+0x2f2/0x460 [ 38.854914][ T5950] hci_conn_add_sysfs+0x17e/0x230 [ 38.856391][ T5950] le_conn_complete_evt+0x1078/0x1d80 [ 38.858172][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 38.860231][ T5950] ? trace_contention_end+0xea/0x140 [ 38.861751][ T5950] hci_le_conn_complete_evt+0x23c/0x370 [ 38.863214][ T5950] hci_le_meta_evt+0x2e2/0x5d0 [ 38.864509][ T5950] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 38.866090][ T5950] hci_event_packet+0x666/0x1180 [ 38.867484][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 38.868900][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 38.870362][ T5950] ? mark_held_locks+0x9f/0xe0 [ 38.871614][ T5950] ? kcov_remote_start+0x3cf/0x6e0 [ 38.872954][ T5950] ? lockdep_hardirqs_on+0x7c/0x110 [ 38.874321][ T5950] hci_rx_work+0x2c6/0x16c0 [ 38.875515][ T5950] ? lock_acquire+0x2f/0xb0 [ 38.876713][ T5950] ? process_one_work+0x921/0x1ba0 [ 38.878056][ T5950] process_one_work+0x9c5/0x1ba0 [ 38.879360][ T5950] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 38.881097][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 38.882784][ T5950] ? assign_work+0x1a0/0x250 [ 38.884014][ T5950] worker_thread+0x6c8/0xf00 [ 38.885226][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 38.886556][ T5950] kthread+0x2c1/0x3a0 [ 38.887619][ T5950] ? _raw_spin_unlock_irq+0x23/0x50 [ 38.888967][ T5950] ? __pfx_kthread+0x10/0x10 [ 38.890226][ T5950] ret_from_fork+0x45/0x80 [ 38.891455][ T5950] ? __pfx_kthread+0x10/0x10 [ 38.893125][ T5950] ret_from_fork_asm+0x1a/0x30 [ 38.894477][ T5950] [ 38.897490][ T5950] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 38.902118][ T5950] Bluetooth: hci0: failed to register connection device [ 38.915454][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 39.072458][ T6099] netlink: 'syz.0.29': attribute type 10 has an invalid length. [ 39.076385][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.079303][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.088498][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.090466][ T6099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.092512][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.094435][ T6099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.098455][ T6099] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 39.300990][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 39.303377][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 39.343606][ T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 39.467095][ T6115] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.515188][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 39.520379][ T35] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 39.522909][ T35] usb 6-1: config 0 has no interface number 0 [ 39.524901][ T6120] 9pnet_fd: Insufficient options for proto=fd [ 39.525104][ T35] usb 6-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 39.530777][ T35] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 39.534896][ T35] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 39.537745][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.541614][ T35] usb 6-1: config 0 descriptor?? [ 39.548536][ T35] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 39.610145][ T6124] overlayfs: missing 'lowerdir' [ 39.750179][ T35] usb 6-1: USB disconnect, device number 2 [ 39.758969][ T35] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 39.911520][ T6128] input: syz0 as /devices/virtual/input/input5 [ 39.998082][ T6134] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 40.143658][ T5950] Bluetooth: hci3: command tx timeout [ 40.257418][ T6139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6139 comm=syz.2.44 [ 40.261339][ T6139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.44'. [ 40.285539][ T6143] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 40.288720][ T6143] x_tables: ip_tables: osf match: only valid for protocol 6 [ 40.304880][ T5950] Bluetooth: hci0: command tx timeout [ 40.386921][ T6150] overlayfs: missing 'lowerdir' [ 40.667441][ T6166] tipc: Started in network mode [ 40.668880][ T6166] tipc: Node identity 9, cluster identity 4711 [ 40.670575][ T6166] tipc: Node number set to 9 [ 40.714224][ T5950] Bluetooth: hci1: command tx timeout [ 40.785706][ T6169] zonefs (nullb0) ERROR: Not a zoned block device [ 40.790275][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 40.790326][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 40.850213][ T39] kauditd_printk_skb: 126 callbacks suppressed [ 40.850225][ T39] audit: type=1400 audit(1731345896.193:241): avc: denied { map } for pid=6175 comm="syz.1.55" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.859389][ T39] audit: type=1400 audit(1731345896.193:242): avc: denied { execute } for pid=6175 comm="syz.1.55" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 41.067579][ T6190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6190 comm=syz.1.59 [ 41.076461][ T6190] bond1: entered promiscuous mode [ 41.078050][ T6190] bond1: entered allmulticast mode [ 41.079643][ T6190] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.086628][ T6190] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 41.088932][ T6190] batadv1: entered promiscuous mode [ 41.090311][ T6190] batadv1: entered allmulticast mode [ 41.091955][ T6190] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 41.096937][ T39] audit: type=1400 audit(1731345896.443:243): avc: denied { setopt } for pid=6189 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.104237][ T5950] Bluetooth: hci2: command tx timeout [ 41.147002][ T39] audit: type=1400 audit(1731345896.493:244): avc: denied { mount } for pid=6192 comm="syz.2.60" name="/" dev="ramfs" ino=10596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 41.192533][ T39] audit: type=1400 audit(1731345896.533:245): avc: denied { ioctl } for pid=6195 comm="syz.2.61" path="socket:[9023]" dev="sockfs" ino=9023 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.204328][ T6198] x_tables: duplicate underflow at hook 1 [ 41.206495][ T39] audit: type=1400 audit(1731345896.553:246): avc: denied { read } for pid=6197 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.243448][ T6204] mmap: syz.3.64 (6204) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.276771][ T39] audit: type=1400 audit(1731345896.623:247): avc: denied { read } for pid=6205 comm="syz.3.65" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 41.283368][ T39] audit: type=1400 audit(1731345896.623:248): avc: denied { open } for pid=6205 comm="syz.3.65" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 41.290094][ T39] audit: type=1400 audit(1731345896.623:249): avc: denied { ioctl } for pid=6205 comm="syz.3.65" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 41.305783][ T39] audit: type=1400 audit(1731345896.653:250): avc: denied { create } for pid=6208 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.556326][ T6220] xt_hashlimit: size too large, truncated to 1048576 [ 41.560960][ T6220] syz.0.70: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 41.566049][ T6220] CPU: 2 UID: 0 PID: 6220 Comm: syz.0.70 Not tainted 6.12.0-rc7-syzkaller #0 [ 41.568462][ T6220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 41.571251][ T6220] Call Trace: [ 41.572139][ T6220] [ 41.572915][ T6220] dump_stack_lvl+0x16c/0x1f0 [ 41.574157][ T6220] warn_alloc+0x24d/0x3a0 [ 41.575301][ T6220] ? __pfx_warn_alloc+0x10/0x10 [ 41.576592][ T6220] ? __get_vm_area_node+0x190/0x2d0 [ 41.577994][ T6220] ? __get_vm_area_node+0x1bc/0x2d0 [ 41.579382][ T6220] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 41.580956][ T6220] ? __pfx___lock_acquire+0x10/0x10 [ 41.582336][ T6220] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 41.583900][ T6220] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 41.585569][ T6220] ? __pfx_lock_release+0x10/0x10 [ 41.586797][ T6220] ? trace_lock_acquire+0x14a/0x1d0 [ 41.588128][ T6220] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 41.589692][ T6220] vmalloc_noprof+0x6b/0x90 [ 41.590894][ T6220] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 41.592455][ T6220] hashlimit_mt_check_common+0x8b0/0x1450 [ 41.593951][ T6220] hashlimit_mt_check+0x71/0x90 [ 41.595235][ T6220] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 41.596686][ T6220] xt_check_match+0x284/0xa50 [ 41.597917][ T6220] ? zero_pte_populate+0x132/0x1a0 [ 41.599280][ T6220] ? __pfx_xt_check_match+0x10/0x10 [ 41.600657][ T6220] ? xt_find_target+0x1ee/0x290 [ 41.601905][ T6220] ? xt_find_match+0x1f2/0x290 [ 41.603185][ T6220] find_check_entry.constprop.0+0x34d/0xa20 [ 41.604748][ T6220] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 41.606434][ T6220] ? kvfree+0x47/0x50 [ 41.607495][ T6220] translate_table+0xd06/0x17b0 [ 41.608792][ T6220] ? __pfx_translate_table+0x10/0x10 [ 41.610180][ T6220] ? __might_fault+0xe3/0x190 [ 41.611428][ T6220] do_ip6t_set_ctl+0x605/0xc40 [ 41.612702][ T6220] ? rcu_is_watching+0x12/0xc0 [ 41.613967][ T6220] ? trace_contention_end+0xea/0x140 [ 41.615357][ T6220] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 41.616796][ T6220] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 41.618368][ T6220] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 41.619952][ T6220] nf_setsockopt+0x8a/0xf0 [ 41.621165][ T6220] ipv6_setsockopt+0x135/0x170 [ 41.622448][ T6220] rawv6_setsockopt+0xd7/0x680 [ 41.623727][ T6220] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 41.625156][ T6220] ? selinux_socket_setsockopt+0x6a/0x80 [ 41.626630][ T6220] ? sock_common_setsockopt+0x2e/0xf0 [ 41.628050][ T6220] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 41.629642][ T6220] do_sock_setsockopt+0x222/0x480 [ 41.630990][ T6220] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 41.632453][ T6220] ? fdget+0x176/0x210 [ 41.633544][ T6220] __sys_setsockopt+0x1a4/0x270 [ 41.634844][ T6220] ? __pfx___sys_setsockopt+0x10/0x10 [ 41.636280][ T6220] ? rcu_is_watching+0x12/0xc0 [ 41.637549][ T6220] __x64_sys_setsockopt+0xbd/0x160 [ 41.638915][ T6220] ? do_syscall_64+0x91/0x250 [ 41.640180][ T6220] ? lockdep_hardirqs_on+0x7c/0x110 [ 41.641562][ T6220] do_syscall_64+0xcd/0x250 [ 41.642770][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.644330][ T6220] RIP: 0033:0x7f46f0d7e719 [ 41.645502][ T6220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.650482][ T6220] RSP: 002b:00007f46f1c22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 41.652678][ T6220] RAX: ffffffffffffffda RBX: 00007f46f0f35f80 RCX: 00007f46f0d7e719 [ 41.655682][ T6220] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 41.658632][ T6220] RBP: 00007f46f0df139e R08: 0000000000000588 R09: 0000000000000000 [ 41.660805][ T6220] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000 [ 41.662900][ T6220] R13: 0000000000000000 R14: 00007f46f0f35f80 R15: 00007ffef2f41148 [ 41.665056][ T6220] [ 41.666499][ T6220] Mem-Info: [ 41.667405][ T6220] active_anon:5151 inactive_anon:0 isolated_anon:0 [ 41.667405][ T6220] active_file:1440 inactive_file:38327 isolated_file:0 [ 41.667405][ T6220] unevictable:1768 dirty:801 writeback:0 [ 41.667405][ T6220] slab_reclaimable:11096 slab_unreclaimable:69648 [ 41.667405][ T6220] mapped:17750 shmem:2494 pagetables:668 [ 41.667405][ T6220] sec_pagetables:302 bounce:0 [ 41.667405][ T6220] kernel_misc_reclaimable:0 [ 41.667405][ T6220] free:500251 free_pcp:1943 free_cma:0 [ 41.679183][ T6220] Node 0 active_anon:20604kB inactive_anon:0kB active_file:5760kB inactive_file:153232kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:71000kB dirty:3192kB writeback:0kB shmem:6440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11760kB pagetables:2672kB sec_pagetables:1208kB all_unreclaimable? no [ 41.689280][ T6220] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 41.697563][ T6220] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 41.706326][ T6220] lowmem_reserve[]: 0 1214 0 0 0 [ 41.707726][ T6220] Node 0 DMA32 free:399040kB boost:0kB min:27636kB low:34544kB high:41452kB reserved_highatomic:0KB active_anon:20728kB inactive_anon:0kB active_file:5760kB inactive_file:153232kB unevictable:3536kB writepending:3192kB present:2080628kB managed:1272192kB mlocked:0kB bounce:0kB free_pcp:6564kB local_pcp:432kB free_cma:0kB [ 41.715935][ T6220] lowmem_reserve[]: 0 0 0 0 0 [ 41.717233][ T6220] Node 1 Normal free:1585980kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB writepending:12kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:1176kB local_pcp:280kB free_cma:0kB [ 41.724944][ T6220] lowmem_reserve[]: 0 0 0 0 0 [ 41.726233][ T6220] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 41.729731][ T6220] Node 0 DMA32: 54*4kB (U) 159*8kB (U) 112*16kB (UM) 51*32kB (UME) 38*64kB (UME) 32*128kB (UME) 30*256kB (UME) 27*512kB (UME) 11*1024kB (UM) 5*2048kB (UM) 84*4096kB (M) = 398512kB [ 41.734756][ T6220] Node 1 Normal: 8*4kB (UM) 14*8kB (UME) 25*16kB (UME) 105*32kB (UME) 62*64kB (UME) 19*128kB (UME) 5*256kB (UE) 5*512kB (UME) 3*1024kB (UE) 4*2048kB (UME) 381*4096kB (ME) = 1585984kB [ 41.739750][ T6220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 41.742285][ T6220] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 41.745340][ T6220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 41.747904][ T6220] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 41.750390][ T6220] 42267 total pagecache pages [ 41.751692][ T6220] 0 pages in swap cache [ 41.752875][ T6220] Free swap = 124996kB [ 41.754441][ T6220] Total swap = 124996kB [ 41.755949][ T6220] 1048443 pages RAM [ 41.757049][ T6220] 0 pages HighMem/MovableOnly [ 41.758412][ T6220] 281074 pages reserved [ 41.759573][ T6220] 0 pages cma reserved [ 41.802558][ T5950] Bluetooth: Frame is too long (len 18, expected len 4) [ 41.806071][ T6251] 9pnet_fd: Insufficient options for proto=fd [ 41.918204][ T6262] ata3.00: invalid multi_count 1 ignored [ 42.043645][ T5986] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 42.213593][ T5986] usb 8-1: Using ep0 maxpacket: 8 [ 42.216145][ T5986] usb 8-1: config 0 has no interfaces? [ 42.217948][ T5986] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 42.220339][ T5986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.223607][ T5950] Bluetooth: hci3: command tx timeout [ 42.226431][ T5986] usb 8-1: config 0 descriptor?? [ 42.384333][ T5950] Bluetooth: hci0: command tx timeout [ 42.433352][ T6231] misc userio: Invalid payload size [ 42.794835][ T5950] Bluetooth: hci1: command tx timeout [ 42.866992][ T72] usb 8-1: USB disconnect, device number 2 [ 43.041535][ T6289] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 43.184248][ T5950] Bluetooth: hci2: command tx timeout [ 43.401517][ T6364] binder: BINDER_SET_CONTEXT_MGR already set [ 43.403388][ T6364] binder: 6363:6364 ioctl 4018620d 20000100 returned -16 [ 43.403461][ T6365] binder: BINDER_SET_CONTEXT_MGR already set [ 43.407887][ T6365] binder: 6363:6365 ioctl 4018620d 20000040 returned -16 [ 43.463672][ T72] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 43.613643][ T72] usb 6-1: Using ep0 maxpacket: 16 [ 43.796817][ T72] usb 6-1: unable to get BOS descriptor or descriptor too short [ 43.799735][ T72] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 43.802023][ T72] usb 6-1: can't read configurations, error -71 [ 43.893736][ T826] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 44.053594][ T826] usb 8-1: Using ep0 maxpacket: 32 [ 44.056221][ T826] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 44.058416][ T826] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 44.060693][ T826] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 44.063027][ T826] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.067255][ T826] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 44.069726][ T826] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.073033][ T826] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 44.076034][ T826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.079184][ T826] usb 8-1: config 0 descriptor?? [ 44.219545][ T6407] __nla_validate_parse: 11 callbacks suppressed [ 44.219561][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 44.276265][ T6407] bridge_slave_1: left allmulticast mode [ 44.278021][ T6407] bridge_slave_1: left promiscuous mode [ 44.280234][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.285968][ T826] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 44.303610][ T5950] Bluetooth: hci3: command tx timeout [ 44.350998][ T6415] overlay: Unknown parameter 'pcr' [ 44.463667][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout [ 44.554087][ T6421] Bluetooth: MGMT ver 1.23 [ 44.557261][ T6421] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 44.560890][ T6421] VFS: Can't find a romfs filesystem on dev nullb0. [ 44.560890][ T6421] [ 44.677765][ T6427] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.721158][ T6429] tmpfs: Unknown parameter 'ipol' [ 44.747262][ T6431] pim6reg: entered allmulticast mode [ 44.830456][ T6434] netlink: 'syz.0.126': attribute type 2 has an invalid length. [ 44.832589][ T6434] netlink: 'syz.0.126': attribute type 7 has an invalid length. [ 44.834702][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 44.839211][ T6434] netlink: 68 bytes leftover after parsing attributes in process `syz.0.126'. [ 44.946906][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 45.190511][ T6458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.132'. [ 45.485251][ T6467] xt_hashlimit: overflow, try lower: 3/0 [ 45.911724][ T39] kauditd_printk_skb: 123 callbacks suppressed [ 45.911736][ T39] audit: type=1400 audit(1731345901.253:374): avc: denied { map } for pid=6500 comm="syz.0.143" path=2F34342F66696C6530202864656C6574656429 dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 46.142817][ T6510] capability: warning: `syz.2.145' uses deprecated v2 capabilities in a way that may be insecure [ 46.155393][ T39] audit: type=1400 audit(1731345901.503:375): avc: denied { write } for pid=6512 comm="syz.0.146" path="socket:[13349]" dev="sockfs" ino=13349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.162156][ T39] audit: type=1400 audit(1731345901.503:376): avc: denied { ioctl } for pid=6512 comm="syz.0.146" path="socket:[13347]" dev="sockfs" ino=13347 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 46.176121][ T39] audit: type=1400 audit(1731345901.523:377): avc: denied { listen } for pid=6512 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 46.177766][ T6513] capability: warning: `syz.0.146' uses 32-bit capabilities (legacy support in use) [ 46.197883][ T6515] syz.1.147 uses obsolete (PF_INET,SOCK_PACKET) [ 46.217933][ T39] audit: type=1400 audit(1731345901.563:378): avc: denied { setopt } for pid=6521 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.225134][ T39] audit: type=1400 audit(1731345901.563:379): avc: denied { connect } for pid=6521 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.229496][ T6522] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 46.233888][ T6522] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 46.239467][ T6522] vhci_hcd vhci_hcd.0: Device attached [ 46.243086][ T6523] usbip_core: unknown command [ 46.244666][ T6523] vhci_hcd: unknown pdu 0 [ 46.246429][ T6523] usbip_core: unknown command [ 46.249113][ T1073] vhci_hcd: stop threads [ 46.250952][ T1073] vhci_hcd: release socket [ 46.252607][ T1073] vhci_hcd: disconnect device [ 46.254226][ T39] audit: type=1400 audit(1731345901.603:380): avc: denied { rename } for pid=5338 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.254284][ T39] audit: type=1400 audit(1731345901.603:381): avc: denied { unlink } for pid=5338 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.255600][ T39] audit: type=1400 audit(1731345901.603:382): avc: denied { create } for pid=5338 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.367225][ T39] audit: type=1400 audit(1731345901.713:383): avc: denied { read append } for pid=6525 comm="syz.1.150" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 46.427765][ T6532] overlayfs: upper fs does not support tmpfile. [ 46.623652][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 46.624086][ T5950] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 46.770309][ T5986] usb 8-1: USB disconnect, device number 3 [ 46.785618][ T5986] usblp0: removed [ 46.975139][ T6566] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 46.977376][ T6566] overlayfs: missing 'lowerdir' [ 47.684615][ T6565] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 47.686463][ T6565] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 47.691693][ T6565] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 47.695534][ T6565] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 47.698642][ T6565] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 47.700910][ T6565] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 47.704577][ T6565] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 47.707783][ T6565] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 47.710573][ T6565] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 47.712231][ T6565] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 47.715778][ T6565] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 47.717911][ T6565] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 47.720701][ T6565] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 47.722546][ T6565] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 47.724953][ T6565] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 47.922986][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 47.926128][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 47.926471][ T6574] ======================================================= [ 47.926471][ T6574] WARNING: The mand mount option has been deprecated and [ 47.926471][ T6574] and is ignored by this kernel. Remove the mand [ 47.926471][ T6574] option from the mount to silence this warning. [ 47.926471][ T6574] ======================================================= [ 47.937658][ T6574] cgroup: name respecified [ 47.962744][ T6578] netlink: 277 bytes leftover after parsing attributes in process `syz.0.166'. [ 47.990020][ T6581] nbd: must specify an index to disconnect [ 48.047515][ T6589] hfsplus: unable to find HFS+ superblock [ 48.223744][ T1481] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 48.393669][ T1481] usb 7-1: Using ep0 maxpacket: 16 [ 48.396253][ T1481] usb 7-1: config 0 has an invalid interface descriptor of length 8, skipping [ 48.398493][ T1481] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.401063][ T1481] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 48.403222][ T1481] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 48.405550][ T1481] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.409244][ T1481] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 48.412394][ T1481] usb 7-1: no configuration chosen from 1 choice [ 48.943804][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout [ 48.945638][ T6565] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 49.044134][ T6602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.174'. [ 49.060181][ T6595] IPVS: persistence engine module ip_vs_pe_t not found [ 49.070971][ T6595] sd 0:0:0:0: PR command failed: 1026 [ 49.072492][ T6595] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 49.074674][ T6595] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 49.080117][ T6595] dvmrp8: entered allmulticast mode [ 49.091459][ T6595] dvmrp8: left allmulticast mode [ 49.133964][ T6622] netlink: zone id is out of range [ 49.136715][ T6622] netlink: zone id is out of range [ 49.138430][ T6622] netlink: zone id is out of range [ 49.143299][ T6622] netlink: set zone limit has 4 unknown bytes [ 49.189503][ T6636] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 49.202023][ T6639] netlink: 'syz.0.179': attribute type 3 has an invalid length. [ 49.204339][ T6639] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.179'. [ 49.307834][ T6645] IPVS: persistence engine module ip_vs_pe_t not found [ 49.335977][ T6651] __nla_validate_parse: 1 callbacks suppressed [ 49.335987][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 49.338174][ T6654] 9pnet_virtio: no channels available for device syz [ 49.521606][ T6666] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 49.523964][ T6666] #PF: supervisor instruction fetch in kernel mode [ 49.526314][ T6666] #PF: error_code(0x0010) - not-present page [ 49.528821][ T6666] PGD 4e917067 P4D 4e917067 PUD 50ba8067 PMD 0 [ 49.530461][ T6666] Oops: Oops: 0010 [#1] PREEMPT SMP KASAN NOPTI [ 49.532118][ T6666] CPU: 1 UID: 0 PID: 6666 Comm: syz.1.188 Not tainted 6.12.0-rc7-syzkaller #0 [ 49.535300][ T6666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.538205][ T6666] RIP: 0010:0x0 [ 49.539181][ T6666] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 49.541340][ T6666] RSP: 0018:ffffc900032cf9c8 EFLAGS: 00010283 [ 49.543133][ T6666] RAX: 0000000000000ae6 RBX: 0000000000000000 RCX: ffffc90007522000 [ 49.545310][ T6666] RDX: 0000000000040000 RSI: ffffea00010650c0 RDI: ffff888027bed880 [ 49.547529][ T6666] RBP: ffffea00010650c0 R08: 0000000000000007 R09: 0000000000000000 [ 49.549698][ T6666] R10: 0000000000000000 R11: ffffffff961d8908 R12: 1ffff92000659f3a [ 49.551914][ T6666] R13: ffff888027bed880 R14: 0000000000000000 R15: dffffc0000000000 [ 49.554874][ T6666] FS: 00007fbb0d6f46c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 49.557467][ T6666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.559304][ T6666] CR2: ffffffffffffffd6 CR3: 00000000255cc000 CR4: 0000000000352ef0 [ 49.561416][ T6666] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.563930][ T6666] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.566003][ T6666] Call Trace: [ 49.566895][ T6666] [ 49.567699][ T6666] ? __die+0x1e/0x60 [ 49.568761][ T6666] ? page_fault_oops+0x3b6/0xb80 [ 49.570051][ T6666] ? __pfx_page_fault_oops+0x10/0x10 [ 49.571412][ T6666] ? __pfx___lock_acquire+0x10/0x10 [ 49.572963][ T6666] ? __pfx_lock_release+0x10/0x10 [ 49.575003][ T6666] ? do_user_addr_fault+0xa90/0x13f0 [ 49.576611][ T6666] ? rcu_is_watching+0x12/0xc0 [ 49.577921][ T6666] ? exc_page_fault+0x5c/0xc0 [ 49.579199][ T6666] ? asm_exc_page_fault+0x26/0x30 [ 49.580557][ T6666] filemap_read_folio+0xc6/0x2a0 [ 49.581864][ T6666] ? __pfx_filemap_read_folio+0x10/0x10 [ 49.583425][ T6666] ? __filemap_get_folio+0x2a5/0xaf0 [ 49.584831][ T6666] do_read_cache_folio+0x263/0x5c0 [ 49.586172][ T6666] freader_get_folio+0x337/0x8e0 [ 49.587543][ T6666] freader_fetch+0xc2/0x5f0 [ 49.588760][ T6666] ? mt_find+0x4c8/0xa20 [ 49.589889][ T6666] __build_id_parse.isra.0+0xed/0x7a0 [ 49.591302][ T6666] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 49.593226][ T6666] ? __pfx_find_vma+0x10/0x10 [ 49.594980][ T6666] do_procmap_query+0xd62/0x1030 [ 49.596330][ T6666] ? __pfx_do_procmap_query+0x10/0x10 [ 49.597726][ T6666] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 49.599415][ T6666] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 49.601112][ T6666] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 49.603093][ T6666] ? selinux_file_ioctl+0x180/0x270 [ 49.604482][ T6666] ? selinux_file_ioctl+0xb4/0x270 [ 49.605858][ T6666] procfs_procmap_ioctl+0x7d/0xb0 [ 49.607371][ T6666] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 49.608903][ T6666] __x64_sys_ioctl+0x18f/0x220 [ 49.610169][ T6666] do_syscall_64+0xcd/0x250 [ 49.611386][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.613338][ T6666] RIP: 0033:0x7fbb0c97e719 [ 49.614983][ T6666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.620035][ T6666] RSP: 002b:00007fbb0d6f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.622225][ T6666] RAX: ffffffffffffffda RBX: 00007fbb0cb36058 RCX: 00007fbb0c97e719 [ 49.624291][ T6666] RDX: 0000000020000180 RSI: 00000000c0686611 RDI: 0000000000000007 [ 49.626339][ T6666] RBP: 00007fbb0c9f139e R08: 0000000000000000 R09: 0000000000000000 [ 49.628394][ T6666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.630449][ T6666] R13: 0000000000000000 R14: 00007fbb0cb36058 R15: 00007ffe11262b48 [ 49.632515][ T6666] [ 49.633332][ T6666] Modules linked in: [ 49.634358][ T6666] CR2: 0000000000000000 [ 49.635439][ T6666] ---[ end trace 0000000000000000 ]--- [ 49.636895][ T6666] RIP: 0010:0x0 [ 49.637824][ T6666] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 49.639741][ T6666] RSP: 0018:ffffc900032cf9c8 EFLAGS: 00010283 [ 49.641331][ T6666] RAX: 0000000000000ae6 RBX: 0000000000000000 RCX: ffffc90007522000 [ 49.643400][ T6666] RDX: 0000000000040000 RSI: ffffea00010650c0 RDI: ffff888027bed880 [ 49.645449][ T6666] RBP: ffffea00010650c0 R08: 0000000000000007 R09: 0000000000000000 [ 49.647490][ T6666] R10: 0000000000000000 R11: ffffffff961d8908 R12: 1ffff92000659f3a [ 49.649548][ T6666] R13: ffff888027bed880 R14: 0000000000000000 R15: dffffc0000000000 [ 49.651601][ T6666] FS: 00007fbb0d6f46c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 49.654432][ T6666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.656190][ T6666] CR2: ffffffffffffffd6 CR3: 00000000255cc000 CR4: 0000000000352ef0 [ 49.658266][ T6666] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.660348][ T6666] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.662431][ T6666] Kernel panic - not syncing: Fatal exception [ 49.664722][ T6666] Kernel Offset: disabled [ 49.665838][ T6666] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:25:04 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a640080 RCX=ffffffff81818624 RDX=ffff88801dac0000 RSI=ffffffff818185ff RDI=0000000000000005 RBP=ffffc90000167d78 RSP=ffffc90000167ca0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c386a6 R12=1ffff9200002cf98 R13=0000000000000001 R14=0000000000000003 R15=ffffed100d4c8011 RIP=ffffffff81818605 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020040000 CR3=00000000255cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000300080000af4b 69c4000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b32bf223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b32bf2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b32bf2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b32bf2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b32bf22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b32bf23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b32d0c488 00007f3b32d0c480 00007f3b32d0c478 00007f3b32d0c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b3386d100 00007f3b32d0c440 00007f3b32d00004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b32d0c498 00007f3b32d0c490 00007f3b32d0c488 00007f3b32d0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b9b05 RDI=ffffffff9aaebc40 RBP=ffffffff9aaebc00 RSP=ffffc900032cf278 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000020 R14=ffffffff850b9aa0 R15=0000000000000000 RIP=ffffffff850b9b2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbb0d6f46c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000255cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0c9f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0c9f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0c9f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0c9f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0c9f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0c9f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0cb0c488 00007fbb0cb0c480 00007fbb0cb0c478 00007fbb0cb0c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0d66d100 00007fbb0cb0c440 00007fbb0cb0c458 00007fbb0cb0c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0cb0c498 00007fbb0cb0c490 00007fbb0cb0c488 00007fbb0cb0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 14af8db5df18583c 64f1ad66e15c1cc5 d9ad588ab8a206d4 8f30c5f38f3e87b1 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31da4e72f39979ae 73497dfbcead3969 240bddc7c4384bc6 d44aac382d867672 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d16d515e2d718cd2 0c50bc26c2f512e3 4effce14b7084405 a99b299f549f7a7f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 208a2cabfbd70ceb d7a337c431359576 1f7e62afdb110eca 69b760f644353909 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000006cafc RBX=0000000000000002 RCX=ffffffff8b238489 RDX=ffffed100d507026 RSI=ffffffff8bd1b300 RDI=ffffffff816477cc RBP=ffffed1003b5b000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000001 R12=0000000000000002 R13=ffff88801dad8000 R14=ffffffff905f5988 R15=0000000000000000 RIP=ffffffff8b23986f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020404000 CR3=00000000506ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe11262ee0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0c9f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0c9f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0c9f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0c9f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0c9f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb0c9f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000040000 RBX=ffff888031d0aaa8 RCX=ffffc90007041000 RDX=0000000000040000 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000214 RSP=ffffc900036ff980 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffffff81d84685 R14=ffff888031d0aab8 R15=ffff888031d0aaa8 RIP=ffffffff818d7da4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f46f1c226c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020499000 CR3=00000000506ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b32bf223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b32bf2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b32bf2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b32bf2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b32bf22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b32bf23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000