last executing test programs: 3.018920335s ago: executing program 0 (id=152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e, 0x400}]}, 0x24}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) 3.017545018s ago: executing program 0 (id=154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001400)=ANY=[@ANYRESOCT]) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[], [{@seclabel}]}) (async) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x1, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xe}}}, 0x24}}, 0x800) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000040)={0xb}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0xe649d322843a6889, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x13}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1400}], 0x0, 0x0, 0x0}) 2.960212297s ago: executing program 0 (id=155): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) pipe(0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syz_usb_connect$printer(0x4, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) (async) pipe(0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) 2.779418768s ago: executing program 2 (id=159): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4b, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x345b, 0x1, 0x6, 0x19, 0x3, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x1, 0x1, 0x5, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x7, 0xfffffffc, 0x3, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0xd, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x5, 0x6cfd, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0x80000006, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x8, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0x3ff, 0x6, 0x5, 0x1, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6, 0x0, 0x3, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00'}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x154, &(0x7f0000000880)={[{0xd6, 0x4e00, "f04ac5a7b9263130e3619cc3c0d10b30166ca04d48df0ed4d5aa6617e5780709bdf6b7d6e2cbdc835d8e0ed78841e3ae68d5a4193344a6d31c259a2f9bb1694ad95124b1a400d8d1555cca5cef15e2d6ac057ebdb719acbcafbedf61db973f677e6743230854ea2dbe6dfb87ce84dbc36cb7b30069bf846c366de7b0ec9fafaf59bf1d106d579a4c19b5b7f1c0bd9269f6866d868519db1523f454f6589898d1e96854bff60393d6168711dabbefd63cac94146757568a62a367b0406e345f8645a8b306277d64de6523572a8bffbb2f297cb329c709"}, {0x71, 0x4e00, "ec4e84dfc277db4581d89b29d3b4a965c1fb64906245000903f8df1ed0312afa94d08ae7dfad111f9454d8ee9a89aa6e87ab05f26a6c8f335046857fcbe03e5794b980c11c2a820d2ab5d2fba6f9b8f033e382e3f42cc2a5491f718306d8f312270543e70601bfab8d9ac069bbb0874e14"}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x15, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xffffffff, 0x0, 0x54}, 0x9c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.45079773s ago: executing program 0 (id=160): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='/', 0x1}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x40, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@local, 0x0, 0x6c}, @in=@loopback, {0xffffffffffffffff, 0x0, 0x4d78, 0xfffffff7ffffffff, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x400, 0x0, 0x5}, {}, 0x0, 0x0, 0xa, 0x1, 0x6, 0x82}}, 0xf0}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xa8) recvmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003540)=""/126, 0x7e}, 0xe2}], 0x400000000000160, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000040)=0x1) 1.590729754s ago: executing program 0 (id=161): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup(r2) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r3, 0x46c1c000) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000340)=ANY=[], 0x1b, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x201, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000240)=[0x2], &(0x7f0000000540)=[r6, r5], &(0x7f0000000580)}) chdir(&(0x7f0000000000)='./file0\x00') lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'os2.', 'nl80211\x00'}, &(0x7f0000000180)='@*\x1e.\x00', 0x5, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)=@newnexthop={0x3c, 0x68, 0x901, 0xfffffffc, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x2, 0xd4}, {0x1, 0x2}]}]}, 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9ad}}], 0x30}}], 0x1, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050300", @ANYRES32=r11, @ANYBLOB="0500a200fd0000000800a1000000000008009f000300000008000c006400000008000d00000000000500a30001000000"], 0x4c}}, 0x0) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000000280)) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r12, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, 0x0, 0x0) 1.400914972s ago: executing program 2 (id=162): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xfffffffc) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000180)={0x1, 0x5, 0xe, 0x1, @msf={0x6, 0x3, 0x81}, 0x9}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) kexec_load(0x8000000000000001, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000000)={{0x2, @addr=0x800}, 0x8, 0x0, 0x80}) 710.11456ms ago: executing program 0 (id=180): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x7, 0xdc4, 0x6}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r1, 0x7, 0x87, "0e60dfb74387f91a7d57464a61773b7b98b0c2785c080a9bcf650eef8093af5413dc165541c294de17a39bc2af472cacb67da9d3e3f333257cd627a4c1d5f1da5def7a41a8f969a446f0fbf175556fdb990a053f36dfa5915380ec6c7978af47dfa0a0bf35e481c467b8de64174809c29b568fe50d6795dc1993b45e758e4d40e71865c5c1aba1"}, 0x8f) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 306.004605ms ago: executing program 3 (id=190): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r2, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00'}) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f2f, 0x241, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x4, 0x0, 0x2, 0x4, 0xfffb, 0x2}, 0x20) syz_genetlink_get_family_id$nfc(&(0x7f0000002c80), 0xffffffffffffffff) dup2(r0, r0) openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r2, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00'}) (async) openat$ndctl0(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000140)) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000702000000feffff7a0af0ff1800000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000009000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100f51f00000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16d875fe369258673b5df11cc2afb53611cc320000bc0b80e80eae8f5e64becef4db2ce77c55dbaca340e4a01e2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151f07bd4e97d62ecc645e143a60f1c6edc76609077909826151e2b42bf0ed0c7e8b0db51662de6d87c493db845b10e9468bda6f82881eb8c9cfa72bba6708eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf101000080496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b4207e6078625cb2717e21f8f187b1866108b6e8c71e26032176066599783568628f0309c3afa716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6d2676bef8310f7032775cfd75652f87b039d543000000000000000008ce31344b554aca78a00000000000000e63a0dba7f6b25e8d5e40a3a571a5dfde3b4dca2d38a9c0ea7b5bcd49f977c609915c7601080d10b96af1eb55922b2ad13a0eeefae505f4535cd9dc69fbab92150c7e74e5c5b051ddf6399b0d00eee5c3afee38cdc55b8d3fbbe210bdec686a23503f4a5f5734a9e204dbc327ec8f9851d273fa07369c419942509198605ff2781f4d2d4685d762d4764f7ff762e09116946137b7ab812a2d408b57206093eea233054c6aa08bffc8a076d476bc28fc21d521b778de9e583b596d7102d0a7bea32f51aba25da0f72b895ec90882f56730236b30e656a1ab2fcb80df49afa05d8c9d5bdc3c1feed5c593a5d8482"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f2f, 0x241, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x4, 0x0, 0x2, 0x4, 0xfffb, 0x2}, 0x20) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000002c80), 0xffffffffffffffff) (async) dup2(r0, r0) (async) 305.761422ms ago: executing program 3 (id=191): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x2c, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}]}, 0x2c}}, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0xb, @sliced={0x2, [0x3ff, 0x3, 0x70, 0x707, 0x6, 0x0, 0x5ec, 0x10, 0x0, 0x4, 0x2, 0x3, 0x1, 0x81, 0xb12, 0x5, 0x0, 0x9, 0x7, 0x8, 0x7, 0x0, 0x2, 0x6, 0x9, 0x8, 0x1ff, 0x5, 0xff86, 0x7, 0x8, 0x1, 0x1, 0xfffe, 0xb, 0xd, 0xff, 0x0, 0xfff, 0xf, 0x5, 0x2, 0x0, 0x9, 0x9, 0x5, 0x3, 0x6], 0x86}}) 240.598186ms ago: executing program 3 (id=192): r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6, 0x0, 0x7, 0x400, 0x7, "590f5ffb9190b5b83acd6f1654fedfcccf9580", 0x640, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x5, 0x8080000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 240.298998ms ago: executing program 2 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x12c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0xfa) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000200), 0x0}, 0x20) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x31424752, 0x2, 0x81, 0x6, 0x5, 0xf9a, 0x0, 0x8}}) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) epoll_pwait(r1, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000180)={[0x4]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="d4af4274bea4", @ANYRESHEX=r3, @ANYBLOB="0300702ca70000", @ANYRESHEX=r4, @ANYBLOB="8ed94c67fa70ec2a6c0bd31f1e803966ba0e38ffb2e45ed40438a255e84e446dcb9ad53729bef9d46cac"]) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file0', [{0x20, '%*'}, {0x20, '9p\x00'}, {0x20, '\xcf\'-}'}, {0x20, '/selinux/status\x00'}, {0x20, '/dev/video#\x00'}, {0x20, '/selinux/status\x00'}, {0x20, '+'}, {0x20, '9p\x00'}], 0xa, "e2bfc7c4addc75701c49878a13640e3e9a3c1c051335e1970f999969d94e2555d38307f5b10cf40a345f190a8f25a27f1b37617c5bb4cb175c403d4258b05db4b0f2b3e04ae235c5a90bbc5df35659a69342023b6a209dc01800229eb8120f5e8b6414277b2199e64d5a331030039a5e017aa934fe567766ae95f7d7be5fa29a2c96063465ef69bf662caae4930d46adf9bd7cda89bf778070621be27394f54d2f473f82dd9a8df30a229f4d672086577f828468f9184201b23d944bb7663ed30c6ad2b5d98e38c8309f576615c44c55ee975bfe6a32"}, 0x122) 178.098577ms ago: executing program 3 (id=194): ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="40090000000000001c0012800b00010062726964676500000c00028005002a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f0000000200)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, 0x0, &(0x7f0000000b00)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x200, 0xff, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000240)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r8}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private0, @in=@empty, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x6}, 0xffffffff, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x6c}, 0x2, @in=@empty, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, 0xe4) sendmmsg$inet6(r9, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 177.858609ms ago: executing program 2 (id=195): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) (async) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000040)) (async) 177.627629ms ago: executing program 2 (id=196): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ff00000000020a00a908"], 0x24}}, 0x0) r2 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = socket(0x5, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_ECN={0x8}, @TCA_PIE_ALPHA={0x8, 0x4, 0x12}, @TCA_PIE_LIMIT={0x8, 0x2, 0x4}]}}]}, 0x50}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x8000, 0x400, 0x4, 0x1430, r2, 0x978, '\x00', r4, r6, 0x1, 0x2, 0x4, 0x1, @void, @value, @void, @value}, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 177.434711ms ago: executing program 1 (id=197): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x1, 0x4, 0x0, 0x3, 0x0, 0x0, [{0xb, 0x1, 0x4}, {0xc, 0x3, 0x87c}, {0xf, 0x3, 0x4e2}, {0xc, 0x3}]}]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000001b40)) 130.475694ms ago: executing program 3 (id=198): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)=""/59, 0x3b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/33, 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/155, 0x9b}], 0x2}}], 0x4, 0x400122a0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 130.334155ms ago: executing program 1 (id=199): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x1405, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x2, 0x0, 0x4000}, 0x0) 70.205448ms ago: executing program 1 (id=200): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f00000000c0)=""/203, &(0x7f00000001c0)=0xcb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x2e24, @empty}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f00000000c0)=""/203, &(0x7f00000001c0)=0xcb) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet(0x2, 0x2, 0x1) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async) bind$inet(r4, &(0x7f0000000000)={0x2, 0x2e24, @empty}, 0x10) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) (async) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) (async) 68.300856ms ago: executing program 2 (id=201): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000011c0)="11", 0x1}, {&(0x7f0000001240)="b3", 0x1}], 0x2}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x12, r4}, 0x10) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x180000000) r5 = socket(0x10, 0x803, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=@newtaction={0x64, 0x30, 0x1, 0x3, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x9, 0x10000000, 0x3, 0x20}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x20, 0x11, 0x5, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x24000}}, 0x20}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) 67.334955ms ago: executing program 1 (id=202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$caif_stream(0x25, 0x1, 0x3) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b7030000000000008500000006000000870000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0xd2, &(0x7f0000000140)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0x200000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r1, 0x3, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc9, 0xc9, 0x6, [@ptr={0x6, 0x0, 0x0, 0x2, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x2, 0x3}, @datasec={0xa, 0x9, 0x0, 0xf, 0x3, [{0x1, 0xa, 0x2}, {0x5, 0xbe4c, 0xffffff01}, {0x3, 0xd, 0x9}, {0x2, 0x56c, 0x4}, {0x5, 0x2, 0xffffffff}, {0x3, 0x823, 0x2}, {0x1, 0x8, 0x417d}, {0x3, 0x5, 0xc8280000}, {0x1, 0x0, 0x81}], "8bf0e6"}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @datasec={0x10, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x5, 0x3}], "f44a"}, @ptr={0xc, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x30, 0x0, 0x61, 0x5f]}}, &(0x7f0000000600)=""/157, 0xea, 0x9d, 0x0, 0x7fffffff, 0x10000, @value}, 0x28) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x3, 0x9, 0x1, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x6, @void, @value, @void, @value}, 0x50) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) ftruncate(r8, 0xc17a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0x1f, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000ff7f00000000000009c5dc061811eb5297193042c5b2038e5887180000c67541616f4d9b9610b7ab4332af2ba4a3e28c344926a0cb0a3408399cf1f5d9796ea24a915f78affc47488337c4202e3c3137a458874731af070526e20c9424f474809478842c4ab982c01da7ecb4659144cb8de5114238f40963845dbf17c0fd7d78aa2b38bbfd8ad862", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018420000fbffffff0000000000000000184900000300000000000000000000000c30090003000000180000000600000000000000080000001838000004000000000000000000000018280000", @ANYRES32=0x1, @ANYBLOB="00000000040000005e5808001000000018150000", @ANYRES32=r5, @ANYBLOB="000000000000000018620000090000000000000011040000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x1000, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x40, '\x00', 0x0, @fallback=0x13, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0x9, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r2, 0x5, &(0x7f0000000740)=[r7, r8], &(0x7f0000000780)=[{0x3, 0x1, 0xf, 0x8}, {0x5, 0x4, 0x4, 0x2}, {0x5, 0x5, 0x6, 0xb}, {0x4, 0x3, 0x10, 0x1}, {0x4, 0x4}], 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 66.800578ms ago: executing program 3 (id=203): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='gre0\x00', 0x10) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x29}, 0x5a) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mq_open(&(0x7f0000000100)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7-\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00AWK\n\x8b!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3g:', 0x41, 0x80, 0x0) (async) r3 = mq_open(&(0x7f0000000100)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7-\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00AWK\n\x8b!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3g:', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r3, 0x15b77000) (async) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r3, 0x15b77000) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbcaaaaaaaabb080045000024000400000073907800000000e00000014e200000040000000000000000000000541709ed91f6c8def7fc1341be80cf0f6aaa14340200dc5d6e3a09ce04d1f95fb892f0910eaea17bbdd4dcaa3d67241423293880235aa5ed7bdc2352022c72f54268"], 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x20) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) (async) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) (async) listen(r4, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000006c0)="3f0bb2a028ed8cdfc7c4e21eec764aa2816447955780f6763e03a8a90c5955482eddda23c14946dbcbd26a76ae3ef1b2ee3f11e69e000bd3f7378bfff6126fc55df0f3e48c8548d321c4e80ee3210c2cc44f2f5eac819139d0b155bbcbfa907bdb8cce8066da7a601c9456332d511cfffb64d9598939f28204a127b07d0073c45c7a8bbe17fa836e7bd654b83918b79765cd1e834f07344ad8d87abf24374674224b8b5475586e5d10dcb7b0", 0xac}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}, {&(0x7f00000004c0)=""/126}], 0x3}}], 0x40002b2, 0x2, 0x0) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000780)=""/198, 0xc6}], 0x1}, 0x4c210382) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b80000001900080000000000fddbdf25e00000020000000000010001006dcc20a3ac7afc1b000000000000ac1414270000000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000b000000000400000000000000000000020000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000200000000000000000000000000000005000000000000000000010300000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0xc804) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b80000001900080000000000fddbdf25e00000020000000000010001006dcc20a3ac7afc1b000000000000ac1414270000000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000b000000000400000000000000000000020000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000200000000000000000000000000000005000000000000000000010300000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0xc804) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0x2000}], 0x2) r8 = socket(0x28, 0x5, 0x0) ppoll(&(0x7f0000000280)=[{r8, 0x80}], 0x1, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet6(0xa, 0x80001, 0x7) timer_create(0x0, 0x0, &(0x7f0000000100)) (async) timer_create(0x0, 0x0, &(0x7f0000000100)) 452.612µs ago: executing program 1 (id=204): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r3 = dup(r2) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f0000000140)={0x36, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = dup2(r0, r0) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) read(r4, &(0x7f0000003180)=""/4096, 0x1000) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) dup(r2) (async) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f0000000140)={0x36, 0x1}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) dup2(r0, r0) (async) socket$inet(0x2, 0x3, 0x8) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) (async) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) read(r4, &(0x7f0000003180)=""/4096, 0x1000) (async) 0s ago: executing program 1 (id=205): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1, 0x0, 0x2, 0x2}}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r3 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="01ef817dd0e905e2a03c10c190d185976f9ca40b1ecd052e77e5d8121e34b7fa2d2cadcd68935c4089e98795754cfb3da5ed80afad192977218d7b060171fa8ac3522e85c93adfd2cb6d742cffa7a9e9078c7faa01828e0b557dc9688027ddf09fb7e2de2c77dd0f9780cec214d6901d50853f7025b040d2f3949a995edaeb74e4e12476860c7a00", 0x88}, {&(0x7f0000000580)="ac3245f7efe7fadd8c6e558fdbec2421bf1a9cf0047723670a755296b8fc26eef6363f8ac906ab73ae3b768d889773c9488c631763f04f7bcb1e41a6c7f2c194fa30a881f019b3e689901a312e08a83087d37ceedc744fa262c2fed8f069e9654a54cbd6a860851d2cdef66c6cff1dde6c40347cad4bc0d79d2eac6931c9d6c2e1e6ecd3555d9224c6b5a338192c5d926bc04ff99378782913174c2a5d882895f283878f2f7e612465a46f407d0b0ff65006e24534e4b6021c6a10d054a04bec0f54a6f88e2c9ed927a6a55f99a95820", 0xd0}, {&(0x7f0000000240)="922cedcf3687e8dcf698279640a6041616b3da9c776dc40c857e57a7fa40b0d1a2fbf914c4da45677e18abf450ed673eb473299a8211e51b72b1f6fbd417af5f25137fe8b99f0b2fe3f93834666b69b27d1c2dcc", 0x54}], 0x3, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='vlan0\x00', 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) kernel console output (not intermixed with test programs): [ 38.148079][ T39] audit: type=1400 audit(1737808807.299:80): avc: denied { write } for pid=5916 comm="sh" path="pipe:[1811]" dev="pipefs" ino=1811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.156274][ T39] audit: type=1400 audit(1737808807.299:81): avc: denied { rlimitinh } for pid=5916 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.163907][ T39] audit: type=1400 audit(1737808807.299:82): avc: denied { siginh } for pid=5916 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.878241][ T39] audit: type=1400 audit(1737808808.029:83): avc: denied { read } for pid=5336 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.884793][ T39] audit: type=1400 audit(1737808808.039:84): avc: denied { append } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.891778][ T39] audit: type=1400 audit(1737808808.039:85): avc: denied { open } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.898579][ T39] audit: type=1400 audit(1737808808.039:86): avc: denied { getattr } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:28910' (ED25519) to the list of known hosts. [ 39.523718][ T39] audit: type=1400 audit(1737808808.679:87): avc: denied { name_bind } for pid=5924 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.088295][ T5926] cgroup: Unknown subsys name 'net' [ 41.274619][ T5926] cgroup: Unknown subsys name 'cpuset' [ 41.277993][ T5926] cgroup: Unknown subsys name 'rlimit' [ 41.484332][ T5931] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.048213][ T5926] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.566004][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 43.566014][ T39] audit: type=1400 audit(1737808812.719:105): avc: denied { execmem } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.710716][ T39] audit: type=1400 audit(1737808812.869:106): avc: denied { create } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.717281][ T39] audit: type=1400 audit(1737808812.869:107): avc: denied { read write } for pid=5937 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.724423][ T39] audit: type=1400 audit(1737808812.869:108): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.731570][ T39] audit: type=1400 audit(1737808812.869:109): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="socket:[6847]" dev="sockfs" ino=6847 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.739246][ T39] audit: type=1400 audit(1737808812.869:110): avc: denied { ioctl } for pid=5938 comm="syz-executor" path="socket:[1867]" dev="sockfs" ino=1867 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.743156][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.749572][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 43.752142][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.754027][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.755211][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 43.756887][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.759104][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 43.761032][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.763430][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.765655][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.768299][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.770700][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.770717][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.771251][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.771825][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.772268][ T5949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 43.772425][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.773427][ T5294] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 43.775218][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 43.776413][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 43.776655][ T5947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 43.776761][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 43.777310][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 43.779891][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.783931][ T39] audit: type=1400 audit(1737808812.939:111): avc: denied { read } for pid=5937 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.810932][ T39] audit: type=1400 audit(1737808812.939:112): avc: denied { open } for pid=5937 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.817845][ T39] audit: type=1400 audit(1737808812.939:113): avc: denied { mounton } for pid=5937 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 43.903357][ T39] audit: type=1400 audit(1737808813.059:114): avc: denied { module_request } for pid=5940 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 43.922222][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 43.954832][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 43.994676][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 44.038576][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.042375][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.045306][ T5940] bridge_slave_0: entered allmulticast mode [ 44.048133][ T5940] bridge_slave_0: entered promiscuous mode [ 44.051847][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.054062][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.056172][ T5940] bridge_slave_1: entered allmulticast mode [ 44.058364][ T5940] bridge_slave_1: entered promiscuous mode [ 44.080986][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.083754][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.086490][ T5939] bridge_slave_0: entered allmulticast mode [ 44.089527][ T5939] bridge_slave_0: entered promiscuous mode [ 44.113807][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.116778][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.119559][ T5939] bridge_slave_1: entered allmulticast mode [ 44.122696][ T5939] bridge_slave_1: entered promiscuous mode [ 44.151269][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.167292][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 44.173970][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.177652][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.190120][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.192480][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.194880][ T5937] bridge_slave_0: entered allmulticast mode [ 44.197160][ T5937] bridge_slave_0: entered promiscuous mode [ 44.215570][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.228554][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.230818][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.232932][ T5937] bridge_slave_1: entered allmulticast mode [ 44.235095][ T5937] bridge_slave_1: entered promiscuous mode [ 44.238499][ T5940] team0: Port device team_slave_0 added [ 44.241457][ T5940] team0: Port device team_slave_1 added [ 44.262419][ T5939] team0: Port device team_slave_0 added [ 44.298830][ T5939] team0: Port device team_slave_1 added [ 44.303064][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.322695][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.324880][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.327031][ T5938] bridge_slave_0: entered allmulticast mode [ 44.329239][ T5938] bridge_slave_0: entered promiscuous mode [ 44.340646][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.344361][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.346713][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.355494][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.359388][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.361758][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.363859][ T5938] bridge_slave_1: entered allmulticast mode [ 44.366105][ T5938] bridge_slave_1: entered promiscuous mode [ 44.393917][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.396057][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.403783][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.416954][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.419071][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.427855][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.441550][ T5937] team0: Port device team_slave_0 added [ 44.444792][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.447935][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.450000][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.457694][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.464894][ T5937] team0: Port device team_slave_1 added [ 44.467508][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.514150][ T5940] hsr_slave_0: entered promiscuous mode [ 44.516229][ T5940] hsr_slave_1: entered promiscuous mode [ 44.546515][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.549546][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.560867][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.567304][ T5938] team0: Port device team_slave_0 added [ 44.570313][ T5938] team0: Port device team_slave_1 added [ 44.573865][ T5939] hsr_slave_0: entered promiscuous mode [ 44.576696][ T5939] hsr_slave_1: entered promiscuous mode [ 44.579290][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.582043][ T5939] Cannot create hsr debugfs directory [ 44.584758][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.587044][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.597017][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.629741][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.632072][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.640100][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.644149][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.646348][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.654524][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.738820][ T5937] hsr_slave_0: entered promiscuous mode [ 44.741458][ T5937] hsr_slave_1: entered promiscuous mode [ 44.743398][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.745650][ T5937] Cannot create hsr debugfs directory [ 44.751414][ T5938] hsr_slave_0: entered promiscuous mode [ 44.754321][ T5938] hsr_slave_1: entered promiscuous mode [ 44.757102][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.761907][ T5938] Cannot create hsr debugfs directory [ 44.934550][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.939430][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.943320][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.950818][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.994766][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.999228][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.012754][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.017881][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.046293][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.057398][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.066251][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.074709][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.096063][ T5938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.100972][ T5938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.106434][ T5938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.109911][ T5938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.122819][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.142853][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.149491][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.151890][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.158995][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.161294][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.167686][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.186876][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.199563][ T5940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.202866][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.211090][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.213237][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.216922][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.219103][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.241924][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.254985][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.259158][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.274805][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.277146][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.281144][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.283268][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.291964][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.299961][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.302178][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.309374][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.311628][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.327386][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.341664][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.369247][ T5940] veth0_vlan: entered promiscuous mode [ 45.375965][ T5940] veth1_vlan: entered promiscuous mode [ 45.390689][ T5939] veth0_vlan: entered promiscuous mode [ 45.398381][ T5939] veth1_vlan: entered promiscuous mode [ 45.403830][ T5940] veth0_macvtap: entered promiscuous mode [ 45.412669][ T5940] veth1_macvtap: entered promiscuous mode [ 45.417379][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.425772][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.434522][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.439737][ T5940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.443552][ T5940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.446223][ T5940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.448882][ T5940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.454790][ T5939] veth0_macvtap: entered promiscuous mode [ 45.463789][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.469454][ T5939] veth1_macvtap: entered promiscuous mode [ 45.494648][ T5937] veth0_vlan: entered promiscuous mode [ 45.515413][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.518641][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.522889][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.528572][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.532065][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.535814][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.539522][ T5937] veth1_vlan: entered promiscuous mode [ 45.544414][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.546883][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.555923][ T5939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.559336][ T5939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.563339][ T5939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.566701][ T5939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.578198][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.581200][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.581614][ T5938] veth0_vlan: entered promiscuous mode [ 45.599062][ T5938] veth1_vlan: entered promiscuous mode [ 45.607103][ T5937] veth0_macvtap: entered promiscuous mode [ 45.615017][ T5937] veth1_macvtap: entered promiscuous mode [ 45.623795][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.628227][ T5938] veth0_macvtap: entered promiscuous mode [ 45.635685][ T5938] veth1_macvtap: entered promiscuous mode [ 45.641954][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.646175][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.649801][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.655073][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.659676][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.663880][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.666298][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.674248][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.677411][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.681074][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.684164][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.687091][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.690411][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.694831][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.699769][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.703444][ T5999] bridge_slave_1: left allmulticast mode [ 45.705257][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.708498][ T5999] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 45.711805][ T5999] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 45.723628][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.726112][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.729526][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.732854][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.735743][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.738878][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.743017][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.746205][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.751015][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.754806][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.758708][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.762579][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.765701][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.769336][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.775170][ T5938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.778048][ T5938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.780906][ T5938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.783515][ T5938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.797534][ T5937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.800192][ T5937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.803409][ T5937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.806396][ T5937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.831063][ T68] Bluetooth: hci3: command tx timeout [ 45.840586][ T68] Bluetooth: hci2: command tx timeout [ 45.840659][ T5946] Bluetooth: hci1: command tx timeout [ 45.840679][ T5948] Bluetooth: hci0: command tx timeout [ 45.877771][ T6009] syz.0.1: attempt to access beyond end of device [ 45.877771][ T6009] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 45.878926][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.884553][ T6009] EXT4-fs (nbd0): unable to read superblock [ 45.892241][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.896474][ T6008] syz.0.1: attempt to access beyond end of device [ 45.896474][ T6008] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 45.901087][ T6008] EXT4-fs (nbd0): unable to read superblock [ 45.909573][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.922160][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.934174][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.938668][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.957012][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.959418][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.963247][ T6015] team0: Device ipvlan2 failed to register rx_handler [ 46.021924][ T6024] mmap: syz.2.11 (6024) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.094140][ T6036] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.098784][ T6022] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 46.286776][ T6067] program syz.2.21 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.289601][ T6067] ata1.00: invalid transfer count 0 [ 46.291106][ T6065] sctp: failed to load transform for md5: -2 [ 46.375742][ T6078] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23'. [ 46.510373][ T5980] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 46.670618][ T5980] usb 5-1: Using ep0 maxpacket: 8 [ 46.685792][ T5980] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 46.689063][ T5980] usb 5-1: config 179 has no interface number 0 [ 46.692678][ T5980] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 46.706557][ T5980] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 46.709983][ T5980] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 46.728998][ T5980] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 46.733512][ T5980] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 46.737048][ T6107] netlink: 'syz.1.26': attribute type 4 has an invalid length. [ 46.738172][ T5980] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 46.738193][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.743271][ T6063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 46.898743][ T6113] syzkaller0: entered promiscuous mode [ 46.900784][ T6113] syzkaller0: entered allmulticast mode [ 46.943378][ T6115] 9pnet_virtio: no channels available for device syz [ 46.986032][ T5980] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input5 [ 47.174792][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 47.177298][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 47.180727][ T5980] usb 5-1: USB disconnect, device number 2 [ 47.183909][ T5980] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 47.430350][ T5978] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 47.603314][ T5978] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 47.607501][ T5978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.614479][ T5978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.618192][ T5978] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 47.626349][ T5978] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 47.629992][ T5978] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 47.633313][ T5978] usb 8-1: Manufacturer: syz [ 47.638788][ T5978] usb 8-1: config 0 descriptor?? [ 47.725038][ T6130] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.33'. [ 47.728570][ T6130] openvswitch: netlink: Flow actions attr not present in new flow. [ 47.741088][ T6130] process 'syz.0.33' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 47.910579][ T5946] Bluetooth: hci1: command tx timeout [ 47.920670][ T5946] Bluetooth: hci3: command tx timeout [ 47.920763][ T68] Bluetooth: hci2: command tx timeout [ 47.998262][ T6142] (syz.2.38,6142,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 48.003250][ T6142] (syz.2.38,6142,3):ocfs2_fill_super:1178 ERROR: status = -22 [ 48.051126][ T6144] netlink: 'syz.2.39': attribute type 11 has an invalid length. [ 48.052709][ T5978] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 48.056793][ T5978] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 48.079586][ T5978] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 48.084184][ T6144] warning: `syz.2.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 48.181893][ T6157] openvswitch: netlink: Key type 5892 is out of range max 32 [ 48.213034][ T6161] netlink: 'syz.0.42': attribute type 13 has an invalid length. [ 48.219075][ T6161] gretap0: refused to change device tx_queue_len [ 48.221631][ T6161] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 48.233709][ T6155] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 48.238625][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.44'. [ 48.364775][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 48.371913][ T6177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.46'. [ 48.374770][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 48.412137][ T6182] netlink: 'syz.0.47': attribute type 2 has an invalid length. [ 48.414481][ T6182] netlink: 'syz.0.47': attribute type 11 has an invalid length. [ 48.416898][ T6182] netlink: 132 bytes leftover after parsing attributes in process `syz.0.47'. [ 48.572379][ T39] kauditd_printk_skb: 156 callbacks suppressed [ 48.572394][ T39] audit: type=1400 audit(1737808817.729:271): avc: denied { bind } for pid=6193 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.575122][ T6194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.50'. [ 48.582080][ T39] audit: type=1400 audit(1737808817.729:272): avc: denied { setopt } for pid=6193 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.586558][ T6194] tipc: Started in network mode [ 48.594457][ T6194] tipc: Node identity 7, cluster identity 5 [ 48.598186][ T6194] tipc: Node number set to 7 [ 48.708622][ T39] audit: type=1400 audit(1737808817.859:273): avc: denied { connect } for pid=6203 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.715473][ T39] audit: type=1400 audit(1737808817.859:274): avc: denied { getopt } for pid=6203 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.758231][ T39] audit: type=1400 audit(1737808817.909:275): avc: denied { create } for pid=6208 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.763893][ T39] audit: type=1400 audit(1737808817.909:276): avc: denied { setopt } for pid=6208 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.769525][ T39] audit: type=1400 audit(1737808817.909:277): avc: denied { connect } for pid=6208 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.793343][ T39] audit: type=1400 audit(1737808817.949:278): avc: denied { mount } for pid=6212 comm="syz.1.56" name="/" dev="configfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 48.800024][ T39] audit: type=1400 audit(1737808817.949:279): avc: denied { read } for pid=6212 comm="syz.1.56" name="/" dev="configfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.804502][ T6213] syz.1.56 uses obsolete (PF_INET,SOCK_PACKET) [ 48.806636][ T39] audit: type=1400 audit(1737808817.949:280): avc: denied { open } for pid=6212 comm="syz.1.56" path="/7/file0" dev="configfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.888083][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.58'. [ 48.891828][ T6218] netlink: 100 bytes leftover after parsing attributes in process `syz.2.58'. [ 48.927898][ T6223] syzkaller1: entered promiscuous mode [ 48.929603][ T6223] syzkaller1: entered allmulticast mode [ 48.951063][ T5978] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 49.130553][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 49.133960][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 49.137034][ T5978] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 49.139732][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.145223][ T5978] usb 5-1: config 0 descriptor?? [ 49.148279][ T5978] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 49.643659][ T6242] binder: 6241:6242 ioctl c018620c 20000080 returned -1 [ 49.729504][ T6249] program syz.2.66 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.991543][ T68] Bluetooth: hci2: command tx timeout [ 49.992118][ T5946] Bluetooth: hci3: command tx timeout [ 49.992137][ T5948] Bluetooth: hci1: command tx timeout [ 50.043710][ T6263] overlayfs: conflicting lowerdir path [ 50.241747][ T6273] IPv6: NLM_F_CREATE should be specified when creating new route [ 50.245206][ T6273] IPv6: Can't replace route, no match found [ 50.483048][ T64] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 50.486479][ T64] usb 8-1: device reset changed ep0 maxpacket size! [ 50.489988][ T4902] usb 8-1: USB disconnect, device number 2 [ 50.632340][ T4902] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 50.800572][ T4902] usb 8-1: Using ep0 maxpacket: 32 [ 50.803892][ T4902] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 50.806360][ T4902] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 50.808937][ T4902] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 50.811849][ T4902] usb 8-1: config 1 has no interface number 0 [ 50.813894][ T4902] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 50.817159][ T4902] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 50.821203][ T4902] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 50.824160][ T4902] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.832186][ T4902] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 50.914076][ T6296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.039113][ T4902] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 51.085480][ T64] usb 8-1: USB disconnect, device number 3 [ 51.088309][ T64] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 51.135624][ T6318] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 51.360894][ T6332] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.473265][ T5946] Bluetooth: min 0 < 6 [ 51.508593][ T6341] __nla_validate_parse: 2 callbacks suppressed [ 51.508603][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 51.513413][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 51.516057][ T6341] netlink: 'syz.3.91': attribute type 6 has an invalid length. [ 51.556527][ T6304] Set syz1 is full, maxelem 65536 reached [ 51.677716][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 51.684048][ T6366] tls_set_device_offload: netdev not found [ 51.702167][ T64] usb 5-1: USB disconnect, device number 3 [ 51.716855][ T6370] dlm: non-version read from control device 8224 [ 51.719117][ T6370] dlm: no local IP address has been set [ 51.722112][ T6370] dlm: cannot start dlm midcomms -107 [ 51.733072][ T6372] binder_alloc: binder_alloc_mmap_handler: 6371 20ffd000-21000000 already mapped failed -16 [ 51.733625][ T6374] binder_alloc: 6371: binder_alloc_buf, no vma [ 51.797695][ T6383] trusted_key: syz.2.102 sent an empty control message without MSG_MORE. [ 51.855043][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 51.922043][ T6393] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 51.925201][ T6391] Zero length message leads to an empty skb [ 52.020425][ T5978] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 52.070346][ T5946] Bluetooth: hci2: command tx timeout [ 52.070626][ T5948] Bluetooth: hci3: command tx timeout [ 52.073719][ T68] Bluetooth: hci1: command tx timeout [ 52.120452][ T4902] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.171424][ T5978] usb 8-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 52.174431][ T5978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.178433][ T5978] usb 8-1: config 0 descriptor?? [ 52.184071][ T5978] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7 [ 52.284694][ T6428] capability: warning: `syz.1.116' uses 32-bit capabilities (legacy support in use) [ 52.292240][ T6428] input: syz0 as /devices/virtual/input/input8 [ 52.294482][ T6428] input: failed to attach handler leds to device input8, error: -6 [ 52.301559][ T4902] usb 7-1: Using ep0 maxpacket: 8 [ 52.315167][ T4902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 52.320271][ T4902] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 52.323007][ T4902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.326206][ T4902] usb 7-1: config 0 descriptor?? [ 52.332141][ T4902] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 52.417043][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.465230][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.101'. [ 52.465883][ T6442] netlink: 'syz.0.120': attribute type 2 has an invalid length. [ 52.471169][ T6442] netlink: 132 bytes leftover after parsing attributes in process `syz.0.120'. [ 52.519168][ T6446] xt_hashlimit: invalid interval [ 52.531846][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 52.534613][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 52.537648][ T6449] netlink: 'syz.1.122': attribute type 12 has an invalid length. [ 52.551761][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 52.587427][ T6451] veth1_to_batadv: entered promiscuous mode [ 52.589434][ T6451] macsec0: entered promiscuous mode [ 52.639503][ T6456] Bluetooth: MGMT ver 1.23 [ 52.644987][ T6453] capability: warning: `syz.1.124' uses deprecated v2 capabilities in a way that may be insecure [ 52.654318][ T2220] usb 8-1: USB disconnect, device number 4 [ 52.693781][ T6458] netlink: 72 bytes leftover after parsing attributes in process `syz.1.126'. [ 52.787737][ T6463] netlink: 'syz.1.126': attribute type 3 has an invalid length. [ 53.285482][ T6473] openvswitch: netlink: IP tunnel dst address not specified [ 53.499943][ T6477] syz.0.129: attempt to access beyond end of device [ 53.499943][ T6477] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 53.503923][ T6477] (syz.0.129,6477,3):ocfs2_get_sector:1769 ERROR: status = -5 [ 53.506326][ T6477] (syz.0.129,6477,3):ocfs2_sb_probe:749 ERROR: status = -5 [ 53.508477][ T6477] (syz.0.129,6477,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 53.511444][ T6477] (syz.0.129,6477,3):ocfs2_fill_super:1178 ERROR: status = -5 [ 53.573545][ T6481] fuse: Invalid rootmode [ 53.581132][ T39] kauditd_printk_skb: 111 callbacks suppressed [ 53.581145][ T39] audit: type=1400 audit(1737808822.739:392): avc: denied { create } for pid=6479 comm="syz.0.130" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.598941][ T39] audit: type=1400 audit(1737808822.739:393): avc: denied { map } for pid=6479 comm="syz.0.130" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.607304][ T6487] program syz.3.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.607323][ T39] audit: type=1400 audit(1737808822.739:394): avc: denied { read write } for pid=6479 comm="syz.0.130" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.617979][ T39] audit: type=1400 audit(1737808822.749:395): avc: denied { create } for pid=6485 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.623970][ T39] audit: type=1400 audit(1737808822.749:396): avc: denied { read } for pid=6485 comm="syz.1.133" dev="nsfs" ino=4026532887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.630184][ T39] audit: type=1400 audit(1737808822.749:397): avc: denied { open } for pid=6485 comm="syz.1.133" path="net:[4026532887]" dev="nsfs" ino=4026532887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.637787][ T39] audit: type=1400 audit(1737808822.749:398): avc: denied { create } for pid=6484 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.644428][ T39] audit: type=1400 audit(1737808822.759:399): avc: denied { write } for pid=6484 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.650434][ T39] audit: type=1400 audit(1737808822.759:400): avc: denied { nlmsg_write } for pid=6484 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.656437][ T39] audit: type=1400 audit(1737808822.759:401): avc: denied { bind } for pid=6484 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.726022][ T6502] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 54.150399][ T68] Bluetooth: hci3: command tx timeout [ 54.160300][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.300282][ T8] usb 6-1: device descriptor read/64, error -71 [ 54.550365][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 54.680602][ T8] usb 6-1: device descriptor read/64, error -71 [ 54.791860][ T8] usb usb6-port1: attempt power cycle [ 54.795622][ T6539] netlink: 'syz.0.149': attribute type 3 has an invalid length. [ 54.894078][ T2220] usb 7-1: USB disconnect, device number 2 [ 55.019440][ T6550] binder: 6549:6550 unknown command 1768304430 [ 55.021536][ T6550] binder: 6549:6550 ioctl c0306201 20000080 returned -22 [ 55.140330][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 55.171574][ T8] usb 6-1: device descriptor read/8, error -71 [ 55.420281][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 55.440823][ T8] usb 6-1: device descriptor read/8, error -71 [ 55.500291][ T834] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.550465][ T8] usb usb6-port1: unable to enumerate USB device [ 55.670336][ T834] usb 7-1: Using ep0 maxpacket: 8 [ 55.673865][ T834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 55.677145][ T834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 55.680028][ T834] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 55.683569][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.687485][ T834] usb 7-1: config 0 descriptor?? [ 55.745030][ T6577] ipvlan2: entered promiscuous mode [ 55.895285][ T834] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 56.093672][ T6571] iowarrior 7-1:0.0: Error -90 while submitting URB [ 56.097837][ T834] usb 7-1: USB disconnect, device number 3 [ 56.790961][ T68] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 56.790970][ T5946] Bluetooth: hci4: command 0xfc11 tx timeout [ 56.870557][ T2220] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 56.898349][ T6588] tipc: Started in network mode [ 56.899964][ T6588] tipc: Node identity 1, cluster identity 4711 [ 56.902182][ T6588] tipc: Node number set to 1 [ 56.939055][ T6591] vlan2: entered promiscuous mode [ 56.941016][ T6591] vlan2: entered allmulticast mode [ 56.942538][ T6591] hsr_slave_1: entered allmulticast mode [ 56.949428][ T6591] __nla_validate_parse: 6 callbacks suppressed [ 56.949437][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 57.000938][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 57.014860][ T6591] hsr_slave_1 (unregistering): left allmulticast mode [ 57.027351][ T6591] hsr_slave_1 (unregistering): left promiscuous mode [ 57.034627][ T6606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.169'. [ 57.035087][ T2220] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 57.042307][ T2220] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.044793][ T2220] usb 7-1: Product: syz [ 57.046096][ T2220] usb 7-1: Manufacturer: syz [ 57.047566][ T2220] usb 7-1: SerialNumber: syz [ 57.050435][ T2220] usb 7-1: config 0 descriptor?? [ 57.065488][ T6608] 9pnet_virtio: no channels available for device syz [ 57.092804][ T6610] netlink: 'syz.1.171': attribute type 1 has an invalid length. [ 57.119072][ T6612] ======================================================= [ 57.119072][ T6612] WARNING: The mand mount option has been deprecated and [ 57.119072][ T6612] and is ignored by this kernel. Remove the mand [ 57.119072][ T6612] option from the mount to silence this warning. [ 57.119072][ T6612] ======================================================= [ 57.132351][ T6612] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 57.136596][ T6612] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 57.141843][ T6612] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 57.178799][ T6620] /dev/sg0: Can't lookup blockdev [ 57.215318][ T6624] netlink: 'syz.3.176': attribute type 21 has an invalid length. [ 57.218268][ T6624] netlink: 128 bytes leftover after parsing attributes in process `syz.3.176'. [ 57.221557][ T6624] netlink: 'syz.3.176': attribute type 5 has an invalid length. [ 57.223954][ T6624] netlink: 'syz.3.176': attribute type 6 has an invalid length. [ 57.226342][ T6624] netlink: 3 bytes leftover after parsing attributes in process `syz.3.176'. [ 57.230520][ T6624] netlink: 'syz.3.176': attribute type 21 has an invalid length. [ 57.232957][ T6624] netlink: 128 bytes leftover after parsing attributes in process `syz.3.176'. [ 57.235721][ T6624] netlink: 'syz.3.176': attribute type 5 has an invalid length. [ 57.238101][ T6624] netlink: 'syz.3.176': attribute type 6 has an invalid length. [ 57.241127][ T6624] netlink: 3 bytes leftover after parsing attributes in process `syz.3.176'. [ 57.262212][ T6583] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6583 comm=syz.2.162 [ 57.268112][ T834] usb 7-1: USB disconnect, device number 4 [ 57.275291][ T6629] ip6t_srh: unknown srh invflags 7863 [ 57.281833][ T6631] 9pnet_virtio: no channels available for device syz [ 57.346302][ T6639] veth1_to_batadv: left promiscuous mode [ 57.348144][ T6639] macsec0: entered allmulticast mode [ 57.357547][ T6639] veth1_to_batadv: entered promiscuous mode [ 57.359429][ T6639] veth1_to_batadv: entered allmulticast mode [ 57.361780][ T6639] macsec0: left promiscuous mode [ 57.363393][ T6639] macsec0: left allmulticast mode [ 57.365051][ T6639] veth1_to_batadv: left allmulticast mode [ 57.393593][ T6644] netlink: 68 bytes leftover after parsing attributes in process `syz.1.185'. [ 57.495364][ T6637] could not allocate digest TFM handle cryptd(blake2b-160) [ 57.621519][ T6663] ipvlan2: entered promiscuous mode [ 57.757052][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.191'. [ 57.798964][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 57.803231][ T6676] openvswitch: netlink: Flow actions attr not present in new flow. [ 57.920968][ T6694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=6694 comm=syz.1.199 [ 58.004465][ T6712] kernel read not supported for file / œ7³ÏüâW)ës“§Ç-ë (pid: 6712 comm: syz.3.203) [ 58.056394][ T6717] [ 58.057182][ T6717] ====================================================== [ 58.059280][ T6717] WARNING: possible circular locking dependency detected [ 58.061373][ T6717] 6.13.0-syzkaller-07048-gae8b53aac327 #0 Not tainted [ 58.062730][ T6711] [U] [ 58.064607][ T6717] ------------------------------------------------------ [ 58.065474][ T6711] [U] [ 58.067554][ T6717] syz.1.205/6717 is trying to acquire lock: [ 58.068390][ T6711] [U] [ 58.070167][ T6717] ffffffff8fef5028 [ 58.071014][ T6711] [U] [ 58.071673][ T6711] [U] [ 58.072152][ T6717] ( [ 58.073025][ T6711] [U] [ 58.073839][ T6717] rtnl_mutex){+.+.}-{4:4} [ 58.074648][ T6711] [U] [ 58.075457][ T6717] , at: smc_pnet_find_ism_resource+0xfa/0x3c0 [ 58.076770][ T6711] [U] [ 58.077584][ T6717] [ 58.077584][ T6717] but task is already holding lock: [ 58.079449][ T6711] [U] [ 58.080231][ T6717] ffff888025380258 [ 58.082480][ T6711] [U] [ 58.083308][ T6717] (sk_lock-AF_INET [ 58.084473][ T6711] [U] [ 58.085297][ T6717] ){+.+.}-{0:0} [ 58.086456][ T6711] [U] [ 58.087283][ T6717] , at: smc_connect+0xd5/0x760 [ 58.088522][ T6711] [U] [ 58.089162][ T6717] [ 58.089162][ T6717] which lock already depends on the new lock. [ 58.089162][ T6717] [ 58.089168][ T6717] [ 58.089168][ T6717] the existing dependency chain (in reverse order) is: [ 58.090926][ T6711] [U] [ 58.091736][ T6717] [ 58.091736][ T6717] -> #1 ( [ 58.094894][ T6711] [U] [ 58.097551][ T6717] sk_lock-AF_INET){+.+.}-{0:0} [ 58.098386][ T6711] [U] [ 58.099907][ T6717] : [ 58.099912][ T6717] lock_sock_nested+0x3a/0xf0 [ 58.105450][ T6717] sockopt_lock_sock+0x54/0x70 [ 58.107043][ T6717] do_ip_setsockopt+0x101/0x3680 [ 58.108724][ T6717] ip_setsockopt+0x59/0xf0 [ 58.110203][ T6717] udp_setsockopt+0x7d/0xd0 [ 58.111772][ T6717] do_sock_setsockopt+0x222/0x480 [ 58.113663][ T6717] __sys_setsockopt+0x1a0/0x230 [ 58.115856][ T6717] __x64_sys_setsockopt+0xbd/0x160 [ 58.117815][ T6717] do_syscall_64+0xcd/0x250 [ 58.119453][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.121452][ T6717] [ 58.121452][ T6717] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 58.123600][ T6717] __lock_acquire+0x249e/0x3c40 [ 58.125242][ T6717] lock_acquire.part.0+0x11b/0x380 [ 58.126921][ T6717] __mutex_lock+0x19b/0xb10 [ 58.128467][ T6717] smc_pnet_find_ism_resource+0xfa/0x3c0 [ 58.130335][ T6717] __smc_connect+0x50e/0x4890 [ 58.131892][ T6717] smc_connect+0x2fc/0x760 [ 58.133372][ T6717] __sys_connect_file+0x13e/0x1a0 [ 58.135042][ T6717] __sys_connect+0x14f/0x170 [ 58.136592][ T6717] __x64_sys_connect+0x72/0xb0 [ 58.138184][ T6717] do_syscall_64+0xcd/0x250 [ 58.139715][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.141643][ T6717] [ 58.141643][ T6717] other info that might help us debug this: [ 58.141643][ T6717] [ 58.144592][ T6717] Possible unsafe locking scenario: [ 58.144592][ T6717] [ 58.146790][ T6717] CPU0 CPU1 [ 58.148395][ T6717] ---- ---- [ 58.149987][ T6717] lock(sk_lock-AF_INET); [ 58.151341][ T6717] lock(rtnl_mutex); [ 58.153295][ T6717] lock(sk_lock-AF_INET); [ 58.155291][ T6717] lock(rtnl_mutex); [ 58.156496][ T6717] [ 58.156496][ T6717] *** DEADLOCK *** [ 58.156496][ T6717] [ 58.158917][ T6717] 1 lock held by syz.1.205/6717: [ 58.160402][ T6717] #0: ffff888025380258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect+0xd5/0x760 [ 58.163166][ T6717] [ 58.163166][ T6717] stack backtrace: [ 58.164940][ T6717] CPU: 0 UID: 0 PID: 6717 Comm: syz.1.205 Not tainted 6.13.0-syzkaller-07048-gae8b53aac327 #0 [ 58.164952][ T6717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.164958][ T6717] Call Trace: [ 58.164969][ T6717] [ 58.164973][ T6717] dump_stack_lvl+0x116/0x1f0 [ 58.164989][ T6717] print_circular_bug+0x490/0x760 [ 58.165003][ T6717] check_noncircular+0x31a/0x400 [ 58.165015][ T6717] ? __pfx_check_noncircular+0x10/0x10 [ 58.165027][ T6717] ? hlock_class+0x4e/0x130 [ 58.165038][ T6717] ? lockdep_lock+0xc6/0x200 [ 58.165047][ T6717] ? __pfx_lockdep_lock+0x10/0x10 [ 58.165058][ T6717] __lock_acquire+0x249e/0x3c40 [ 58.165072][ T6717] ? __pfx___lock_acquire+0x10/0x10 [ 58.165085][ T6717] ? stack_depot_save_flags+0x38f/0x9c0 [ 58.165103][ T6717] ? __pfx_lock_release+0x10/0x10 [ 58.165115][ T6717] lock_acquire.part.0+0x11b/0x380 [ 58.165128][ T6717] ? smc_pnet_find_ism_resource+0xfa/0x3c0 [ 58.165140][ T6717] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 58.165153][ T6717] ? rcu_is_watching+0x12/0xc0 [ 58.165163][ T6717] ? trace_lock_acquire+0x14e/0x1f0 [ 58.165173][ T6717] ? smc_pnet_find_ism_resource+0xfa/0x3c0 [ 58.165184][ T6717] ? lock_acquire+0x2f/0xb0 [ 58.165196][ T6717] ? smc_pnet_find_ism_resource+0xfa/0x3c0 [ 58.165207][ T6717] __mutex_lock+0x19b/0xb10 [ 58.165221][ T6717] ? smc_pnet_find_ism_resource+0xfa/0x3c0 [ 58.165233][ T6717] ? smc_pnet_find_ism_resource+0xfa/0x3c0 [ 58.165244][ T6717] ? find_held_lock+0x2d/0x110 [ 58.165253][ T6717] ? __pfx___mutex_lock+0x10/0x10 [ 58.165266][ T6717] ? __pfx_lock_release+0x10/0x10 [ 58.165281][ T6717] ? smc_pnet_find_ism_resource+0xfa/0x3c0 [ 58.165291][ T6717] ? rtnl_lock+0x9/0x20 [ 58.165302][ T6717] smc_pnet_find_ism_resource+0xfa/0x3c0 [ 58.165314][ T6717] ? smc_vlan_by_tcpsk+0x27c/0x620 [ 58.165324][ T6717] ? __pfx_smc_pnet_find_ism_resource+0x10/0x10 [ 58.165337][ T6717] __smc_connect+0x50e/0x4890 [ 58.165347][ T6717] ? __pfx_kernel_connect+0x10/0x10 [ 58.165358][ T6717] ? __pfx___smc_connect+0x10/0x10 [ 58.165368][ T6717] ? mark_held_locks+0x9f/0xe0 [ 58.165380][ T6717] ? __local_bh_enable_ip+0xa4/0x120 [ 58.165395][ T6717] smc_connect+0x2fc/0x760 [ 58.165404][ T6717] ? __pfx_smc_connect+0x10/0x10 [ 58.165413][ T6717] __sys_connect_file+0x13e/0x1a0 [ 58.165427][ T6717] __sys_connect+0x14f/0x170 [ 58.165439][ T6717] ? __pfx___sys_connect+0x10/0x10 [ 58.165454][ T6717] ? __sys_setsockopt+0x1cd/0x230 [ 58.165469][ T6717] __x64_sys_connect+0x72/0xb0 [ 58.165482][ T6717] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.165495][ T6717] do_syscall_64+0xcd/0x250 [ 58.165509][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.165522][ T6717] RIP: 0033:0x7f933df8cd29 [ 58.165530][ T6717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.165540][ T6717] RSP: 002b:00007f933bdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 58.165549][ T6717] RAX: ffffffffffffffda RBX: 00007f933e1a5fa0 RCX: 00007f933df8cd29 [ 58.165554][ T6717] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000005 [ 58.165560][ T6717] RBP: 00007f933e00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 58.165565][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.165571][ T6717] R13: 0000000000000000 R14: 00007f933e1a5fa0 R15: 00007ffc08a200e8 [ 58.165578][ T6717] [ 58.265562][ C0] vkms_vblank_simulate: vblank timer overrun [ 58.390986][ T68] Bluetooth: hci1: command 0x0406 tx timeout [ 58.832810][ T6709] [U] [ 58.902369][ T39] kauditd_printk_skb: 157 callbacks suppressed [ 58.902380][ T39] audit: type=1400 audit(1737808828.059:559): avc: denied { search } for pid=6723 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.911008][ T39] audit: type=1400 audit(1737808828.059:560): avc: denied { read } for pid=6724 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.918040][ T39] audit: type=1400 audit(1737808828.059:561): avc: denied { open } for pid=6724 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.925651][ T39] audit: type=1400 audit(1737808828.059:562): avc: denied { getattr } for pid=6724 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.933835][ T39] audit: type=1400 audit(1737808828.059:563): avc: denied { write } for pid=6723 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.940895][ T39] audit: type=1400 audit(1737808828.059:564): avc: denied { add_name } for pid=6723 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.947875][ T39] audit: type=1400 audit(1737808828.059:565): avc: denied { create } for pid=6723 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.954798][ T39] audit: type=1400 audit(1737808828.059:566): avc: denied { write open } for pid=6723 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb7.ipv4ll" dev="tmpfs" ino=2734 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.962735][ T39] audit: type=1400 audit(1737808828.059:567): avc: denied { append } for pid=6723 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.ipv4ll" dev="tmpfs" ino=2734 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.970394][ T39] audit: type=1400 audit(1737808828.059:568): avc: denied { getattr } for pid=6723 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 VM DIAGNOSIS: 12:40:27 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853fc8c5 RDI=ffffffff9ab75e00 RBP=ffffffff9ab75dc0 RSP=ffffc90003b6f188 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e33312e36 R12=0000000000000000 R13=000000000000006c R14=ffffffff853fc860 R15=0000000000000000 RIP=ffffffff853fc8ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f933bdf66c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020010000 CR3=00000000565e2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f933e00f232 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f933e00f23f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f933e00f239 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f933e00f24d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f933e00f2d3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f933e00f3b1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f933e17c488 00007f933e17c480 00007f933e17c478 00007f933e17c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f933ecdd100 00007f933e17c440 00007f933e17c458 00007f933e17c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f933e17c498 00007f933e17c490 00007f933e17c488 00007f933e17c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000004dedc RBX=0000000000000001 RCX=ffffffff8b557239 RDX=ffffed100d4e6f7e RSI=ffffffff8bd2e740 RDI=ffffffff819084a9 RBP=ffffed1003a5c910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e6f7d R10=ffff88806a737beb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d2e4880 R14=ffffffff906231d0 R15=0000000000000000 RIP=ffffffff8b55861f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558a0e3ed908 CR3=0000000024a56000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=212d05dc212d05dc 212d05dc212d05dc 212d05dc212d05dc 212d05dc212d05dc 212d05dc212d05dc 212d05dc212d05dc 212d05dc212d05dc 212d05dc212d05dc ZMM22=354310a5354310a5 354310a5354310a5 354310a5354310a5 354310a5354310a5 354310a5354310a5 354310a5354310a5 354310a5354310a5 354310a5354310a5 ZMM23=5d93d1f55d93d1f5 5d93d1f55d93d1f5 5d93d1f55d93d1f5 5d93d1f55d93d1f5 5d93d1f55d93d1f5 5d93d1f55d93d1f5 5d93d1f55d93d1f5 5d93d1f55d93d1f5 ZMM24=cf3ede69cf3ede69 cf3ede69cf3ede69 cf3ede69cf3ede69 cf3ede69cf3ede69 cf3ede69cf3ede69 cf3ede69cf3ede69 cf3ede69cf3ede69 cf3ede69cf3ede69 ZMM25=7e2be9c77e2be9c7 7e2be9c77e2be9c7 7e2be9c77e2be9c7 7e2be9c77e2be9c7 7e2be9c77e2be9c7 7e2be9c77e2be9c7 7e2be9c77e2be9c7 7e2be9c77e2be9c7 ZMM26=1483007114830071 1483007114830071 1483007114830071 1483007114830071 1483007114830071 1483007114830071 1483007114830071 1483007114830071 ZMM27=d31ce4b8d31ce4b8 d31ce4b8d31ce4b8 d31ce4b8d31ce4b8 d31ce4b8d31ce4b8 d31ce4b8d31ce4b8 d31ce4b8d31ce4b8 d31ce4b8d31ce4b8 d31ce4b8d31ce4b8 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ff010000ff010000 ff010000ff010000 ff010000ff010000 ff010000ff010000 ff010000ff010000 ff010000ff010000 ff010000ff010000 ff010000ff010000 info registers vcpu 2 CPU#2 RAX=00000000000420ac RBX=0000000000000002 RCX=ffffffff8b557239 RDX=ffffed100d506f7e RSI=ffffffff8bd2e740 RDI=ffffffff819084a9 RBP=ffffed1003a5f000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d506f7d R10=ffff88806a837beb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d2f8000 R14=ffffffff906231d0 R15=0000000000000000 RIP=ffffffff8b55861f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe8ca00fc0 CR3=000000002792e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556fbe0be2 000055556fbe06d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556fbdf4fe 000055556fbdf2a0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0208000100000608 060a01678c000000 0000000000000000 306e616c7601ffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002840304040002 8003000800021000 14100006016cfc20 1000018004320800 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69d0201000028004 0100000608060601 03c61ffffffffe04 8800028803000484 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000608060a0167 8c00100003ffffff ff04080800000800 0100000608060a01 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0108100004800426 08000c0800010000 0608060a016b8800 0800048003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03ffffffff043208 0002080001000006 08060a01678c0010 0003ffffffff0408 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800000800010000 0608060a0169d020 1000028004010000 060806060103c61f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffe04880002 8803000484000284 0304040002800300 0800021000141000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000004 RCX=ffffffff8199bada RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000001 RBP=1ffff920006f3efc RSP=ffffc9000379f7c8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=ffff888012328000 R15=ffffc9000379f898 RIP=ffffffff81b9c0f0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f853b3ec6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f933e1a7bac CR3=0000000051212000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000000000ff Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f853a60f232 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f853a60f23f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f853a60f239 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f853a60f24d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f853a60f2d3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f853a60f3b1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f853a77c488 00007f853a77c480 00007f853a77c478 00007f853a77c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f853b2dd100 00007f853a77c440 00007f853a77c458 00007f853a77c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f853a77c498 00007f853a77c490 00007f853a77c488 00007f853a77c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000