last executing test programs: 2.198395773s ago: executing program 0 (id=14): fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc8a41, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x9) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x4}, &(0x7f0000000140)=0x28) r2 = syz_open_dev$video4linux(&(0x7f0000000180), 0x3, 0x101a00) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x0, 0xee01}}, './file0\x00'}) connect$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x80, @any, 0x45ea, 0x2}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000340)={0x40000000, 0x6, "a65425ab24b62d28ee8c75b2f8e7ea083c317636c13bc0daebb6f900c0e38f0f", 0x6, 0x8, 0x8b, 0xe649, 0x5, 0x8, 0x5f33, 0xfcbe, [0xe, 0x0, 0x5, 0x9]}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000440)={0x6, 0x3ff00, 0x2}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r3) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x280, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x72, 0x3, "399f38a81733c1620a1255cd6a87076e61b74c44847926902be26138a1691a82685b70adddb2ddc7e1bcfdeb21131b869900036685a67038a8104c7c24d150f7745fec34c48bf0339ad4acb177ce223a8210a3fd15afae01a0d1fb7dbb14267111ef4a0816eadb9f0f676423298d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x76}, @TIPC_NLA_NODE_ID={0x7a, 0x3, "eed325ad8a48b283c063b0371f9f71d946dc9594837ecf826c2044613a88a2908a188cfb2b179e4d95f9f97199e55efdf0d40fd29db86b757c882108774f28f4815e406ef00899d97887506e2c23a2ae5fbfdf44b79e5e070b89ce091b2a658bded1fbcae75e2e2a60b3c4557f21eeac5195f897ea29"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "ba3afc1d9a696b3762c4174cfecca6f2d217402cb165833933597e585177091e08784d"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff34e3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xaa30}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xede1, @mcast1, 0xb071}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x16c6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xd1, @empty, 0x8}}}}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x184, 0x1, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "f4c65dbef52d02b56287e5077f1e5cc6cf88ae6a6dc96b2d7c680f7d3f982d1de3e7d506f31f54b3f489f2d0a7d774a5f880c65bafada43b6b1d51a7226576052f5302a20ab4cd8ca4ef6720f71730900db2a85a4880927536bda3ea7591e0c216260bf742b50dd74b64e2b842d0e884b4ae6726fba0e336f1fefdff49eab72b2cc78adbff126633fbd1a8e1e97682900eda95c8ce0053b1c1c33cc99e2c189a32c4c49adf160c31b6bdf4525bb8efe5df4a55bc92629c1935"}, @NFTA_TABLE_USERDATA={0x4b, 0x6, "273d91869c19c8d260d9c01de545ea4ffbd5f2733c05d2ad6999aa122e5123ff61eafc950b60f65cc514b267468d49d9ce6da9629830164b3a5d4278f6ffd493854901cbdbf593"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x3f, 0x6, "0a555a13a44c8f3d690df4b6439a741bb1b4a0582b109d4ca25f7f8721cb20f667bd0ede74b80e171549799e5afefd9284dd0432560043f877a569"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x184}, 0x1, 0x0, 0x0, 0x2000c011}, 0x890) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f0000000ac0)={0x0, {0x800, 0x800}}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000b00)={r1, 0xff, 0x7f, 0x6}) ioctl$SNDCTL_DSP_GETCAPS(r6, 0x8004500f, &(0x7f0000000b40)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000b80)={'wg0\x00'}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000c00)={&(0x7f0000000bc0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000d40)={&(0x7f0000000c40)=[0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000e80)={&(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000ec0)={r7, r8, r9, 0x8, 0x4b4b, 0x2, 0x100, 0xa, 0x371, 0x4, 0x71, 0xa}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000f00), &(0x7f0000000f40)=0xc) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001040)={0x10, 0x0, &(0x7f0000000f80)=[@exit_looper, @release={0x40046306, 0x1}, @register_looper], 0x77, 0x0, &(0x7f0000000fc0)="b8c7bb89286ade8f1263017215958dd0bd3c23af0490b51c47a511e2b416559926c9eb836ff80c0d608c0c682ddfa513f528cb78868745698cc7da96a3114780352d0f8d025561304ace8afc705824f0bf3c0dbc827ee1b7d57ce580459a671ca87eaebb7db37325769d2b924970d23f2b5e1b35ae0e47"}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001080), 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) sendmsg$AUDIT_TTY_GET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x10, 0x3f8, 0x8, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}}, 0x20044800) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000001200), &(0x7f0000001240)=0x4) 2.109000411s ago: executing program 0 (id=15): socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x36, 0x8, 0x17, 0x39, &(0x7f0000000800)="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"}) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000280)={0x2, 0x1, @raw_data=[0x400, 0x9, 0xe, 0x2, 0x3ff, 0x4, 0x4, 0xa, 0x8, 0x4, 0x45, 0x2, 0x2400, 0xe, 0xfffff000, 0x1ff]}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000005c0), 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000100)="f30f6ffebaf80c66b89a16a28766efbafc0cb82300eff6dcba4300ec0f01df660f3880159a0000d6000f974c3964668921ba610066ed", 0x36}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000001880)=0xd1, 0x4) read(r2, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x1, 0x5b81, 0xc0, 0x2, 0x6, 0x9, 0x0, 0x0, 0xde}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r10, 0x0, 0x78) close(r10) open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) 1.869145085s ago: executing program 0 (id=20): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) r0 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000891000/0x3000)=nil, 0x3000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1800eb25bd7200fcdbdf250400000004000d80eaffffff00"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) (async) userfaultfd(0x1) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000891000/0x3000)=nil, 0x3000}, 0x4}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1800eb25bd7200fcdbdf250400000004000d80eaffffff00"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040000) (async) 1.867453954s ago: executing program 1 (id=21): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000100)={0x1, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xf454, 0x800000, 0x8, 0x8001, 0x8}}, @TCA_DEF_DATA={0x9, 0x3, ')$)+\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r5, 0x400, 0x2, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200080c0}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000040)={0xf, 0x2, 'client1\x00', 0x4, "70067ad327c699d3", "78a45e16571ec69bc5afc81e679e50b0d40d6a65820e48ce9b168132d17e5813", 0xffffff2a, 0x7fff}) 1.789497798s ago: executing program 1 (id=22): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000640), 0x4, 0x82) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000680)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x128a877, &(0x7f0000000180)={[{@nr_inodes={'nr_inodes', 0x3d, [0x38]}}]}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x80000000}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc850}, 0x0) 1.788945644s ago: executing program 1 (id=23): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_hsr\x00', 0x10) r1 = socket$kcm(0x2, 0x5, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x18000c0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x200000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x40010, 0xfffffffffffffffe) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0xd, "f3c492eb02002002003b3a080089b42c0000040022eea1000000592000"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000280)={0x2, "78c375d8568c06541d53eb52e537d966dc00"}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="260fc7b60a000000b805000000b9b17900000f01d9c4425997f83e660f3a62f047c462a59810460f35b9fe0b0000b8447ad67aba000000000f30f30f1eecf30f2af70f20d835200000000f22d8", 0xffe4}], 0x1, 0x28, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x5, 0x0, 0xfffffffd, 0xeabd}, 0x4, 0x0, &(0x7f0000000040)={{0x0, 0x6}}, 0x0, 0x0, 0x40}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1.679970506s ago: executing program 0 (id=24): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000100)={0x0, 0x1ffffd, 0x10100, 0xfffffffe, 0x9}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x468b, 0xfb96, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\a78z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) socket$kcm(0x29, 0x5, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000180), 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) close_range(r6, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcc, &(0x7f0000000080)=""/204, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.540415792s ago: executing program 1 (id=25): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1b0000001e005f0214f6fffffffffff80700"/27, 0x1b) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x30, r1, 0x1, 0x2, 0x80, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf0}]}, 0xffffffffffffff0d}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r5 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) ptrace(0x10, r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000903000/0x4000)=nil, 0x4000}}) ptrace$peekuser(0x3, r5, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r10 = gettid() r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x400, 0xffffffffffffffff, 'id1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000022c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000002240)={0x78, r1, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x3d}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x42}}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_PID={0x8, 0x52, r10}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r12}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r13}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r14 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) ioctl$TIOCMGET(r14, 0x5415, 0x0) 1.539636527s ago: executing program 2 (id=26): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000000)="b8d2b38d5ed1de47a60d8128f1596940861bc74b9db65ba8bfc0dd", 0x1b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x7f, 0x2) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000340)=""/69, 0x623c41ea}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_extract_tcp_res(&(0x7f0000000100), 0x6, 0x400) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0xffffffff) write$UHID_INPUT(r4, &(0x7f0000001a80)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.400261395s ago: executing program 2 (id=27): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0001000000000000"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x6, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.399993832s ago: executing program 2 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x58}}, 0x20044050) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000180)="ea8595138cbc94928f222f26a115c3041fb56f5ea1bffb4092b0ee95c85a58", 0x1f, r2) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x143b0fa1, 0x4000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000380)=0x40) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) shutdown(r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ppoll(&(0x7f00000001c0)=[{r4, 0x11}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x800, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x7, 0x8, 0x0, 0x0, 0x2}, ["", ""]}, 0x1c}}, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x7}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r11}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000440)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000480)='GPL\x00', 0x6, 0x66, &(0x7f00000004c0)=""/102, 0x41100, 0x16, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r10, r11], 0x0, 0x10, 0x7fff}, 0x94) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f00000000c0)={0x20002000}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000304fcfffffffedbdf25000074dbf450ec6dc191e30b15109be4b972", @ANYRES32=0x0, @ANYBLOB="40210400075005001c0012800b00010062726964676500000c00028008001a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.340545339s ago: executing program 1 (id=29): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x3}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x19, 0x13, [{0x6c}, {0xb, 0x1}, {0x24, 0x1}, {0xf, 0x1}, {0x12, 0x1}, {0x36}, {0x1b}, {0x2, 0x1}, {0x24, 0x1}, {0x1b}, {0xf}, {0x6666c8435f791bac, 0x1}, {0x22, 0x1}, {0x0, 0x1}, {0x8156603727ad587d, 0x1}, {0x1a}, {0x30}, {0x18}, {0xb, 0x1}, {0x48, 0x1}, {0x6}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xdc}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x450}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6dc}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9539}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000010) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffb}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x11}, 0x200040c4) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000440)={'\x00', @multicast}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f00000005c0)=0xe8) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r5, &(0x7f0000000600)={0x77, 0xcae1}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000640)=""/85, &(0x7f00000006c0)=0x55) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000091) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r1, 0x59a0ee27b29df5aa, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x38}}}}, [@chandef_params, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0103562a8251"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) fdatasync(r8) syz_80211_inject_frame(&(0x7f0000000980)=@broadcast, &(0x7f00000009c0)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x1}, {0x6}, @device_b, @broadcast, @device_a, {0x9, 0x6}, @broadcast}, @a_msdu=[{@broadcast, @broadcast, 0xe4, "eeb6b06794daedf6498df92fe1e53cac4550ff504d77b29fa2c665f58e1541bdf8d059f8a8c67ca122962a4fdafe6835ae3b9080d9bbf54f6d3b0aac29024b188b9b86cfaf591cab616b7953ac79ddbf7b064e53c2f600de674cdeb1b6bcb0ebc2c5b297b9585a5f57f2dd07d6a23e75faaedbcd36a9c4638d3e8af9de75475e9d6b65c64b6dd29735a0ac76f620d601965e9dba646cf4cfdf5f91b4c94e7ba842b87c0f0f145555dae11cb1218e1bd95dd9a078ef51a824026617f88a9b1fb0e180d211fb608abdca2cc7c4bd33685367af1d59bbf6ffe8c43ea049a908776a5585e89f"}, {@device_b, @device_a, 0xa4, "07809056cc6f56bc8e85c43bc75d4beb21139e98c7274a12895b2f6b6de26ff8aab6438c569bd373e566e07f6de954755256dd4473dc2c3afd12106c84b9ef5a934d8d706e7567a348fc017170dd674d59c391033f65b878a672a1e5a74a17a06b5f560fa8d757dfe0b4e671eb79222e4332f8700774004e52fe7069051287d55a4395374c9094a0da5e4a6ac72a484ed9e10d743ce66ffc6188beca882906e48a31b1ce"}, {@device_b, @device_b, 0x7, "172885901eb409"}, {@device_a, @broadcast, 0xf6, "47dd014cd0c2159bf4f0428ea2e32d28106ee13ff40facf3eea56e4b587fc388d89c9e9c2fbc3d81dccac1674a9822d54c4d94ec0b5c1ee7768cc33fb03124f44795665ee11cc0ca98c56635bd841e131e7880cde1fd85532f735280a50bd7bbd91deef007559701829c60c98822f1b05b3be3ebb906639d5b1402cb61349c533413b710e8a9ef03378896a8d9196165455e6723d99a21477ed4aa8adb7caddd02794109f7184e84676abf7310e63d80f8c79bbdc772bef662e2b9924ceabfe8b18bbb4696911c7a4bd96f6bbc3d62d9564321459f514fbde1b8b2299bbf39244c8e4d8d703357f23143cb6be50431e873a51c1e38f2"}, {@broadcast, @device_b, 0x79, "731f94dedbd1b557f2a39ef835ea3a5f6be53dde7c6f259d7c521f15d891f5cfa9db8094e4e4c15aa304a7a7664c4804c63e36879a2b1711994b0b89732ba12e4fa6d491004b93ab3157712369554923f8df5ca81b151d97fdbd7ed624368c9446944e38e7629920c3855e0d946785c92c61c2bcf84af5f74c"}, {@device_a, @device_b, 0x86, "532bc0632f9f1b7b4c7bebc56b8c175efee5d2ccf728f85a869d671ec00603aafa37715ae77a630b6ebdc9bca9c1394f393f78b10a6bd3794c5836d08fbb5316e2b256e187ae7f05a743da2519f6de2bd9d2db64488f76168385fea0ac76108a64a04ec1c29981d5b6827e1e58afbed477d01345762830a89ab331968972a5c7d09890252e76"}, {@device_b, @broadcast, 0x1d, "c291dad7b0e29c1ee5d376a486b3299538a7890fe3ae0c69a39eddaee6"}]}, 0x42a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000e40)={0x0, @sliced={0xc, [0x0, 0xc, 0x89f, 0x0, 0x9, 0x6, 0xc66, 0x400, 0x1, 0x8, 0xfa7, 0x8000, 0x0, 0x1000, 0x7, 0x1, 0x5, 0x6, 0xd62, 0x2, 0x52c4, 0x8, 0x9, 0x33, 0x2, 0x2, 0x4, 0xd, 0x88eb, 0x6, 0x4, 0x1, 0x81, 0x4, 0x5, 0x7, 0x0, 0x7, 0x5, 0x27, 0x164, 0xabd7, 0x5, 0x9a8f, 0x8, 0x10, 0x9, 0x200], 0x401}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0x84, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) chmod(&(0x7f00000010c0)='./file0\x00', 0x2d) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000001100)={{0x2, 0x4e22, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xa, {0x2, 0x4e20, @loopback}, 'veth0_virt_wifi\x00'}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000001180)=0xeeeea000) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f00000011c0)={0x3, 0x0, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0x2, r0}) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r10, &(0x7f0000001280)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) close_range(r8, r6, 0x2) write$selinux_load(r10, &(0x7f00000012c0)={0xf97cff8c, 0x8, 'SE Linux', "86425bc4fd52bfaf65482b0e705a34b4901b109efd25957ea2fdf486bd8bbd22722394d0c5544494a8b282d02f5644da94d7bde8b7d5edb3343532c1b25c0ea8957e2d5c8dbd3d3e90488241338ed596d173a1d9a11c3b67750caf65b22972a63b7f704dba87abaa985dddf2d31c71f75ab81c2360634534ba5ebe280b8c2d01e988b93c471a95d6a4dc944df00b76ca07683c1b54a1e7e48c9aeaeb816c336d959af7786f202719cc0c7a48f8550d709910cdccf4df720a016a"}, 0xca) 1.190497514s ago: executing program 2 (id=30): setresgid(0xee00, 0xee01, 0x0) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000200)='stack\x00') readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0x5bcd, 0x0) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000000900)={0x3}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r10, 0x921, 0x0, 0x4, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x40) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r6, @ANYRES16=r12, @ANYBLOB="f6020000000000000025020000000800440007000000f58a115fba4ddbb6b48d21a194e3b6d5ff680008000000", @ANYRES8=r4], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r12, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) setns(r6, 0x24020000) syz_clone(0x13000080, 0x0, 0x0, 0x0, 0x0, 0x0) r14 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r14, 0x11e, 0x1, 0x0, &(0x7f0000000040)) r15 = socket(0x23, 0x80002, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmmsg$unix(r15, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.109319072s ago: executing program 2 (id=31): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags}) ioctl$sock_proto_private(r3, 0x8b24, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000400)="efe1ccb8c640cc4988fa4e078c4fbfae2cd60e751ff327d0ff01ed1d04fdb8dc6d35e1d165d26d88efeb64fd7e8ff67e4e5fe09f2d3644bbd7d064fc26c45a1579237b25181f16395c3e6df05e3c56daaaf67e49ac66428f18215872a6cd") setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000002c0)=""/225) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x1c, r7, 0x1, 0x40123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="7092c85185bd58a49b0201050194"], 0x6) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000280)='./file0\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 819.88074ms ago: executing program 0 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8}, @RTA_MARK={0x8}]}, 0x2c}}, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xa, 0xfffffffc}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000002c0)={r5, 0x20a9ad}, &(0x7f0000000300)=0x8) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x10, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) 815.872216ms ago: executing program 1 (id=38): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) (async, rerun: 32) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) (rerun: 32) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) (async, rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000040)={0x29}) 650.449494ms ago: executing program 3 (id=42): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x7, {0x7, 0xfff, 0x3, 0x400}}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0xa089}, {r3, 0x424}, {r0, 0x4581}, {r0, 0x41}, {r4, 0xa261c848faf5bb53}, {r1, 0x8010}], 0x6, &(0x7f0000000100), &(0x7f0000000140)={[0x4]}, 0x8) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000240)=""/148, 0x94}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000340)=""/135, 0x87}], 0x5, &(0x7f0000003040)=[@rdma_args={0x48, 0x114, 0x1, {{0x4607, 0x100}, {&(0x7f0000000480)=""/245, 0xf5}, &(0x7f0000002800)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/234, 0xea}, {&(0x7f0000001680)=""/151, 0x97}, {&(0x7f0000001740)=""/50, 0x32}, {&(0x7f0000001780)=""/75, 0x4b}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x6, 0x20, 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x7e76, 0x3}, &(0x7f0000002880)=0x88, &(0x7f00000028c0)=0x5, 0x2, 0x4, 0x2, 0xbd, 0x50, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0x0, 0xc6}, &(0x7f0000002900)=0x5, &(0x7f0000002940)=0x7, 0x8001, 0xfffffffffffffffd, 0x1, 0xffffffffffffff80, 0x54, 0xb3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002980)=""/69, 0x45}, &(0x7f0000002a00), 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0xf6, 0x8}, {&(0x7f0000002a40)=""/125, 0x7d}, &(0x7f0000002e80)=[{&(0x7f0000002ac0)=""/179, 0xb3}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/211, 0xd3}, {&(0x7f0000002cc0)=""/139, 0x8b}, {&(0x7f0000002d80)=""/3, 0x3}, {&(0x7f0000002dc0)=""/173, 0xad}], 0x6, 0xb31a45d45ac2664b, 0x40}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002f00)=""/249, 0xf9}, &(0x7f0000003000), 0x8}}], 0x1a0, 0x60080}, 0x24000080) r6 = io_uring_setup(0x5980, &(0x7f0000003240)={0x0, 0x3a95, 0x1000, 0x3, 0x2a9}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f00000032c0)={0x2, r5, 0x2, {0x5, 0x5}, 0x5}, 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003300), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000003340)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7f, "70f10e", "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"}}, 0x110) r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ppoll(&(0x7f0000003480)=[{r1, 0x6200}, {r8, 0x14a}, {r6, 0x200}, {r1, 0x2008}], 0x4, &(0x7f00000034c0)={0x0, 0x3938700}, &(0x7f0000003500)={[0x3]}, 0x8) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000003540)=0x7) r9 = fcntl$dupfd(r6, 0x406, r3) openat$uinput(0xffffffffffffff9c, &(0x7f0000003580), 0x802, 0x0) ioctl$UI_DEV_CREATE(r9, 0x5501) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000035c0)={@private=0xa010101, @multicast2, 0x1, "6d9f4179064413bb1543fe7900cc760031e68fec790bed388829de539d1049bc", 0xc, 0x6, 0x3, 0x2}, 0x3c) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000003680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000003640)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f00000036c0)={0x12, 0x10, 0xfa00, {&(0x7f0000003600), r10, r7}}, 0x18) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003740), r9) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f00000038c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003880)={&(0x7f0000003780)={0xd8, r11, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000880}, 0x40000) io_setup(0x9c, &(0x7f0000003900)=0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r8, 0xc028564e, &(0x7f0000003940)={0x2, 0x8c3d19046dbac017, [0xb6d, 0x7fff, 0x7, 0x544d, 0x7f, 0x8, 0x0, 0x1000]}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r9, 0xc040564b, &(0x7f0000003980)={0x10001, 0x0, 0x201b, 0x3, 0x9, {0x1000, 0x1}, 0x1}) r13 = syz_io_uring_complete(0x0) connect$unix(r13, &(0x7f00000039c0)=@file={0x1, './file0\x00'}, 0x6e) io_getevents(r12, 0x2, 0x0, &(0x7f0000003a40), 0x0) 540.518401ms ago: executing program 3 (id=43): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf251400000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x34040006}, 0x20048410) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r4 = socket(0x10, 0x2, 0x0) sysfs$1(0x3, 0x0) (async) sendto$inet6(r4, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x100010, r0, 0x0) 249.724176ms ago: executing program 3 (id=44): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x1, 0x11, 0xd, 0x100, &(0x7f00000000c0)="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"}) (async) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x1, 0x11, 0xd, 0x100, &(0x7f00000000c0)="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"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x42600, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29, 0x7afb]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) (async) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) recvmsg$unix(r1, &(0x7f0000000c40)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000580)=""/182, 0xb6}, {&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/193, 0xc1}, {&(0x7f0000000800)=""/141, 0x8d}, {&(0x7f00000008c0)=""/195, 0xc3}, {&(0x7f0000000a80)=""/131, 0x83}, {&(0x7f00000009c0)=""/84, 0x54}], 0x8, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}, 0x21) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f030000000100000007000000", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004814) 236.814333ms ago: executing program 0 (id=45): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000e, 0x200000005c831, 0xffffffffffffffff, 0xf4000000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000194}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000181401002bbd7000000000000800010000000000080003"], 0x20}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') 236.404009ms ago: executing program 2 (id=46): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x2, 0x0) r1 = io_uring_setup(0x117c, &(0x7f0000001040)={0x0, 0xbd17, 0x80, 0x1, 0x1c1}) syz_io_uring_setup(0x7456, &(0x7f00000010c0)={0x0, 0x1031, 0x1, 0x3, 0x358, 0x0, r1}, &(0x7f0000001140), &(0x7f0000001180)) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f00000000c0)=0x3, 0x4) (async) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f00000000c0)=0x3, 0x4) connect$caif(r2, &(0x7f0000000000)=@dbg, 0x18) recvmmsg(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/146, 0x92}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f00000003c0)=""/26, 0x1a}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/87, 0x57}], 0x7, &(0x7f0000000600)=""/65, 0x41}, 0x3}, {{&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000700)=""/191, 0xbf}, {&(0x7f00000007c0)=""/178, 0xb2}, {&(0x7f0000000580)=""/18, 0x12}, {&(0x7f0000000880)=""/196, 0xc4}], 0x4, &(0x7f00000009c0)=""/220, 0xdc}, 0xb426}, {{&(0x7f0000000ac0)=@can, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b40)=""/24, 0x18}], 0x1, &(0x7f0000000bc0)=""/180, 0xb4}, 0x3}, {{&(0x7f0000000c80)=@isdn, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000d00)=""/87, 0x57}, {&(0x7f0000000d80)=""/48, 0x30}, {&(0x7f0000000dc0)=""/246, 0xf6}], 0x3, &(0x7f0000000f00)=""/53, 0x35}, 0x5b}], 0x4, 0x40000000, 0x0) read$usbmon(r0, &(0x7f0000000240)=""/118, 0x76) (async) read$usbmon(r0, &(0x7f0000000240)=""/118, 0x76) 66.861088ms ago: executing program 3 (id=47): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp6=r3}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000500), &(0x7f0000000600)=r3}, 0x20) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000800)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 66.421162ms ago: executing program 3 (id=48): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a9, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'rose0\x00'}, @IFLA_VFINFO_LIST={0xfffffffffffffecd, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3}}]}]}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=@mpls_getroute={0x184, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfb, {0x1c, 0x0, 0xacaea5c69fbd8e2c, 0x3, 0xfe, 0x3, 0x0, 0x8, 0x2900}, [@RTA_DST={0x8, 0x1, {0x0, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x60}, @RTA_MULTIPATH={0xc, 0x9, {0x7f, 0x14, 0x3, r2}}, @RTA_VIA={0x14, 0x12, {0x2, "e102be4842a4fa6309fa4584930d"}}, @RTA_NEWDST={0x84, 0x13, [{0xca7b}, {0xc}, {0x2, 0x0, 0x1}, {0x2}, {0x1, 0x0, 0x1}, {0x6}, {0xb}, {0x9}, {0x13a, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x4}, {0x5}, {0x5}, {0xb69e, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x8}, {0x5}, {0xfffb9}, {0x9}, {0x2}, {}, {0x9}, {0x13b4, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0x69f}, {0x7}, {0x0, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x40}]}, @RTA_VIA={0x14, 0x12, {0xa, "ce6ad61c7f12546a4627ff1830b1"}}, @RTA_VIA={0x14, 0x12, {0x6, "d7655e6ce1ad75e94ec02647653a"}}, @RTA_NEWDST={0x84, 0x13, [{0x3, 0x0, 0x1}, {}, {0x5, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7}, {0x800, 0x0, 0x1}, {0x8}, {0x6, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x4}, {0x3ab8, 0x0, 0x1}, {0x3}, {0xffff7, 0x0, 0x1}, {0x2}, {0x4}, {0x200}, {0x7}, {0x941c}, {0x2}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {}, {0x101, 0x0, 0x1}, {0xe, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xf716d}, {0x3, 0x0, 0x1}, {0xf6a79, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0xbbfc, 0x0, 0x1}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40}, 0x15) 0s ago: executing program 3 (id=49): syz_emit_ethernet(0x44, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}, {"b485c43dc2d3e83ab2597f0d86dd"}}}}}}, 0x0) r0 = syz_io_uring_setup(0x741, &(0x7f0000000000)={0x0, 0x47c, 0x4000, 0x1, 0x26a}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000100), 0x1) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) r2 = socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4], 0x1, 0x80000}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xa00, 0x12100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x7fffffff, r0, 'id1\x00'}) write$tun(r7, &(0x7f0000001380)={@void, @val={0x0, 0x4, 0x2, 0x9, 0x200, 0xec}, @mpls={[{0x68d, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x4}, {0xa8f, 0x0, 0x1}], @generic="97ea6cc22fab8db866b197bc9494de83ff220704eb"}}, 0x37) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000001340)={0x2, 0x1, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/131, 0x83}], &(0x7f0000001300)=[0x7f55, 0x2, 0x5, 0xa]}, 0x20) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000002240)=""/4103, 0x0, 0x10010, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ 38.138952][ T40] audit: type=1400 audit(1750960533.887:61): avc: denied { siginh } for pid=5837 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:32163' (ED25519) to the list of known hosts. [ 39.092394][ T40] audit: type=1400 audit(1750960534.867:62): avc: denied { name_bind } for pid=5844 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.108286][ T40] audit: type=1400 audit(1750960534.877:63): avc: denied { write } for pid=5845 comm="sh" path="pipe:[2619]" dev="pipefs" ino=2619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.120749][ T40] audit: type=1400 audit(1750960534.897:64): avc: denied { execute } for pid=5845 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.127541][ T40] audit: type=1400 audit(1750960534.897:65): avc: denied { execute_no_trans } for pid=5845 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.028833][ T40] audit: type=1400 audit(1750960536.797:66): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.031610][ T5845] cgroup: Unknown subsys name 'net' [ 41.183951][ T5845] cgroup: Unknown subsys name 'cpuset' [ 41.188042][ T5845] cgroup: Unknown subsys name 'rlimit' [ 41.413293][ T5897] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.077631][ T5845] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.963422][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 44.963431][ T40] audit: type=1400 audit(1750960540.737:80): avc: denied { execmem } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.171279][ T40] audit: type=1400 audit(1750960540.947:81): avc: denied { create } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.177483][ T40] audit: type=1400 audit(1750960540.947:82): avc: denied { read write } for pid=5929 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.184785][ T40] audit: type=1400 audit(1750960540.947:83): avc: denied { open } for pid=5929 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.192046][ T40] audit: type=1400 audit(1750960540.947:84): avc: denied { ioctl } for pid=5929 comm="syz-executor" path="socket:[2654]" dev="sockfs" ino=2654 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.221351][ T5294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.223835][ T5934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.225255][ T5294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.226528][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.229969][ T5294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.231170][ T5934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.233581][ T5294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.235920][ T5934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.237894][ T5294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.239797][ T5934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.242990][ T5294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.244449][ T5934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.247542][ T5294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.249175][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.253886][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.262197][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.264523][ T40] audit: type=1400 audit(1750960541.027:85): avc: denied { read } for pid=5929 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.268922][ T5934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.271626][ T40] audit: type=1400 audit(1750960541.037:86): avc: denied { open } for pid=5929 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.274091][ T5934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.280635][ T40] audit: type=1400 audit(1750960541.037:87): avc: denied { mounton } for pid=5929 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.283174][ T5294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.283463][ T5934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.462516][ T40] audit: type=1400 audit(1750960541.237:88): avc: denied { module_request } for pid=5929 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.542850][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 45.557604][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 45.615026][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 45.632770][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 45.693677][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.696339][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.698661][ T5929] bridge_slave_0: entered allmulticast mode [ 45.701492][ T5929] bridge_slave_0: entered promiscuous mode [ 45.741646][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.743903][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.746150][ T5929] bridge_slave_1: entered allmulticast mode [ 45.748614][ T5929] bridge_slave_1: entered promiscuous mode [ 45.824267][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.827142][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.829714][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.833362][ T5939] bridge_slave_0: entered allmulticast mode [ 45.835855][ T5939] bridge_slave_0: entered promiscuous mode [ 45.845708][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.848502][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.850951][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.853124][ T5939] bridge_slave_1: entered allmulticast mode [ 45.855609][ T5939] bridge_slave_1: entered promiscuous mode [ 45.971850][ T5929] team0: Port device team_slave_0 added [ 45.975191][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.978258][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.980636][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.982970][ T5931] bridge_slave_0: entered allmulticast mode [ 45.985521][ T5931] bridge_slave_0: entered promiscuous mode [ 45.989385][ T5929] team0: Port device team_slave_1 added [ 45.991340][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.993525][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.995757][ T5943] bridge_slave_0: entered allmulticast mode [ 45.998302][ T5943] bridge_slave_0: entered promiscuous mode [ 46.001820][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.004125][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.006402][ T5943] bridge_slave_1: entered allmulticast mode [ 46.008927][ T5943] bridge_slave_1: entered promiscuous mode [ 46.012766][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.015777][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.017929][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.020226][ T5931] bridge_slave_1: entered allmulticast mode [ 46.022785][ T5931] bridge_slave_1: entered promiscuous mode [ 46.126414][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.128579][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.136556][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.192631][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.195701][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.197839][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.206767][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.212468][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.216848][ T5939] team0: Port device team_slave_0 added [ 46.220138][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.244748][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.250344][ T5939] team0: Port device team_slave_1 added [ 46.287160][ T5931] team0: Port device team_slave_0 added [ 46.331360][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.333622][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.341407][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.360250][ T5931] team0: Port device team_slave_1 added [ 46.388736][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.392559][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.400866][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.435952][ T5943] team0: Port device team_slave_0 added [ 46.445618][ T5929] hsr_slave_0: entered promiscuous mode [ 46.447837][ T5929] hsr_slave_1: entered promiscuous mode [ 46.465994][ T5943] team0: Port device team_slave_1 added [ 46.497422][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.499616][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.507494][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.511755][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.514133][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.522283][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.527829][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.530841][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.539923][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.547722][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.549879][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.558046][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.639545][ T5939] hsr_slave_0: entered promiscuous mode [ 46.642143][ T5939] hsr_slave_1: entered promiscuous mode [ 46.644188][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.646700][ T5939] Cannot create hsr debugfs directory [ 46.718447][ T5931] hsr_slave_0: entered promiscuous mode [ 46.720673][ T5931] hsr_slave_1: entered promiscuous mode [ 46.722648][ T5931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.724927][ T5931] Cannot create hsr debugfs directory [ 46.770406][ T5943] hsr_slave_0: entered promiscuous mode [ 46.772940][ T5943] hsr_slave_1: entered promiscuous mode [ 46.775034][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.777319][ T5943] Cannot create hsr debugfs directory [ 47.021467][ T5929] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.032160][ T5929] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.036112][ T5929] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.046797][ T5929] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.075164][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.081722][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.085716][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.092013][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.138964][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.144852][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.151499][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.157075][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.222115][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.225971][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.234098][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.236569][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.242599][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.293837][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.305701][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.309225][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.311919][ T1246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.320699][ T5294] Bluetooth: hci0: command tx timeout [ 47.320703][ T5940] Bluetooth: hci3: command tx timeout [ 47.321074][ T5940] Bluetooth: hci1: command tx timeout [ 47.321562][ T5933] Bluetooth: hci2: command tx timeout [ 47.335146][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.337327][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.348271][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.374464][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.376701][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.379865][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.382048][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.392786][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.425268][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.440893][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.443869][ T1246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.459811][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.462077][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.468535][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.479887][ T40] audit: type=1400 audit(1750960543.247:89): avc: denied { sys_module } for pid=5931 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.496405][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.517072][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.519592][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.529117][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.531382][ T1061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.573645][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.578288][ T5943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.595248][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.622996][ T5931] veth0_vlan: entered promiscuous mode [ 47.647786][ T5931] veth1_vlan: entered promiscuous mode [ 47.651959][ T5929] veth0_vlan: entered promiscuous mode [ 47.667518][ T5929] veth1_vlan: entered promiscuous mode [ 47.679593][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.692418][ T5931] veth0_macvtap: entered promiscuous mode [ 47.704639][ T5931] veth1_macvtap: entered promiscuous mode [ 47.712889][ T5929] veth0_macvtap: entered promiscuous mode [ 47.725284][ T5929] veth1_macvtap: entered promiscuous mode [ 47.733850][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.745603][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.756953][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.767321][ T5931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.770992][ T5931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.773803][ T5931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.776921][ T5931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.782032][ T5939] veth0_vlan: entered promiscuous mode [ 47.784918][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.795789][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.809736][ T5929] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.812631][ T5929] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.815536][ T5929] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.818163][ T5929] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.822299][ T5939] veth1_vlan: entered promiscuous mode [ 47.848730][ T5943] veth0_vlan: entered promiscuous mode [ 47.856088][ T5943] veth1_vlan: entered promiscuous mode [ 47.888749][ T5943] veth0_macvtap: entered promiscuous mode [ 47.898404][ T5939] veth0_macvtap: entered promiscuous mode [ 47.902845][ T5943] veth1_macvtap: entered promiscuous mode [ 47.902992][ T1246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.907396][ T1246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.910833][ T5939] veth1_macvtap: entered promiscuous mode [ 47.924315][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.926698][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.939274][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.944249][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.955970][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.959307][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.959772][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.962892][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.965376][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.970544][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.973143][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.991880][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.001097][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.003892][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.006535][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.009099][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.017006][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.019347][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.038027][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.063366][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.065983][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.092136][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.094546][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.116606][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.118980][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.151439][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.155588][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.165710][ T6026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5'. [ 48.237309][ T6031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 48.251380][ T6031] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 48.267898][ T6036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 48.419105][ T6050] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 48.428455][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12'. [ 48.483906][ T6058] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 48.636587][ T6066] netlink: 'syz.3.17': attribute type 1 has an invalid length. [ 48.641345][ T6066] netlink: 244 bytes leftover after parsing attributes in process `syz.3.17'. [ 48.789468][ T6077] usb usb8: usbfs: process 6077 (syz.1.21) did not claim interface 0 before use [ 48.829035][ T6079] ======================================================= [ 48.829035][ T6079] WARNING: The mand mount option has been deprecated and [ 48.829035][ T6079] and is ignored by this kernel. Remove the mand [ 48.829035][ T6079] option from the mount to silence this warning. [ 48.829035][ T6079] ======================================================= [ 48.917101][ T6081] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 49.113081][ T6098] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.126495][ T6098] xt_hashlimit: size too large, truncated to 1048576 [ 49.229797][ T6104] Zero length message leads to an empty skb [ 49.275043][ T6106] geneve2: entered promiscuous mode [ 49.278748][ T6108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.280170][ T6106] geneve2: entered allmulticast mode [ 49.390851][ T6106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.28'. [ 49.400487][ T5940] Bluetooth: hci1: command tx timeout [ 49.400915][ T5294] Bluetooth: hci0: command tx timeout [ 49.410259][ T5294] Bluetooth: hci2: command tx timeout [ 49.410295][ T5940] Bluetooth: hci3: command tx timeout [ 49.506200][ T6115] warning: `syz.2.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.636789][ T6131] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.817339][ T6139] capability: warning: `syz.0.37' uses deprecated v2 capabilities in a way that may be insecure [ 49.826452][ T6142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.39'. [ 49.969453][ T6156] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.970324][ T40] kauditd_printk_skb: 117 callbacks suppressed [ 49.970336][ T40] audit: type=1400 audit(1750960545.737:207): avc: denied { create } for pid=6155 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.970629][ T40] audit: type=1400 audit(1750960545.747:208): avc: denied { write } for pid=6155 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.973355][ T40] audit: type=1400 audit(1750960545.747:209): avc: denied { read write } for pid=6155 comm="syz.3.42" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 49.973642][ T40] audit: type=1400 audit(1750960545.747:210): avc: denied { open } for pid=6155 comm="syz.3.42" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 49.974176][ T40] audit: type=1400 audit(1750960545.747:211): avc: denied { read } for pid=6155 comm="syz.3.42" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.137653][ T40] audit: type=1400 audit(1750960545.907:212): avc: denied { map } for pid=6157 comm="syz.3.43" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 50.370280][ T40] audit: type=1400 audit(1750960546.137:213): avc: denied { execute } for pid=6161 comm="syz.0.45" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 50.370311][ T40] audit: type=1400 audit(1750960546.137:214): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.373351][ T40] audit: type=1400 audit(1750960546.147:215): avc: denied { create } for pid=6161 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 50.374261][ T40] audit: type=1400 audit(1750960546.147:216): avc: denied { name_bind } for pid=6161 comm="syz.0.45" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 50.383288][ T6162] lo speed is unknown, defaulting to 1000 [ 50.384231][ T6162] lo speed is unknown, defaulting to 1000 [ 50.387596][ T6162] lo speed is unknown, defaulting to 1000 [ 50.517521][ T6162] infiniband sz1: set active [ 50.518147][ T5932] lo speed is unknown, defaulting to 1000 [ 50.518209][ T6162] infiniband sz1: added lo [ 50.539553][ T6162] RDS/IB: sz1: added [ 50.539696][ T6162] smc: adding ib device sz1 with port count 1 [ 50.539824][ T6162] smc: ib device sz1 port 1 has pnetid [ 50.540623][ T24] lo speed is unknown, defaulting to 1000 [ 50.542580][ T6162] lo speed is unknown, defaulting to 1000 [ 50.589936][ T6176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.48'. [ 50.657717][ T6162] lo speed is unknown, defaulting to 1000 [ 50.663017][ T6144] ================================================================== [ 50.663026][ T6144] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 50.663042][ T6144] Write of size 8 at addr ffffc900051c9000 by task syz.1.38/6144 [ 50.663051][ T6144] [ 50.663056][ T6144] CPU: 0 UID: 0 PID: 6144 Comm: syz.1.38 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 50.663070][ T6144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.663077][ T6144] Call Trace: [ 50.663081][ T6144] [ 50.663085][ T6144] dump_stack_lvl+0x116/0x1f0 [ 50.663101][ T6144] print_report+0xcd/0x680 [ 50.663115][ T6144] ? __virt_addr_valid+0x81/0x610 [ 50.663129][ T6144] ? sys_imageblit+0x1a6f/0x1e60 [ 50.663139][ T6144] kasan_report+0xe0/0x110 [ 50.663153][ T6144] ? sys_imageblit+0x1a6f/0x1e60 [ 50.663165][ T6144] sys_imageblit+0x1a6f/0x1e60 [ 50.663176][ T6144] ? __mutex_trylock_common+0xe9/0x250 [ 50.663194][ T6144] ? __pfx_sys_imageblit+0x10/0x10 [ 50.663204][ T6144] ? do_raw_spin_lock+0x12c/0x2b0 [ 50.663218][ T6144] ? queue_work_on+0x12a/0x1f0 [ 50.663228][ T6144] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.663242][ T6144] ? queue_work_on+0x8b/0x1f0 [ 50.663253][ T6144] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 50.663266][ T6144] bit_putcs+0x90f/0xde0 [ 50.663283][ T6144] ? __pfx_bit_putcs+0x10/0x10 [ 50.663299][ T6144] ? fb_get_color_depth+0x120/0x250 [ 50.663312][ T6144] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.663325][ T6144] ? __pfx_bit_putcs+0x10/0x10 [ 50.663339][ T6144] fbcon_putcs+0x383/0x4a0 [ 50.663352][ T6144] do_update_region+0x2e6/0x3f0 [ 50.663364][ T6144] redraw_screen+0x63f/0x760 [ 50.663376][ T6144] ? __pfx_vc_do_resize+0x10/0x10 [ 50.663389][ T6144] ? __pfx_redraw_screen+0x10/0x10 [ 50.663403][ T6144] fbcon_set_disp+0x7d4/0xe40 [ 50.663416][ T6144] set_con2fb_map+0x703/0x1060 [ 50.663431][ T6144] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 50.663446][ T6144] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 50.663462][ T6144] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.663473][ T6144] do_fb_ioctl+0x328/0x7e0 [ 50.663483][ T6144] ? __pfx_do_fb_ioctl+0x10/0x10 [ 50.663493][ T6144] ? do_vfs_ioctl+0x523/0x1a60 [ 50.663510][ T6144] ? selinux_file_ioctl+0x180/0x270 [ 50.663525][ T6144] fb_ioctl+0xe5/0x150 [ 50.663533][ T6144] ? __pfx_fb_ioctl+0x10/0x10 [ 50.663542][ T6144] __x64_sys_ioctl+0x18b/0x210 [ 50.663553][ T6144] do_syscall_64+0xcd/0x4c0 [ 50.663569][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.663579][ T6144] RIP: 0033:0x7ff00398e929 [ 50.663588][ T6144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.663598][ T6144] RSP: 002b:00007ff0017f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.663608][ T6144] RAX: ffffffffffffffda RBX: 00007ff003bb6080 RCX: 00007ff00398e929 [ 50.663614][ T6144] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 50.663621][ T6144] RBP: 00007ff003a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 50.663627][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.663633][ T6144] R13: 0000000000000000 R14: 00007ff003bb6080 R15: 00007ffc6c05d868 [ 50.663641][ T6144] [ 50.663645][ T6144] [ 50.663649][ T6144] The buggy address belongs to the virtual mapping at [ 50.663649][ T6144] [ffffc90004ec9000, ffffc900051ca000) created by: [ 50.663649][ T6144] drm_gem_shmem_vmap_locked+0x4bc/0x720 [ 50.663663][ T6144] [ 50.663666][ T6144] Memory state around the buggy address: [ 50.663672][ T6144] ffffc900051c8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.663679][ T6144] ffffc900051c8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.663686][ T6144] >ffffc900051c9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 50.663691][ T6144] ^ [ 50.663697][ T6144] ffffc900051c9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 50.663704][ T6144] ffffc900051c9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 50.663709][ T6144] ================================================================== [ 50.663715][ T6144] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 50.663721][ T6144] CPU: 0 UID: 0 PID: 6144 Comm: syz.1.38 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 50.663734][ T6144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.663740][ T6144] Call Trace: [ 50.663743][ T6144] [ 50.663747][ T6144] dump_stack_lvl+0x3d/0x1f0 [ 50.663761][ T6144] panic+0x71c/0x800 [ 50.663777][ T6144] ? __pfx_panic+0x10/0x10 [ 50.663792][ T6144] ? __pfx__printk+0x10/0x10 [ 50.663801][ T6144] ? rcu_is_watching+0x12/0xc0 [ 50.663815][ T6144] ? check_panic_on_warn+0x1f/0xb0 [ 50.663831][ T6144] ? sys_imageblit+0x1a6f/0x1e60 [ 50.663842][ T6144] check_panic_on_warn+0xab/0xb0 [ 50.663857][ T6144] end_report+0x107/0x170 [ 50.663871][ T6144] kasan_report+0xee/0x110 [ 50.663885][ T6144] ? sys_imageblit+0x1a6f/0x1e60 [ 50.663897][ T6144] sys_imageblit+0x1a6f/0x1e60 [ 50.663908][ T6144] ? __mutex_trylock_common+0xe9/0x250 [ 50.663925][ T6144] ? __pfx_sys_imageblit+0x10/0x10 [ 50.663935][ T6144] ? do_raw_spin_lock+0x12c/0x2b0 [ 50.663948][ T6144] ? queue_work_on+0x12a/0x1f0 [ 50.663958][ T6144] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.663972][ T6144] ? queue_work_on+0x8b/0x1f0 [ 50.663987][ T6144] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 50.663999][ T6144] bit_putcs+0x90f/0xde0 [ 50.664016][ T6144] ? __pfx_bit_putcs+0x10/0x10 [ 50.664032][ T6144] ? fb_get_color_depth+0x120/0x250 [ 50.664045][ T6144] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.664057][ T6144] ? __pfx_bit_putcs+0x10/0x10 [ 50.664071][ T6144] fbcon_putcs+0x383/0x4a0 [ 50.664085][ T6144] do_update_region+0x2e6/0x3f0 [ 50.664095][ T6144] redraw_screen+0x63f/0x760 [ 50.664108][ T6144] ? __pfx_vc_do_resize+0x10/0x10 [ 50.664120][ T6144] ? __pfx_redraw_screen+0x10/0x10 [ 50.664134][ T6144] fbcon_set_disp+0x7d4/0xe40 [ 50.664147][ T6144] set_con2fb_map+0x703/0x1060 [ 50.664162][ T6144] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 50.664177][ T6144] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 50.664196][ T6144] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.664208][ T6144] do_fb_ioctl+0x328/0x7e0 [ 50.664217][ T6144] ? __pfx_do_fb_ioctl+0x10/0x10 [ 50.664227][ T6144] ? do_vfs_ioctl+0x523/0x1a60 [ 50.664244][ T6144] ? selinux_file_ioctl+0x180/0x270 [ 50.664258][ T6144] fb_ioctl+0xe5/0x150 [ 50.664266][ T6144] ? __pfx_fb_ioctl+0x10/0x10 [ 50.664275][ T6144] __x64_sys_ioctl+0x18b/0x210 [ 50.664286][ T6144] do_syscall_64+0xcd/0x4c0 [ 50.664301][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.664312][ T6144] RIP: 0033:0x7ff00398e929 [ 50.664319][ T6144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.664328][ T6144] RSP: 002b:00007ff0017f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.664338][ T6144] RAX: ffffffffffffffda RBX: 00007ff003bb6080 RCX: 00007ff00398e929 [ 50.664344][ T6144] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 50.664351][ T6144] RBP: 00007ff003a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 50.664357][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.664363][ T6144] R13: 0000000000000000 R14: 00007ff003bb6080 R15: 00007ffc6c05d868 [ 50.664372][ T6144] [ 50.665109][ T6144] Kernel Offset: disabled VM DIAGNOSIS: 17:55:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bb115 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc90004d9f0f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000069 R14=ffffffff9b0882e0 R15=ffffffff855bb0b0 RIP=ffffffff855bb13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ff0017f66c0 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff315fb7bac CR3=00000000599c7000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff003a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff003a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff003a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff003a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff003a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff003a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff003b84488 00007ff003b84480 00007ff003b84478 00007ff003b84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0046ed100 00007ff003b84440 00007ff003b84458 00007ff003b844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff003b84498 00007ff003b84490 00007ff003b84488 00007ff003b84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81607d30 RDX=ffff88801deea440 RSI=ffffffff81607d78 RDI=ffffffff93d20080 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27a4010 R10=ffffffff93d20087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81607d79 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff316c22f98 CR3=000000003a227000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080000000000 0100080000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe386e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe386e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe386e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe386e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe386e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe386e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe386f84488 00007fe386f84480 00007fe386f84478 00007fe386f84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe387aed100 00007fe386f84440 00007fe386f80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe386f84498 00007fe386f84490 00007fe386f84488 00007fe386f84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 00000000000003c8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81607d30 RDX=ffff88802c318000 RSI=ffffffff81607d78 RDI=ffffffff93d20080 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27a4010 R10=ffffffff93d20087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81607d79 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f927d3e3440 CR3=0000000057efa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff81607d30 RDX=ffff88802bb3c880 RSI=ffffffff81607d78 RDI=ffffffff93d20080 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27a4010 R10=ffffffff93d20087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81607d79 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe387c756c0 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3f3c1e CR3=000000003a227000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8519c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8519c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8519c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8519c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8519c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8519c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8519d84488 00007f8519d84480 00007f8519d84478 00007f8519d84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f851a8ed100 00007f8519d84440 00007f8519d84458 00007f8519d844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8519d84498 00007f8519d84490 00007f8519d84488 00007f8519d84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000