last executing test programs: 6.818819269s ago: executing program 2 (id=80): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddfdffdb, 0x0, 0x0, 0x100130}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r3, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1}}], 0x1, 0x7fb14726dcaa, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000000080)={0x3, 0x9, 0x17}) add_key(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000740)="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", 0x1000, 0xfffffffffffffffd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r6}, 0x10) sync() sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40005200060010"], 0x24}}, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) write$binfmt_script(r7, &(0x7f0000000040)={'#! ', './file1'}, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) 5.897036144s ago: executing program 2 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000080), 0x80) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(0x0, 0x2, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffff37, 0x0, 0x8, 0x0, 0x0}}, 0x10) mprotect(&(0x7f000060d000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) 5.199505597s ago: executing program 0 (id=88): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x4ac00, 0x11) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x2, &(0x7f0000000240)='sou\xf2ce', &(0x7f0000000080)='./bus\x00', r3) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000040)={0x0, "6658f7cbf8c0efcccb50d44228dea0d49ce115ab697f58fe9a385a7e94ea189b"}) mknodat$loop(r3, &(0x7f0000002600)='./bus\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xfffffb06}, 0x8) socket(0x2, 0x0, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x33}}) socket$inet6(0xa, 0x3, 0xff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000000680)={{0x5, 0x0, 0x80}, "e0f7176672594e817fc843d11dc79dabbbd874b8964d1ddac14e22877106a3316ba1451b54b14b176982a5764c221501f664bb0742c6e00836304ee0701a00ff17ae0af333f9a38e0fbfc0896a25ad9db2f64582ba59d6c7394b2de98e61681be62d7af82c19548520e89cd86b97604994087d948a3f5b2d1241cb52cd16c8aa3e09eceab02a6e16c0737f56dc2a95c5a71dfa0466c097e52f1aae5f457cecdad0610593718c7203e76f123ac3f6a8dd64f3098cb00a1dfafe0a2ab7e8c4711beac69e0ec9095a4c80a67dd20ae80530ccd07ef53349535f56135a649e76caba85260b28994a2b033a35a9b69a5b8ac7ccb75d2694b000d3512eedddc0136611aedf4d57a0c677aa5bd83154d91eef0c0aaea30ca6b011459559bd2c29c169ed168dd6b0ded00dd2d3638a8dfa22d07d0b4936a02facaf78ea7814b97714093ed0943d7ca97483ec9851ab23dde004e623bfa5ce413a6ce504dd8d282bf8f32800c27c19068bdea3309328e470d2e504ee60f817489f7aa72cc99fa75a7157abf98510bdd8fde7e184beded5c50af6e0c45728d5daa30e3220446c2f7886ad5b1dc7a73289fca5bc39fc421ce358047cec50ac4bed17aeaf326f8b9aeb5464f4a3bc5a4623d7ab6f8a4d9627b04b19e995a848172c9219739e81939455d2132f293e0640ffdce5dbc39067d90ad4945fae763db900e056925aab97da2f43fbb6f67d0d25b39cdb580de2b0ae2ba51e208095589223879764aa4f7591115205486c3b7024279c25635494e7caea99f5e6dbcf2938afe46d4c7032cf1be3b762b5724af750e948cf5846cc28637adb7e0cd0a1e1c03528182010f29d51a99f22e4de3a26172890bbebae48afaaefc8a4ae01757b136724659ff1531b9aea130350a5337c4dc994b7e42ad13fecca6f724d10b48d5284b9051e12d39f4ef0c6090e8fce4b5cce7d3111f1e1ced75425a460516249618b5fc4df0866e5d07d4c74ebaa6748d864419ccf98cf47f7314b9df8fc2151e5867f05bdb156a0643e78f658f38192f8419ba9d9e61dd770bfeb97ba4c23436d0196c214f571efac56f7ae65c1b409ae4573e33e026ce65bd0d72060a9000abd2fd196da62379a98729cc008e61ea3229b7ed4170b28227f791782d218ea31a46d7afb7c76aef88540b4537b0de6f8c282dae7a7821ae869776d7f2f6dcf718c00e91c218734aae977e1ed2dec1df98187add274f84247777099ab2c938146cdc83ad651446b74d86c59b5ba3bd72559e474f739037be115bdbb910f9adcd4acf9780ca15c3f8bb700d3ad43e24d3136c707a59d70bdf77d2ff4ac2dcd349c8c963b6336ef7f0af9d0474e2522ce7c50ed6902f572314b56a36351624ba27f9077dfe9c9993877a16888f7977d0cdf29e26d61897c8f2b666f3559bab01b576d9c44ceca1e534d50f76c46b481f356cc6aa653fb11388ed3055b749bb56dfff6c5f42315ae8e06d1af34cbc41d04462d95da402127f95f4ae48c8656b02f36d0b5b5f172999fbc77518c47ab101f2b31815255be0cde88035ad51402f14aa0f9a2d96d425219f517ad732376ac7af52428dc42290337e2d58f95026ec245af1d091e117dc46ed358c975e1176804a56d69ed9d2ae52c355f72613f918a6510d53e51c0676bd297c4cd1f710359922cbef4c8d1536e85a206937fe07ee5c30e675ee028b6900d0fa01c51d98b67f44cc51d5226117e9e29fac174f6509a9de1e3755309f4488dcb3669a6b3f796c7f048252ec4139ad9244111dbd6074b0a5f63e2e88c735d1bde1b2c7943e888fb7725eacd55c0acec2aa1761bcd9817cb55e22c2e855b61f7080b2079461e03fd46643862c3bbe5f685381d4d2dc8e56ee9cdac9a98f277c85e9dc2dae579d74328786c5e8ed790700f7c63e84793cf538d2cc743674b30fc8adefb093ad6b6fbf9e56c851870ae3975c5efced4cd76b63824f5beb7a4609ed05571509de98d66684b9bdd361ca5e6ed4d704b47fa0299a813e8656a14d9ddb27613c5dd4d77822793b026f84281543c0f324d4eded3ca1e2da810e95888186e19e781accd9bdf459514315420f8d7857f3ac87d6c0caec11400f3a36b7cf3779653772e3228bff7c6586c8c0c7029a388f1fab54dd36b73e9c132d0205326902415be1eb8557c41266a8886fc3054980d10d9a6111d25870e604e03453fb6e6fbe9c440f066931c424b2f23f88dad4dab6e71dc92c1828ebd44212b5cf35c97eec114e4abd5c498cc3b0e241481a22ecdd31c9595952eb0c4bc3b29ad2bddc107e9a99dc9872520f7d31b3e7883bed090396fa4f043b6f1bed98f9bc6feb50a24fabb92f1d1bde4ceff36dfdf9dbfe8b4e2f8a64d18c3371d008c50cfbc625e3fdab7f7581a2eca2a653d2376f262e00c4b28c7cf98187bc96d1d684b5c766ce98356c3fb59c8ef460aea39ed8f6aedfeaee9ef6f124bfc4eb425ae198ecc304ef41ce0e670b21c2a029d1e8897b252e9f89308b8973895361719d3f7df07ee71a863fe0fe0002968b292853fa5f52c24a4f53d047c64e4a006923f160940f5b55fe9640e0669eaa560875f82e469b1a86fe015db8d4877919555236c8658e3b7522269725ab2cbb3ec0835c636179da9c9971c30b634287ab4c781822f5fbe5b4717041d900d549b9112fbd599567f3722b642b494dc074c265977a0708ccaf0097f8ea8ed891b2a219d4b80bc83ee27722883785fba8a9168972857a7fb5dab8fc7717d91403ba37c8f64e040cbdec128214ac6aca75a926dcd8954737c40db1586fe7eca91fde84f868e1784d13c5bb857233ab291ede405c18f9a8c60c05f4e4bd37dd57a97982bea4254ff7c19a09a3c17e27f19c5048f6cb1f766492866afd5e1803bbecc455d105c554b0b1721bef741d1dafe2ed2789ceb0e57140f13a551c3d8e3c1f9f8d15bb337ee8fbf307ddc5671bcc77eeb9803f2dc755bff041f9e123d9b850fcffd216293952ae1d5b208703cddce9c8ce6bd2988ecc63cb367e84f72adf75b92033ac3b2d6c86cce34ee292243181bb5e995573b8c7f5168fb63a6a947b11f537b4a51044ebd383962e512502b7c475f4c4dfa3edd5471af3c56d3583df787c59f8daca9fad5c931c7245c06ac4104f7dfa53c90be01d2c76bc5ead2ebcc9f2eadac450c12430c7a4bba764234bc4fd777ea4c8ccd8ef637164b49f5f79660ec1be5a02c5a7415a258f499eb400d9798257cbafeb65dbcf357919531104a432b41b3e3a4594656748e76a47998b6883a63c55bb9ccb8059b7782f39a9ac94538bcb28a7b784512bdfd95c0d524e00fae1d807442041fddb44d5ec2c724d8f28188b68c8a8ec845f8982856a97630bc27e8d119419b849b8a38b118503d07364e1f6bfccf7e18eae1a9a4eccbd6919861254251cdf3cc7dcbb899fc2f8c2ebd7b3c48173ba53d28c049113e34f2be43b4a99fb6d85c31758b5bcb586c02f6303468811330567bfd3b475887898c65723b8c210fdb09b8311048cc42ed1401dc960ada7bd6e63d38f57ead7a7faff319c687244db698dd3416fad96264cc50e67175c26b090fbcb6685f99c3a8af8128c884433c4728b820a469c9722b2c7cb013288a5cfaca951fe415a25742d96bddb1f8ca0756219a226bfa8df56f0a969ed8c0f1dddf8b0913bdf39bbca52c87ad4af94b4d16db39a56109d0129650bc793a9860d574bf1dc078f1644142e1e9dc81ee3aaef2d3b72ef4cd79a99168437519374527655db3a55a817982f24f6bd9afeb0a7954e38d2c90326c7dd08ccf896abdd97a405cb2fcfba80f0ab8f60a19567f2e258d97a542475e5b4edaba018e41d60b334c023e072893cc08353a9e8316f2910a00f7932e652397ca3581e7f8767650d4e6a4768665fe72ee85062fb6c52b6116075638a634592457c231cf469510d9289b74d11696fc0c298de014af33be7001495e816bf2bf33f201a03646c75630ed371df1eae7c9c6d01f6c307490b9641a1afc9d5c8aaaff75430f79998b5e3ed71a9a2d146d2570cf2a2b5a6e16c30d7fab6e814029083c90b43c8c74c9309a78a88bf0dbfd56a3bc53a3e8549fb7535f8bd27b1117098696518d25151e35d1de07382a2cbd6b72f24148f17dd8df92fef31d634e1cdd74141dbb94a395627586f299f64b2a25f242a2b09c7ea7ea321c7e5f3a674a596bd62f91e88ca20c0bb8b455dc9ddb70b505c40a76287612f04dced09dc83fd9ab1c463c70eda281ee608818e274d80a1062a0c719491eb9c71dc7b221423ffffba17ab3c4abf20e429cbb447ef9ef45985849807484ef35c6b185cde95c726254782b84104818b4d1a157c45cbcb34b47bd7e671372d3e9650cf7ef4f0233b30cb4e42049c67e6a343b01583592da37257f2536283f21afacf470f7ce440e4788d49b7a12cbe3d92e178d6724eaa0c3cce540356455f90d6de2a060ab9545c7c8cee8cf54fc7c29134d2920f16026ba61c96fbd6ad60de93d28ffa25a95264a60e1fdd8e7c93dcabd7289fc312141b89a1a40a569df9de1af8c612c3e5855fb3889925e2ad71708bfa6db9c1fb258ae9aaeb7186e6a7adcbafe8c6c84d06b5519476e077f9060bb3956aa8175f84ab95b9d6bb11520d8adfb4244164573a64488e0ef70518307f733087a79af1ceb4e0ab39885cc1a2a2134d0336087c6584a9472134b0fb55afb6812b4c3d411f03e6b89b3ca07263aa9bfd198eaf2c2e04a1d7c3f666089e823bd4cb06d76b401a5a291ba14d60ff2e0813b9239fe69ecff8fe7b0f47dbe4ffbd84869410e65401a7016b5af2a458954db77760fd317aad4b5ce85777c2cab29faa4ff924a925f0b97e73b1944e4b5e1442e4ac67d7b0b2630a5d8e857f5354bc158c32db6c8bb971a8a0d5746fd8c4b4768e10a3d5a2a7d484e56cd1a320f375a571752073caef8b78b2c7ab2c98e6a674b7857ad37bcdf44ec3bdc2d8ca04cbbc236b698423cdd475b8f5f855870f3ba2d730ed092d5becd7958ff55ab824e34eedc3b61709899862b918beff96e3914b267b4e1f9765625394581116e2736dae82610fd62360d50587c897486c84b4836e3528b14ea9b5ab1c623b7aaa8290a48ea7b5fcbcdf0adb64358b07e42b04184ffd2b0b5b4fc471c457fbfc91e357d3c801032eeaf8458d86825786cf316ad5e15529e80c794939c9ac5f842fa5bf5323cd2cb8662f191343599e950161136f2934e957d466bc07c0884e0c34fe91c45867f5958b330a655db012779a5e14031509172c40f446cb5051f222ad7bb62d5cf05f5de1ef6628983bb22133f7c19fbb8c2e74d0377c7a05b80762ff2a1b8916c6ab8d4f21da8b4aaa6b33b76dd75bb64914cbe8d9cbf44337729c3222d65432aa42f114a6fd90e1ec2def28d31da951b1a93b66bd0221989bc6306012edfef4f876639a81005dd52b3ec8b4be1346754abe169b74f55be60fc1ad44201a1f3b8584ad5cd4639c662db448f58a46b4e5e30ee050f56d19d2794dcb87676b8bbfeaeef9b04beb0dfa11299eaeb5205b09d08d68a3943f66b2477dbd3675b296121ea648ebe321e4666a2eb33ecb92d8d1d2f95acd0786ed09b9622d273d35de6600a039623e8fd7a91de94d2a3d025af7f85e845574217574959bf77747e29a9735ef7b3df805a21652f64ac7eb233d8e4a21d9fb2d3c5e80000e8cd3d3a21198e035547589b5f03b9a0652c1036d00258eae5c4fa22c3809c019ce987373638e91b5a0855a727cc9c7974b60e6a95464e68ff598f93be30db", "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"}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) socket(0x40000000015, 0x5, 0x0) 5.00289156s ago: executing program 2 (id=90): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x54c) semtimedop(r2, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7}, @ipv4=@igmp={{0x1a, 0x4, 0x2, 0x4, 0x90, 0x6, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x4c, 0xed, 0x1, 0x0, [{@multicast1, 0x6}, {@rand_addr=0x64010101, 0x9}, {@empty, 0xa2a}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x9}, {@multicast2, 0x40}, {@private=0xa010101, 0xffffffff}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7ff}]}, @noop, @ra={0x94, 0x4}]}}, {0x15, 0x9, 0x0, @rand_addr=0x64010100, "24bdfa45f2ea01dbd352afa231c7266b5b3947fd1b7902a696e73136c8567960"}}}, 0x9e) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.209258165s ago: executing program 0 (id=94): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000240)={0x60, 0x2, &(0x7f00008b0000/0x3000)=nil, &(0x7f00008e9000/0x4000)=nil, 0x670, 0x0, 0x0, 0x3, 0x40, 0x1, 0x0, 0xa}) 4.049489401s ago: executing program 2 (id=96): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x5421, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x9]}, 0x8) read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0x2020) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0xd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8004, 0x2, 0x84}) syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0xb40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x26, 0x5}) syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0xe0}, 0x3}, @in6={0xa, 0x4e24, 0x5e14bb69, @mcast1, 0xd}], 0x38) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) 3.299862446s ago: executing program 1 (id=102): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) (fail_nth: 26) 3.298919942s ago: executing program 1 (id=104): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x54c) semtimedop(r2, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7}, @ipv4=@igmp={{0x1a, 0x4, 0x2, 0x4, 0x90, 0x6, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x4c, 0xed, 0x1, 0x0, [{@multicast1, 0x6}, {@rand_addr=0x64010101, 0x9}, {@empty, 0xa2a}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x9}, {@multicast2, 0x40}, {@private=0xa010101, 0xffffffff}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7ff}]}, @noop, @ra={0x94, 0x4}]}}, {0x15, 0x9, 0x0, @rand_addr=0x64010100, "24bdfa45f2ea01dbd352afa231c7266b5b3947fd1b7902a696e73136c8567960"}}}, 0x9e) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.11812999s ago: executing program 0 (id=105): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00012dbd7000ffdbdf250700000001000200000014000600fe880000000000000000000000000101060007004e220000060004000b00000008000100000000000800030000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x40800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$key(r6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)="a4", 0x1}, {&(0x7f0000000340)='l', 0x1}], 0x2}}], 0x7fffefff, 0x0) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROM_SELECT_SPEED(r10, 0x5322, 0x800) 3.117482084s ago: executing program 2 (id=106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0x201000}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='1-6:5/', @ANYRESOCT=r2], 0x31) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x5, 0x92e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x0, &(0x7f0000000040), &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x9a6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001400), 0x3e5c03, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000001e80)={0x9, @pix_mp}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102397, 0x18ffd) r8 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r8, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000302000000020390063deeab57ac10"]}, 0x0) syz_usb_control_io(r8, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_ep_read(r8, 0x1, 0x0, 0x0) syz_usb_disconnect(r8) 2.578985641s ago: executing program 3 (id=107): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) getegid() r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) 2.519050836s ago: executing program 3 (id=108): r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x33, &(0x7f0000000180), 0x43) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) ptrace$getregs(0xe, r3, 0x0, &(0x7f00000000c0)=""/204) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0xf, 0x0, 0xfffffee8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = signalfd4(r8, &(0x7f0000000080)={[0x4]}, 0x1c, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r10, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_tcp_int(r9, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) 2.338514908s ago: executing program 3 (id=109): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="e3", 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x68060200) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) tkill(r4, 0x15) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x90, [], 0x2, 0x0, 0x0}, &(0x7f0000005480)=0x108) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x0, 0x0, 0xfffffff5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}]}}) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000000)={0x0, 0x1}) capset(0x0, &(0x7f00000000c0)={0xfffffbff, 0x5, 0x4, 0x4, 0x370, 0x3}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) capset(&(0x7f0000000100)={0x19980330, r1}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0xb, 0x0, &(0x7f00007d0000)) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x169802, 0x0) r9 = dup(r8) ioctl$BLKBSZSET(r8, 0x40081271, &(0x7f0000000080)=0x800) write$P9_RGETLOCK(r9, &(0x7f00000024c0)=ANY=[], 0xfffffff0) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000000000)={0x30}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2.327499244s ago: executing program 1 (id=117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000008c0)='btrfs_setup_cluster\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x6, 0x0, 0x0, 0xb, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r1, 0x4400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000180)="18607651149d7b10b40000009008899b8f139df2dba3b5b5d7a8d1b36cfab675cb3976ee8100e2948c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d69b73df6f0d418cbf40a85d3bc3912b08be5c749450b350a789ccfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e7") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) r5 = dup3(r3, r2, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000680)={@local, @random="3e83cb58ef06", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0xff, @private2, @local, {[@fragment={0x0, 0x0, 0x0, 0x1}], {0x4e23, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "412fa8303eb000af0000000092fd00", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x5) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xdd) 1.428003526s ago: executing program 0 (id=110): gettid() mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_SELECT_DISK(r1, 0x5322, 0x47) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r6 = accept$inet6(r4, 0x0, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x36, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r7, 0xc0045520, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00', 0xff}, 0x5, 0x40, 0x1, 0x0, 0x0, 0x5, 'syz0\x00', 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r8, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) 1.42765765s ago: executing program 1 (id=111): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$inet(0x2, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0), 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r6, 0x0, 0xf3a, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r7, 0x0, 0x7f, 0x100000000000000) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0'}, 0xb) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.27453289s ago: executing program 3 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'macvtap0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_targets\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/184, 0xb8}], 0x1, 0x0, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) dup3(r2, r0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="2d4ffda81d23f4354604dc68e53251fa1fc89e5758385bfab8cf86a57bd1a8209b4e18e3b9a70fabfe94ccd2e30a2b000000002f3881fedd82f32e303f0be5578fbf0a975a2e00000000000000", @ANYRES64=0x0], 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="2f0000001420000004000000", @ANYRES32, @ANYBLOB="f19358d880b7b7f5ff9cf1f6881475c52b65", @ANYRES64=0x0], 0x20) socket(0x2, 0x2, 0x0) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000001000000000000000000000000d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000300)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.207551834s ago: executing program 1 (id=113): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800e34ca57800004752aaeb9bb1e470da5b28b4654782e6c6c581469f28c43b31a3f2f653c85ea8b82c5aa7094fb80d28017458548ccf3614f2a1f716e48c961262364e0ea74a6485d333a2c50d291b6bf2d0168f3e8064fbe1827bde19751b5ce24a64079dec65fc540093a2ee29e88ad592ca8f79b07bb4dc5db0bdee827dd55b6141cdbfe7ac1bce79ba683a7b0a795583dd222e58c389465cecfd43962f6164f972004243a0779d33c38ac64dbb2ac039feb366d709df3a9d07a028d0d900"/206], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)}], 0x1}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x63, 0x40, 0x69, 0x20, 0x471, 0x602, 0x10fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xea, 0x6c, 0xe6}}]}}]}}, 0x0) r1 = socket(0x10, 0x803, 0x0) socket(0x1e, 0x80005, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000200)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) socket$nl_route(0x10, 0x3, 0x0) 1.206820554s ago: executing program 3 (id=114): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000c12000/0x1000)=nil, 0x800000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000100)={0xbc4, 0x0, 0x21, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x800, 0x5, 0x0, 0x2, 0x16e3, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd39, 0x2, 0x4, 0xfff9, 0x9, 0x7, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x30, 0xb1eee10ed2bab21c, 0xc, 0x2, 0x2, 0x11d7d84dc7af179f, 0x3, 0x2, 0x5, 0x24, 0x30, 0x5, 0x0, 0x12, 0x30, 0x1b, 0x9, 0x6, 0xc, 0x10, 0x16, 0x12, 0x3d, 0x6c]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x320, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x1b, 0x1, 0x18, 0x24, 0x6c, 0x1, 0x2, 0x18, 0x2, 0x1b, 0x5, 0x5, 0x60, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x9, 0x0, 0x9, 0x1, 0x2, 0x5, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x24, 0xb, 0x36, 0x4, 0xc, 0x24, 0x1d, 0x0, 0x9, 0x6c, 0x4, 0x32, 0x3, 0x36, 0x1b, 0x24, 0x30, 0x1, 0x48, 0xb, 0x9, 0x1, 0x6c, 0x2, 0x3, 0x4, 0x5, 0x18, 0x6c, 0x9]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x1}, {0x0, 0x8}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x7}, {0x4}, {0x1, 0x3}, {0x4, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x6, 0x2}, {0x7, 0x1}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0x7}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x1}, {0x2, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x2}, {0x0, 0x9}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x2}, {0x7, 0x6}, {0x2, 0x7}, {0x1, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x5, 0x9}, {0x7, 0x6}, {0x7, 0x5}, {0x4, 0x1}, {0x2, 0x9}, {0x4, 0x2}, {0x1, 0x5}, {0x2, 0x3}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x6}, {0x3, 0x4}, {0x6}, {0x6, 0x4}, {0x1, 0x6}, {0x4, 0x5}, {0x2}, {0x7, 0x7}, {0x1, 0x7}, {0x6, 0x4}, {0x6, 0x7}, {0x5, 0x5}, {0x2, 0x7}, {0x4, 0x2}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0x2}, {0x6, 0x4}, {0x4}, {0x0, 0xa}, {0x3}, {0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x7}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x1}, {0x0, 0x5}, {0x0, 0xa}, {0x2, 0x4}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0x5}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x4, 0x8}, {0x6, 0x7}, {0x0, 0x7}, {0x7, 0x9}, {}, {0x0, 0x4}, {0x2, 0x9}, {0x5, 0x4}, {0x5}, {0x5, 0x3}, {0x1, 0xa}, {0x2, 0x3}, {0x7, 0x9}, {0x5, 0x3}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x7}, {0x4, 0x7}, {0x7, 0x1}, {0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x3, 0x3}, {0x3, 0x6}, {0x6, 0x2}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x9}, {0x3, 0x9}, {0x6, 0x8}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0x9}, {0x2, 0x6}, {0x4, 0xa}, {0x0, 0x6}, {0x6}, {0x0, 0xa}, {0x7, 0x9}, {0x7}, {0x6, 0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x3, 0x7}, {0x5, 0x6}, {0x2, 0x3}, {0x5}, {0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x4, 0x1b, 0x5, 0x56, 0x30, 0x1, 0x3, 0x30, 0x5, 0x30, 0x9, 0x4, 0xc, 0x3, 0x2, 0x0, 0x24, 0x4, 0x48, 0x36, 0xb, 0x48, 0xb8dd7050d1f1cb42, 0x9, 0x9, 0xc, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc792, 0x17, 0x1c00, 0xb, 0x5, 0x6, 0xf6c5, 0x5]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0x16, 0x4, 0x1, 0x2, 0x3, 0x48, 0x18, 0x24, 0xc, 0xc, 0x30, 0x6, 0x1, 0x16, 0xb, 0x1b, 0x12, 0x6c, 0x60, 0x4, 0x24, 0x16, 0x1b, 0x9e, 0x1, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xd95e, 0x1, 0x0, 0x3, 0x0, 0xf0d, 0x4736]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xbb5, 0x1000, 0x100, 0xde, 0x1000, 0x5, 0xfd82]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x12, 0x4, 0x12, 0x2, 0xc, 0xc, 0x2, 0x6, 0x18, 0x9, 0x18, 0x2, 0x9, 0x36, 0xc, 0x6c, 0x30, 0x6c, 0x1b, 0x1, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x1}, {0x4, 0xa}, {0x5, 0x8}, {0x6, 0x9}, {0x1, 0x9}, {0x7, 0xa}, {0x2, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {0x1, 0x5}, {0x2, 0x1}, {0x0, 0x9}, {0x5, 0x3}, {0x0, 0xa}, {0x3, 0x9}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x7, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x3, 0x7}, {}, {0x6, 0x2}, {0x2}, {0x3, 0x8}, {0x6}, {0x0, 0x9}, {0x7, 0xa}, {0x0, 0x2}, {0x5, 0x4}, {}, {0x2, 0x9}, {0x0, 0x4}, {0x7, 0x5}, {0x5, 0x4}, {0x1, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x7, 0x2}, {0x1, 0x2}, {0x3, 0xa}, {0x0, 0x6}, {0x4, 0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x7, 0x9}, {0x3, 0xa}, {0x5, 0x1}, {0x2, 0x2}, {0x5, 0x8}, {0x1, 0x9}, {0x5, 0x5}, {0x6, 0x3}, {0x7, 0x9}, {0x6, 0x2}, {0x3, 0x7}, {0x2, 0x5}, {0x3, 0x9}, {0x6, 0x7}, {0x0, 0x8}, {0x5, 0x9}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0xa}, {0x2, 0x7}, {0x7, 0x1}, {0x7, 0x5}, {0x0, 0x3}, {0x4, 0x6}, {0x4, 0x2}, {0x4, 0x4}, {0x7, 0x8}, {0x6, 0x2}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x7, 0xad0e, 0x1, 0x0, 0x800, 0xe, 0x3]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x4}, {0x6, 0x5}, {0x7, 0x7}, {0x7, 0x4}, {0x1, 0x2}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x6}, {0x6, 0x4}, {0x4, 0xa}, {0x4, 0x9}, {0x5, 0x9}, {0x4, 0x5}, {0x7, 0x6}]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x3}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0x8}, {0x0, 0x2}, {0x1}, {0x5, 0xa}, {0x4, 0xa}, {0x5, 0x4}, {0x1, 0xa}, {0x2, 0x3}, {0x7, 0x8}, {0x0, 0x5}, {0x0, 0x3}, {0x4, 0x3}, {0x0, 0x1}, {0x7, 0x4}, {0x6, 0x9}, {0x1, 0x7}, {0x5}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xd, 0x8ef, 0x80, 0xf, 0x4, 0xd, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5, 0x5}, {0x0, 0x7}, {0x0, 0x6}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x4}, {0x3, 0x1}, {0x6, 0x2}, {0x5, 0x1}, {0x4, 0xa}, {0x7, 0x2}, {0x4, 0x4}, {0x3, 0x8}, {0x4, 0x7}, {0x0, 0x19}, {0x2, 0xa}, {0x5}, {0x2, 0x7}, {0x1, 0x3}, {0x2}, {0x0, 0x3}, {0x1, 0xa}, {0x7, 0x2}, {0x4}, {0x5, 0xa}, {0x2, 0x6}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x6, 0x7}, {0x6, 0x6}, {0x5, 0x8}, {0x6, 0x6}, {0x2, 0x9}, {0x4, 0x9}, {0x4, 0x6}, {0x4, 0x1}, {0x5, 0xa}, {0x0, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x5, 0x7}, {0x4, 0x8}, {0x1, 0x4}, {0x6, 0x3}, {0x2, 0x1}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x7}, {0x6, 0x2}, {}, {0x7, 0x7}, {0x2, 0x7}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x4}, {0x4, 0x1}, {0x2, 0x2}, {0x5, 0x8}, {0x5, 0x9}, {0x1, 0x9}, {0x2}, {0x2, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x5}, {0x1, 0x6}, {0x7}, {0x7, 0x7}, {0x2, 0x7}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x110, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x8449, 0x7f, 0xfff6, 0xffff, 0x400, 0x5]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x3}, {0x7, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x5}, {0x7, 0x1}, {0x5, 0x4}, {0x5, 0x3}, {0x3, 0x5}, {0x2, 0xa}, {0x3}, {0x5, 0x7}, {0x6, 0xa}, {0x4}, {}, {0x7, 0xa}, {0x6, 0x7}, {0x5, 0x3}, {0x7}, {0x7, 0x6}, {0x6, 0x4}, {0x1, 0x2}, {0x4}, {0x5, 0x7}, {0x0, 0x5}, {0x2, 0x8}, {0x1, 0xa}, {0x6, 0x4}, {0x0, 0xa}, {0x4}, {0x6, 0x5}, {0x1, 0x5}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x6}, {0x4, 0x8}, {0x7, 0x9}, {0x7, 0x9}, {0x5, 0x4}, {0x6, 0x3}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x3}, {0x3, 0xa}, {0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xb91, 0x400, 0x0, 0xff, 0x1, 0xb, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x9, 0x9, 0x3, 0x1, 0x12, 0x24, 0x0, 0x60, 0x48, 0x17, 0x60, 0x1b, 0x12, 0x33, 0x2, 0x12, 0x6, 0x48, 0x5, 0x48, 0x1b, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x6}, {0x5, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x5}, {0x6, 0x5}, {0x3, 0x6}, {0x0, 0x8}, {0x7, 0x2}, {0x4, 0x9}, {0x3, 0x4}, {0x3, 0x5}, {0x4, 0x5}, {0x3, 0x4}, {0x4, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x7}, {0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x5, 0x5}, {0x4, 0x7}, {0x7, 0x5}, {0x6, 0x8}, {0x1, 0xa}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x9}, {0x6, 0x8}, {0x2, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x4, 0x7}, {0x4, 0x4}, {0x5, 0x1}, {0x7, 0x8}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x1}, {0x4, 0x1}, {0x7}, {0x0, 0x6}, {0x3, 0x7}, {0x5, 0x8}, {0x4, 0x9}, {0x2, 0x5}, {0x3, 0x3}, {0x3, 0x7}, {0x0, 0x7}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x48, 0xc, 0x0, 0x24, 0x18, 0x48, 0x48, 0x5, 0x16, 0x1b, 0x5, 0x18, 0x60, 0x4, 0x1b, 0x48, 0xc, 0x1, 0x36, 0x6, 0x22, 0x24, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1000, 0x4, 0x4, 0x8, 0xc, 0x2, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x2cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x304600f6047160c7, 0x6c, 0xc, 0x3, 0x12, 0x4, 0x6c, 0x3, 0x12, 0x36, 0x12, 0x24, 0xb, 0x60, 0x16, 0x4, 0x36, 0x30, 0x14, 0x18, 0x3, 0x3, 0x18, 0x6, 0x30, 0x9, 0x1, 0x3]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{}, {0x2, 0x2}, {}, {0x1, 0xa}, {0x1}, {0x2, 0x6}, {0x6, 0x1}, {0x7, 0x6}, {0x7, 0x7}, {0x3, 0x9}, {0x3, 0x6}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0x1}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x5}, {0x1, 0x3}, {0x5, 0xa}, {0x6, 0x7}, {0x5, 0xa}, {0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x2}, {0x5, 0x6}, {0x6, 0x2}, {0x6, 0xa}, {0x5}, {0x1, 0x9}, {0x5, 0xa}, {0x5, 0x9}, {0x5, 0x7}, {0x5, 0x7}, {0x3, 0x6}, {0x6, 0x2}, {0x7, 0x7}, {0x3, 0x9}, {0x4, 0x2}, {0x2, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4f, 0x1, 0x6, 0xb, 0x2, 0x16, 0xb, 0x16, 0x1, 0x24, 0x1, 0x36, 0x6c, 0x6, 0x0, 0x16, 0x24, 0x4, 0x12, 0x2, 0x16, 0x5, 0x30, 0x48, 0x5, 0x16, 0x5, 0x16, 0x24, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfbff, 0xfff8, 0xfcd, 0x4, 0x2, 0x3, 0x31, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x8}, {0x2}, {0x5}, {0x7, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0x7}, {0x1}, {0x7, 0xa}, {0x6, 0x1}, {0x3, 0x6}, {0x4, 0x2}, {0x7}, {0x5, 0x9}, {0x2, 0x1}, {0x6, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x1}, {0x4}, {0x0, 0x8}, {0x3, 0xa}, {0x4, 0x6}, {0x1, 0x6}, {0x5, 0x6}, {0x4, 0x6}, {}, {0x0, 0x9}, {0x7, 0x3}, {0x3, 0x6}, {0x7, 0x6}, {0x1, 0x9}, {0x5, 0x1}, {0x0, 0x7}, {0x7, 0x3}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x7}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x8}, {0x2, 0x3}, {0x6, 0x6}, {0x3, 0x4}, {0x5, 0x5}, {0x6, 0x5}, {0x1, 0x9}, {0x6, 0x4}, {0x6, 0x2}, {0x5, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {}, {0x1, 0x2}, {0x5, 0x3}, {0x7, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x6, 0x5}, {0x3, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x3, 0x5}, {0x2, 0x2}, {0x4, 0x8}, {0x5, 0x8}, {0x5}, {0x0, 0x3}, {0x2, 0xa}, {0x5}, {0x6, 0x8}, {0x3}, {0x0, 0x3}, {0x0, 0x3}, {0x4, 0x9}, {0x2, 0x2}, {0x3, 0x9}, {0x2, 0xa}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x6}, {0x3, 0xa}, {0x1, 0x6}, {0x6, 0x6}, {0x7, 0x3}, {0x5, 0x2}, {0x2, 0x1}, {0x3, 0x5}, {0x2, 0x9}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f77, 0x9, 0xb2, 0xb3f2, 0x1, 0xea4, 0x80, 0x6]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x4, 0x1, 0x12, 0x12, 0xb, 0xb]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x7, 0x3100, 0x5, 0x2, 0x40, 0x1ff, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x9}, {0x6, 0x5}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x6}, {0x6, 0x8}, {0x6, 0x2}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x7}, {0x5, 0x4}, {0x2, 0x9}, {0x4, 0x8}, {0x3, 0x3}, {0x4, 0x6}, {0x1, 0x8}, {0x7, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x60, 0x12, 0x5, 0x12, 0x18, 0x60, 0x12, 0x2, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0x1, 0x1ade, 0x4, 0x0, 0x7, 0x2]}}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0xaa45, 0x1, 0x6, 0x0, 0xe165, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8c3, 0x7, 0x10, 0x2, 0x1, 0x6, 0x6, 0x90d0]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x37, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x0, 0xa9a, 0x4, 0x4, 0x6, 0x7f, 0x5]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0xb, 0x2, 0x1b, 0x6, 0x48, 0x60, 0x48, 0x60, 0x24, 0x48, 0x48, 0x30, 0x1b, 0x36, 0x18, 0x36, 0x24, 0x24, 0x60, 0x3, 0x6c, 0x16, 0x2, 0x2, 0x24, 0x5, 0xc, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x7, 0xb435, 0x4, 0x8, 0x5, 0x8, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x64, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x1}, {0x5, 0x7}, {0x2, 0x3}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x6}, {0x5, 0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x3, 0x1}, {0x5, 0x6}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x4}, {0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x1}, {}, {0x1, 0x5}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0x7}, {0x5, 0x7}, {0x1, 0x9}, {0x0, 0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0xa}, {0x2, 0x7}, {0x2, 0x9}, {0x5, 0x8}, {0x3, 0x9}, {0x5, 0x2}, {0x3, 0x3}, {0x1, 0x6}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x9}, {0x1, 0x4}, {0x2, 0x3}, {0x1, 0xa}, {0x7, 0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x8, 0x3, 0x6, 0x0, 0x81, 0x76]}}]}]}, @NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xc, 0x2, 0x3, 0x7, 0x5, 0x6, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3a, 0x8, 0x2, 0x1, 0xa1, 0xc7, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe9c3, 0x4, 0x6, 0x6, 0xff, 0xd, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x7, 0x1f1, 0x400, 0x54c, 0x3, 0x9, 0x4]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x8}, {0x5}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0x7}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x9}, {0x3}, {0x0, 0x3}, {0x3, 0x7}, {0x4, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x0, 0xa}, {0x6}, {0x5}, {0x2, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x6, 0x6}, {0x7, 0x4}, {0x5, 0x9}, {0x3, 0x2}, {0x4}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x3}, {0x2, 0x3}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x2}, {0x3, 0x7}, {0x3, 0x3}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x4}, {0x5, 0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x6, 0x7}, {0x1, 0x9}, {0x6, 0x3}, {0x2, 0x8}, {0x0, 0xa}, {0x2, 0x9}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x9}, {0x7, 0x8}, {0x6, 0x1}, {0x4, 0xa}, {0x6, 0xa}, {0x2, 0x3}, {0x6, 0x7}, {0x2, 0x5}, {0x3}, {0x7}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x4}, {0x6, 0x5}, {0x7, 0x8}, {0x7, 0xa}, {0x4, 0x1}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x5}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x1, 0x7}]}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x148, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb, 0x5, 0xffff, 0x3, 0x62, 0x1, 0x6]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x12, 0xdb, 0x24, 0x16, 0x36, 0x60, 0x16, 0xb, 0xc]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0xb, 0x6, 0x18, 0x5, 0x9, 0x24, 0x48, 0x60, 0x18, 0x24, 0x9, 0x1, 0x2, 0x12]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x16, 0x2, 0x6e, 0x60, 0x4, 0x6c, 0x9, 0x18, 0x16, 0x18, 0x9, 0x60, 0x9, 0x9, 0x6c, 0x16, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x89, 0x101, 0x2, 0x8, 0xa, 0x5, 0xfc00]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0x7}, {0x0, 0x9}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x4}, {0x4}, {0x1, 0x6}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x8}, {0x5, 0x6}, {0x2}, {0x4, 0x8}, {0x1, 0x1}, {0x4, 0x5}, {0x2, 0x9}, {0x5, 0x5}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x5}, {0x5, 0xa}, {0x6, 0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x0, 0xa}, {0x4, 0xa}, {0x3, 0x7}, {0x4, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x8}, {0x7, 0x7}, {0x7, 0x7}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x4}, {0x1, 0xa}, {0x6, 0x2}, {}, {0x5, 0x1}, {0x3, 0x5}, {0x2, 0x5}, {0x5, 0x7}, {0x7, 0x2}, {0x3, 0x5}, {0x7, 0x4}, {0x0, 0x2}, {0x7}, {0x7, 0xa}, {0x0, 0x4}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x7, 0x9}, {0x0, 0x1}, {0x6, 0x8}, {0x4, 0x6}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0xa}, {0x2}, {0x2, 0x3}, {0x3, 0x7}, {0x3, 0x9}, {0x4, 0x9}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xd66, 0xffff, 0x711, 0xe, 0x2, 0x10, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0x48, 0x3, 0x18, 0x2, 0x60, 0x4, 0x48, 0xb, 0x6, 0x3, 0x60, 0x16, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x851, 0xb, 0x4, 0x8, 0x6, 0x2]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x4}, {0x7, 0x6}, {0x0, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x5}, {0x2, 0x3}, {0x0, 0x7}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x3, 0x1}, {0x1, 0x7}, {0x1, 0x1}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x16, 0x4, 0x3, 0x1b, 0x12, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x1bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x5}, {0x7, 0x4}, {0x3}, {0x4, 0x8}, {0x3, 0x2}, {0x0, 0xa}, {0x7, 0x9}, {0x3, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7d1, 0x101, 0x4cb, 0x1, 0x9, 0x158, 0xd6c]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x1}, {0x3, 0x3}, {0x7, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x9}, {0x2, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1d}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x5}, {0x2, 0xb}, {0x7, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x4}, {0x4, 0x7}, {0x5, 0x6}, {0x5, 0x2}, {0x2, 0x5}, {0x3, 0x1}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x4, 0xa}, {0x1}, {0x3, 0x1}, {0x0, 0xa}, {0x6, 0x8}, {0x7, 0x3}, {0x0, 0x2}, {}, {0x1}, {0x3, 0x7}, {0x5, 0x3}, {}, {0x4, 0x5}, {0x3, 0x2}, {0x3, 0x9}, {0x1, 0x9}, {0x6, 0x1}, {0x3, 0x9}, {0x6, 0x1}, {0x2, 0x7}, {0x2, 0x8}, {0x6, 0x8}, {0x5, 0x6}, {0x3, 0x3}, {0x5, 0x3}, {0x2, 0x3}, {0x0, 0xa}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x8}, {0x2, 0x4}, {0x4, 0x6}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x4}, {0x5}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xb, 0x2, 0x3ff, 0x2, 0x4, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0x6]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x5, 0x1, 0xf40, 0x8, 0x4, 0x6, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x30, 0x16, 0x5, 0x18, 0x6c, 0x6, 0x60, 0x4, 0x60, 0x2, 0x18, 0x1b, 0x2, 0x4]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x4}, {0x2, 0x4}, {0x4, 0x9}, {0x4, 0x3}, {0x0, 0x7}, {0x3, 0x3}, {}, {0x7, 0x2}, {0x5, 0x9}, {0x2, 0x4}, {0x1, 0xa}, {0x0, 0xa}, {0x2, 0xa}, {0x1, 0x9}, {0x7, 0x3}, {0x6, 0x9}, {0x1, 0x6}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x8}, {0x4, 0x3}, {0x2, 0x3}, {0x0, 0x6}, {0x5, 0x3}, {0x0, 0x5}, {0x1, 0x8}, {0x5, 0x1}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x9}, {0x3, 0x1}, {0x5, 0x6}, {0x2, 0x5}, {0x1, 0x9}, {0x3, 0x3}, {0x3}, {0x5, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x601b, 0x1ff, 0x2, 0xf3a3, 0x1, 0x800]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x16, 0x3, 0x36, 0x3, 0x24, 0x2, 0x30, 0x24, 0x30, 0x36]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x32, 0x0, 0x1ff, 0x1, 0xf63, 0xb, 0xa, 0xf738]}}]}]}]}, 0xbc4}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 299.024989ms ago: executing program 0 (id=115): r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', './file1', [{0x20, 'GPL\x00'}, {0x20, '@[\'\x81Evt\xd7\x8b\xe5\xd7\x80\x16Fj\xc3\xfaC\x1aA@\x80\xf2D!\'\xa1U\x7f\x97\xaaA\xc1b\xc3\x9d\xe0\xfc\xd1\x0eXf\xa5\x8d:\xcf\xc8\x8f\x1a\xb1\x97X8\xf0\xc7\x9c\xd1\xc3\xb3I!\x99\xe9=\xa7s\x15=\x8cb\xb3\xf7y\xa6\x02u\a>r\xa0D\x04g\x1d\xb1L\xab\x18!E\x86\xa4\xbcc\xa8\a\x00\x00\x00\x00\x00\x00\x00\xe8{\xae\x03\xcdK'}, {0x20, '$'}], 0xa, "282a40376c8b15492c0489121215250d7c5e7e519bac9b494ec1994e1d834f6a07972060422f91e25e321c6b3c5aaf38f93044ae37e4847309839eb44c9a0c314dfe51db858464f3ef3de0c518e25fb174e6443a3f98494aef4ed5d2eac2184fe1c907760eca8a30873e1ce9d795e6fca538775816eec38174099d207f72a4e445ff2501edff29"}, 0x107) ioprio_set$uid(0x0, 0x0, 0x2004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x400080000002) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x61f3ba3fdc8a1c14) mkdir(0x0, 0x10) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x8, &(0x7f00000000c0)={0x0, 0x0}) write(r3, &(0x7f0000000540)="840b249be722ba0638f3ae20bb8b6ed39073301e3f693ef83589f981df30eba3991e543ff86b8b0c27ecf743ce39feb414c43ef1b2a0c66690dae2b10e677011e89265136863007596f54e6c2069f76a04003bd57bfd1c801c100d930104000001c65f26edb54c10a51edada2dc4d7de13b86e4ab65c4f43feee77183df04cd999737516b38dd3fab75a1965825cf2d35876836fc97a35c562a75aaed7b114be8efe2927c63d966d66203395e8410c2353066f20cf30b204c2129df40000000000000000", 0xc4) 207.978488ms ago: executing program 0 (id=116): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 39.299905ms ago: executing program 2 (id=118): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x90) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fcdbdf250100000034000680080006001600000008000300e0000001060001000800000008000700", @ANYRES32=0x0, @ANYBLOB="060000000a000000050002000a000000080004000000000005000500fe0010000800030007000000050005000000000005000500570000000400068004000680"], 0x78}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) fanotify_init(0x0, 0x0) unshare(0x20400) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x40000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404401c}, 0x4048c40) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000be00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000000000002a981e730beeb73a860000000007400000ff2400973341f8378d4470251516a6ac3e578d9d2e60f512c76b6c23d9458579f9000000000000000000ff698a12c130dfbff89415ee90c62e2efe83fb39f86d1db2ff222b164dedfddf2490382cbff47fd9933defa0e9a7a4d76cdda2ee38c37ebf1fbd11f908ae2a64d186ab3471b38575af5ce5c9e9159327e3afdf56239b32775b6b9cb185e6492f6e86b64244bd0000000000000000000000002e26c99c44c09c19bd"], 0x10}}], 0x1, 0x81) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0]}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x4000) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x7]}) 38.705973ms ago: executing program 3 (id=119): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x0, 0x300) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc840, 0x0, 0x0) close(r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000000)) 0s ago: executing program 1 (id=120): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0xc061, 0x6, 0x5f8, 0x120, 0x3f0, 0x3f0, 0x120, 0x0, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0x0, 0xff], [0xff, 0x0, 0xff, 0xffffffff], 'syzkaller1\x00', 'netpci0\x00', {0xff}, {}, 0x1, 0x0, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0xffff, 0x0, 0x2}}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vlan0\x00', 'pimreg1\x00', {}, {}, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d4], 0x6, 0x2, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv6=@dev}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x6}}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'pim6reg1\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x4, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}, 0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) (fail_nth: 6) kernel console output (not intermixed with test programs): [ 76.363576][ T64] cfg80211: failed to load regulatory.db [ 367.493426][ T39] audit: type=1400 audit(1726638780.333:83): avc: denied { read } for pid=4810 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 367.501028][ T39] audit: type=1400 audit(1726638780.333:84): avc: denied { append } for pid=4810 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 367.508754][ T39] audit: type=1400 audit(1726638780.333:85): avc: denied { open } for pid=4810 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 367.516333][ T39] audit: type=1400 audit(1726638780.333:86): avc: denied { getattr } for pid=4810 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:23920' (ED25519) to the list of known hosts. [ 367.758305][ T39] audit: type=1400 audit(1726638780.593:87): avc: denied { name_bind } for pid=5359 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 367.787379][ T39] audit: type=1400 audit(1726638780.623:88): avc: denied { execute } for pid=5361 comm="sh" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 367.794086][ T39] audit: type=1400 audit(1726638780.623:89): avc: denied { execute_no_trans } for pid=5361 comm="sh" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 369.681834][ T39] audit: type=1400 audit(1726638782.513:90): avc: denied { mounton } for pid=5361 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 369.685623][ T5361] cgroup: Unknown subsys name 'net' [ 369.687760][ T39] audit: type=1400 audit(1726638782.523:91): avc: denied { mount } for pid=5361 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 369.696014][ T39] audit: type=1400 audit(1726638782.533:92): avc: denied { unmount } for pid=5361 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 369.833947][ T5361] cgroup: Unknown subsys name 'rlimit' [ 370.067385][ T5365] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 370.817408][ T5361] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 374.098464][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 374.098474][ T39] audit: type=1400 audit(1726638786.933:105): avc: denied { execmem } for pid=5367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 374.733721][ T39] audit: type=1400 audit(1726638787.573:106): avc: denied { mounton } for pid=5371 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 374.750624][ T39] audit: type=1400 audit(1726638787.573:107): avc: denied { mount } for pid=5371 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 374.761063][ T39] audit: type=1400 audit(1726638787.573:108): avc: denied { create } for pid=5371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.775127][ T39] audit: type=1400 audit(1726638787.573:109): avc: denied { read write } for pid=5371 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 374.781306][ T39] audit: type=1400 audit(1726638787.583:110): avc: denied { open } for pid=5371 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 374.787530][ T39] audit: type=1400 audit(1726638787.593:111): avc: denied { ioctl } for pid=5372 comm="syz-executor" path="socket:[721]" dev="sockfs" ino=721 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.810025][ T5377] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.812990][ T5377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.821510][ T5384] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.823779][ T5387] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.826706][ T5384] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.828930][ T5384] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.830392][ T5386] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.831359][ T5384] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.832499][ T5387] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.834653][ T5386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.835791][ T5384] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 374.837957][ T5386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.840334][ T5384] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.842651][ T5386] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.846593][ T5385] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.850099][ T5386] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 374.852361][ T5384] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.854485][ T5386] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.855463][ T39] audit: type=1400 audit(1726638787.683:112): avc: denied { read } for pid=5371 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 374.855493][ T39] audit: type=1400 audit(1726638787.683:113): avc: denied { open } for pid=5371 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 374.855517][ T39] audit: type=1400 audit(1726638787.693:114): avc: denied { mounton } for pid=5371 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 374.856160][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.856879][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.858424][ T5384] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 374.858771][ T5384] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.865149][ T66] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 374.886450][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.148297][ T5371] chnl_net:caif_netlink_parms(): no params data found [ 375.161634][ T5380] chnl_net:caif_netlink_parms(): no params data found [ 375.278536][ T5379] chnl_net:caif_netlink_parms(): no params data found [ 375.372004][ T5372] chnl_net:caif_netlink_parms(): no params data found [ 375.423711][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.425669][ T5371] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.427747][ T5371] bridge_slave_0: entered allmulticast mode [ 375.430106][ T5371] bridge_slave_0: entered promiscuous mode [ 375.436712][ T5371] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.438686][ T5371] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.440788][ T5371] bridge_slave_1: entered allmulticast mode [ 375.443758][ T5371] bridge_slave_1: entered promiscuous mode [ 375.446473][ T5380] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.448499][ T5380] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.450427][ T5380] bridge_slave_0: entered allmulticast mode [ 375.453189][ T5380] bridge_slave_0: entered promiscuous mode [ 375.496428][ T5379] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.498748][ T5379] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.501323][ T5379] bridge_slave_0: entered allmulticast mode [ 375.504009][ T5379] bridge_slave_0: entered promiscuous mode [ 375.560789][ T5380] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.562844][ T5380] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.564832][ T5380] bridge_slave_1: entered allmulticast mode [ 375.567407][ T5380] bridge_slave_1: entered promiscuous mode [ 375.625221][ T5379] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.627480][ T5379] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.629444][ T5379] bridge_slave_1: entered allmulticast mode [ 375.632191][ T5379] bridge_slave_1: entered promiscuous mode [ 375.637103][ T5371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.642870][ T5380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.673604][ T5371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.702374][ T5380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.731897][ T5379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.779588][ T5379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.785838][ T5371] team0: Port device team_slave_0 added [ 375.868786][ T5371] team0: Port device team_slave_1 added [ 375.870763][ T5372] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.872748][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.874657][ T5372] bridge_slave_0: entered allmulticast mode [ 375.877095][ T5372] bridge_slave_0: entered promiscuous mode [ 375.884344][ T5380] team0: Port device team_slave_0 added [ 375.910867][ T5379] team0: Port device team_slave_0 added [ 375.946259][ T5372] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.948349][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.950280][ T5372] bridge_slave_1: entered allmulticast mode [ 375.952718][ T5372] bridge_slave_1: entered promiscuous mode [ 375.956861][ T5380] team0: Port device team_slave_1 added [ 375.978496][ T5379] team0: Port device team_slave_1 added [ 375.981897][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.983869][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.991076][ T5371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.995736][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.997544][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.005265][ T5371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.112177][ T5372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.116123][ T5380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.118730][ T5380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.128131][ T5380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.155393][ T5379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.157041][ T5379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.164039][ T5379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.170676][ T5372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.191996][ T5380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.194661][ T5380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.204187][ T5380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.215775][ T5379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.218359][ T5379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.228202][ T5379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.340079][ T5371] hsr_slave_0: entered promiscuous mode [ 376.343083][ T5371] hsr_slave_1: entered promiscuous mode [ 376.350757][ T5372] team0: Port device team_slave_0 added [ 376.356558][ T5372] team0: Port device team_slave_1 added [ 376.406215][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.408682][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.417791][ T5372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.456977][ T5380] hsr_slave_0: entered promiscuous mode [ 376.459136][ T5380] hsr_slave_1: entered promiscuous mode [ 376.461152][ T5380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.463414][ T5380] Cannot create hsr debugfs directory [ 376.465504][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.467339][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.474082][ T5372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.588644][ T5379] hsr_slave_0: entered promiscuous mode [ 376.591973][ T5379] hsr_slave_1: entered promiscuous mode [ 376.594724][ T5379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.597391][ T5379] Cannot create hsr debugfs directory [ 376.749127][ T5372] hsr_slave_0: entered promiscuous mode [ 376.751992][ T5372] hsr_slave_1: entered promiscuous mode [ 376.757066][ T5372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.759330][ T5372] Cannot create hsr debugfs directory [ 376.923456][ T4767] Bluetooth: hci0: command tx timeout [ 376.932616][ T66] Bluetooth: hci3: command tx timeout [ 376.932647][ T5384] Bluetooth: hci2: command tx timeout [ 376.933414][ T4767] Bluetooth: hci1: command tx timeout [ 377.071200][ T5371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 377.078729][ T5371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 377.083244][ T5371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 377.088489][ T5371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 377.128929][ T5372] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 377.137742][ T5372] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 377.145454][ T5372] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 377.152612][ T5372] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 377.203227][ T5379] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 377.209269][ T5379] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 377.215968][ T5379] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 377.228504][ T5379] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 377.300608][ T5380] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 377.307679][ T5380] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 377.314737][ T5380] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 377.319583][ T5380] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 377.344961][ T5371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.382389][ T5371] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.421799][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.424731][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.436653][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.439093][ T5395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.450227][ T5372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.505536][ T5372] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.509650][ T5379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.531675][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.533682][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.553224][ T5397] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.555756][ T5397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.561360][ T5379] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.568491][ T5380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.584788][ T5416] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.587201][ T5416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.595870][ T5380] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.610313][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.612812][ T5395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.631857][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.634409][ T5395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.641434][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.644122][ T5395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.733765][ T5371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.790424][ T5371] veth0_vlan: entered promiscuous mode [ 377.798177][ T5371] veth1_vlan: entered promiscuous mode [ 377.825941][ T5371] veth0_macvtap: entered promiscuous mode [ 377.837546][ T5371] veth1_macvtap: entered promiscuous mode [ 377.859125][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.864127][ T5380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.874595][ T5372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.879370][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.889577][ T5371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.892589][ T5371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.895437][ T5371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.897882][ T5371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.935974][ T5379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.978897][ T5380] veth0_vlan: entered promiscuous mode [ 378.008712][ T5372] veth0_vlan: entered promiscuous mode [ 378.015420][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.017549][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.022986][ T5380] veth1_vlan: entered promiscuous mode [ 378.034337][ T5372] veth1_vlan: entered promiscuous mode [ 378.066958][ T5379] veth0_vlan: entered promiscuous mode [ 378.083431][ T5436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.085636][ T5436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.087303][ T5379] veth1_vlan: entered promiscuous mode [ 378.107255][ T5380] veth0_macvtap: entered promiscuous mode [ 378.118840][ T5380] veth1_macvtap: entered promiscuous mode [ 378.126673][ T5372] veth0_macvtap: entered promiscuous mode [ 378.140696][ T5372] veth1_macvtap: entered promiscuous mode [ 378.154899][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.158614][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.165655][ T5380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.179461][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.185978][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.189580][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.193833][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.198882][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.205946][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.208677][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.214603][ T5380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.249341][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.254305][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.257527][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.261671][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.267535][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.279235][ T5380] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.283730][ T5380] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.286842][ T5380] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.289836][ T5380] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.298548][ T5442] mmap: syz.0.1 (5442) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 378.304820][ T5379] veth0_macvtap: entered promiscuous mode [ 378.313394][ T5372] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.316390][ T5372] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.319341][ T5372] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.325445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 378.328393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 378.331263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 378.336330][ T5372] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.361977][ T5379] veth1_macvtap: entered promiscuous mode [ 378.425368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 378.440715][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.443604][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.445754][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.446304][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.448565][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.451088][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.457477][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.460482][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.464272][ T5379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.508379][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.513669][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.517186][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.520737][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.526642][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.530161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 378.533790][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.662760][ T5379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.763274][ T5379] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.779092][ T5379] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.789266][ T5379] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.798243][ T5379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.973549][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.975815][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.010496][ T5397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.016137][ T5397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.017881][ T5384] Bluetooth: hci3: command tx timeout [ 379.021541][ T66] Bluetooth: hci2: command tx timeout [ 379.021553][ T4767] Bluetooth: hci1: command tx timeout [ 379.021567][ T5378] Bluetooth: hci0: command tx timeout [ 379.032652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 379.034751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 379.039663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 379.068098][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.071254][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.115741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 379.123353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 379.200833][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.204867][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.207653][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 379.207663][ T39] audit: type=1400 audit(1726638792.043:133): avc: denied { write } for pid=5447 comm="syz.1.2" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 379.223134][ T39] audit: type=1400 audit(1726638792.043:134): avc: denied { open } for pid=5447 comm="syz.1.2" path="/dev/sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 379.231285][ T5395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.233972][ T5395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.265256][ T5450] openvswitch: netlink: Missing key (keys=8040, expected=200000) [ 379.283164][ T5433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.285643][ T5433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.301660][ T39] audit: type=1400 audit(1726638792.133:135): avc: denied { create } for pid=5451 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 379.311768][ T39] audit: type=1400 audit(1726638792.143:136): avc: denied { write } for pid=5451 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 379.331957][ T39] audit: type=1400 audit(1726638792.163:137): avc: denied { create } for pid=5453 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 379.342611][ T39] audit: type=1400 audit(1726638792.163:138): avc: denied { connect } for pid=5453 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 379.345309][ T5452] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 379.348574][ T39] audit: type=1400 audit(1726638792.163:139): avc: denied { create } for pid=5451 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 379.353369][ T5452] Zero length message leads to an empty skb [ 379.359741][ T39] audit: type=1400 audit(1726638792.163:140): avc: denied { create } for pid=5451 comm="syz.2.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 379.367004][ T39] audit: type=1400 audit(1726638792.163:141): avc: denied { map } for pid=5451 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 379.374700][ T39] audit: type=1400 audit(1726638792.163:142): avc: denied { read write } for pid=5451 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 379.388374][ T5460] fuse: Bad value for 'rootmode' [ 379.400633][ T5460] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 379.464424][ T5459] [U] J"—E:ÀÆ" [ 379.593228][ T5467] syzkaller1: entered promiscuous mode [ 379.594721][ T5467] syzkaller1: entered allmulticast mode [ 379.620713][ T5466] syzkaller1: entered promiscuous mode [ 379.624323][ T5466] syzkaller1: entered allmulticast mode [ 380.369453][ T5471] capability: warning: `syz.3.10' uses 32-bit capabilities (legacy support in use) [ 381.082993][ T5378] Bluetooth: hci0: command tx timeout [ 381.083244][ T5384] Bluetooth: hci3: command tx timeout [ 381.084518][ T5378] Bluetooth: hci2: command tx timeout [ 381.085900][ T5384] Bluetooth: hci1: command tx timeout [ 381.954912][ T5484] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 382.446215][ T5500] capability: warning: `syz.2.14' uses deprecated v2 capabilities in a way that may be insecure [ 382.762001][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 382.861152][ T5502] serio: Serial port pts0 [ 382.870725][ T5502] serio: Serial port pts0 [ 383.172225][ T5384] Bluetooth: hci1: command tx timeout [ 383.174228][ T5384] Bluetooth: hci2: command tx timeout [ 383.176221][ T5384] Bluetooth: hci3: command tx timeout [ 383.176809][ T5378] Bluetooth: hci0: command tx timeout [ 383.688000][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 383.817248][ T5518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20'. [ 383.992586][ T5522] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21'. [ 384.735333][ T39] kauditd_printk_skb: 71 callbacks suppressed [ 384.735348][ T39] audit: type=1400 audit(1726638797.573:214): avc: denied { watch watch_reads } for pid=5531 comm="syz.3.23" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 384.752811][ T39] audit: type=1400 audit(1726638797.593:215): avc: denied { map_read map_write } for pid=5533 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 384.759845][ T39] audit: type=1400 audit(1726638797.593:216): avc: denied { create } for pid=5531 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 384.765752][ T39] audit: type=1400 audit(1726638797.593:217): avc: denied { listen } for pid=5531 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 384.773226][ T39] audit: type=1400 audit(1726638797.593:218): avc: denied { ioctl } for pid=5531 comm="syz.3.23" path="socket:[7915]" dev="sockfs" ino=7915 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 384.781878][ T39] audit: type=1400 audit(1726638797.603:219): avc: denied { mount } for pid=5533 comm="syz.0.24" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 384.787945][ T39] audit: type=1400 audit(1726638797.613:220): avc: denied { unmount } for pid=5533 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 384.794476][ T39] audit: type=1400 audit(1726638797.623:221): avc: denied { create } for pid=5537 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 384.799482][ T39] audit: type=1400 audit(1726638797.623:222): avc: denied { ioctl } for pid=5537 comm="syz.2.25" path="socket:[8485]" dev="sockfs" ino=8485 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 384.815231][ T5526] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 384.817748][ T5526] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 384.826865][ T5526] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 384.831102][ T5526] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 384.833336][ T5526] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 384.836492][ T5526] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 384.842914][ T5526] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 384.845125][ T5526] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 384.849715][ T5526] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 384.859111][ T5526] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 384.861233][ T5526] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 384.864816][ T39] audit: type=1400 audit(1726638797.703:223): avc: denied { write } for pid=5537 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 384.871548][ T5526] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 385.000936][ T5538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.25'. [ 385.254044][ T5542] Bluetooth: MGMT ver 1.23 [ 385.412997][ T5534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24'. [ 385.761133][ T5559] FAULT_INJECTION: forcing a failure. [ 385.761133][ T5559] name failslab, interval 1, probability 0, space 0, times 1 [ 385.767784][ T5559] CPU: 2 UID: 0 PID: 5559 Comm: syz.2.30 Not tainted 6.11.0-syzkaller-03917-ga940d9a43e62 #0 [ 385.771403][ T5559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 385.775062][ T5559] Call Trace: [ 385.776305][ T5559] [ 385.777408][ T5559] dump_stack_lvl+0x16c/0x1f0 [ 385.779113][ T5559] should_fail_ex+0x497/0x5b0 [ 385.780858][ T5559] ? fs_reclaim_acquire+0xae/0x160 [ 385.782726][ T5559] should_failslab+0xc2/0x120 [ 385.784453][ T5559] __kmalloc_cache_node_noprof+0x6e/0x350 [ 385.786517][ T5559] ? __get_vm_area_node+0xe1/0x2d0 [ 385.788309][ T5559] __get_vm_area_node+0xe1/0x2d0 [ 385.790044][ T5559] __vmalloc_node_range_noprof+0x270/0x14e0 [ 385.792191][ T5559] ? xt_copy_counters+0x359/0x660 [ 385.794169][ T5559] ? find_held_lock+0x2d/0x110 [ 385.795907][ T5559] ? xt_copy_counters+0x359/0x660 [ 385.797750][ T5559] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 385.800057][ T5559] ? __pfx___might_resched+0x10/0x10 [ 385.801992][ T5559] ? __might_fault+0xe3/0x190 [ 385.803706][ T5559] ? xt_copy_counters+0x359/0x660 [ 385.805535][ T5559] vmalloc_noprof+0x6b/0x90 [ 385.807228][ T5559] ? xt_copy_counters+0x359/0x660 [ 385.809076][ T5559] xt_copy_counters+0x359/0x660 [ 385.810847][ T5559] ? __pfx_xt_copy_counters+0x10/0x10 [ 385.812783][ T5559] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 385.815035][ T5559] ? cap_capable+0x1cf/0x240 [ 385.816644][ T5559] ? bpf_lsm_capable+0x9/0x10 [ 385.818466][ T5559] ? security_capable+0x7e/0x260 [ 385.820415][ T5559] do_ipt_set_ctl+0x1c0/0xc30 [ 385.822034][ T5559] ? trace_contention_end+0xea/0x140 [ 385.823550][ T5559] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 385.824973][ T5559] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 385.826851][ T5559] ? trace_contention_end+0xea/0x140 [ 385.828772][ T5559] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 385.830938][ T5559] nf_setsockopt+0x8a/0xf0 [ 385.832581][ T5559] ip_setsockopt+0xcb/0xf0 [ 385.834220][ T5559] tcp_setsockopt+0xa4/0x100 [ 385.835917][ T5559] smc_setsockopt+0x1b4/0xa00 [ 385.837649][ T5559] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 385.839863][ T5559] ? __pfx_smc_setsockopt+0x10/0x10 [ 385.841793][ T5559] ? selinux_socket_setsockopt+0x6a/0x80 [ 385.843859][ T5559] ? __pfx_smc_setsockopt+0x10/0x10 [ 385.845729][ T5559] do_sock_setsockopt+0x222/0x480 [ 385.847578][ T5559] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 385.849602][ T5559] ? __fget_files+0x244/0x3f0 [ 385.851325][ T5559] ? __fget_light+0x173/0x210 [ 385.853012][ T5559] __sys_setsockopt+0x1a4/0x270 [ 385.854788][ T5559] ? __pfx___sys_setsockopt+0x10/0x10 [ 385.856709][ T5559] ? fput+0x30/0x390 [ 385.858126][ T5559] ? ksys_write+0x1ab/0x260 [ 385.859368][ T5559] ? __pfx_ksys_write+0x10/0x10 [ 385.860717][ T5559] __x64_sys_setsockopt+0xbd/0x160 [ 385.862112][ T5559] ? do_syscall_64+0x91/0x250 [ 385.863433][ T5559] ? lockdep_hardirqs_on+0x7c/0x110 [ 385.865195][ T5559] do_syscall_64+0xcd/0x250 [ 385.866923][ T5559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.868736][ T5559] RIP: 0033:0x7f36e5f7def9 [ 385.869950][ T5559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.875230][ T5559] RSP: 002b:00007f36e6d3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 385.877447][ T5559] RAX: ffffffffffffffda RBX: 00007f36e6135f80 RCX: 00007f36e5f7def9 [ 385.879581][ T5559] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 385.881820][ T5559] RBP: 00007f36e6d3a090 R08: 0000000000000048 R09: 0000000000000000 [ 385.884046][ T5559] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000001 [ 385.886184][ T5559] R13: 0000000000000000 R14: 00007f36e6135f80 R15: 00007fff6f7eed88 [ 385.888354][ T5559] [ 385.891438][ T5559] syz.2.30: vmalloc error: size 32, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 385.897142][ T5559] CPU: 2 UID: 0 PID: 5559 Comm: syz.2.30 Not tainted 6.11.0-syzkaller-03917-ga940d9a43e62 #0 [ 385.900321][ T5559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 385.903275][ T5559] Call Trace: [ 385.904214][ T5559] [ 385.905029][ T5559] dump_stack_lvl+0x16c/0x1f0 [ 385.906493][ T5559] warn_alloc+0x24d/0x3a0 [ 385.908040][ T5559] ? __pfx_warn_alloc+0x10/0x10 [ 385.909583][ T5559] ? fs_reclaim_acquire+0xae/0x160 [ 385.911166][ T5559] ? trace_kmalloc+0x2d/0xe0 [ 385.912705][ T5559] ? __kasan_kmalloc+0x8a/0xb0 [ 385.914138][ T5559] ? __get_vm_area_node+0x1bc/0x2d0 [ 385.915832][ T5559] __vmalloc_node_range_noprof+0xc0d/0x14e0 [ 385.917825][ T5559] ? find_held_lock+0x2d/0x110 [ 385.919403][ T5559] ? xt_copy_counters+0x359/0x660 [ 385.921065][ T5559] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 385.923050][ T5559] ? __pfx___might_resched+0x10/0x10 [ 385.924514][ T5559] ? __might_fault+0xe3/0x190 [ 385.925785][ T5559] ? xt_copy_counters+0x359/0x660 [ 385.927142][ T5559] vmalloc_noprof+0x6b/0x90 [ 385.928627][ T5559] ? xt_copy_counters+0x359/0x660 [ 385.930128][ T5559] xt_copy_counters+0x359/0x660 [ 385.931475][ T5559] ? __pfx_xt_copy_counters+0x10/0x10 [ 385.932966][ T5559] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 385.934717][ T5559] ? cap_capable+0x1cf/0x240 [ 385.936098][ T5559] ? bpf_lsm_capable+0x9/0x10 [ 385.937399][ T5559] ? security_capable+0x7e/0x260 [ 385.938642][ T5559] do_ipt_set_ctl+0x1c0/0xc30 [ 385.939984][ T5559] ? trace_contention_end+0xea/0x140 [ 385.941580][ T5559] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 385.943000][ T5559] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 385.944468][ T5559] ? trace_contention_end+0xea/0x140 [ 385.945931][ T5559] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 385.947695][ T5559] nf_setsockopt+0x8a/0xf0 [ 385.949034][ T5559] ip_setsockopt+0xcb/0xf0 [ 385.950631][ T5559] tcp_setsockopt+0xa4/0x100 [ 385.952323][ T5559] smc_setsockopt+0x1b4/0xa00 [ 385.953720][ T5559] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 385.955552][ T5559] ? __pfx_smc_setsockopt+0x10/0x10 [ 385.957437][ T5559] ? selinux_socket_setsockopt+0x6a/0x80 [ 385.959389][ T5559] ? __pfx_smc_setsockopt+0x10/0x10 [ 385.961264][ T5559] do_sock_setsockopt+0x222/0x480 [ 385.963054][ T5559] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 385.964848][ T5559] ? __fget_files+0x244/0x3f0 [ 385.966462][ T5559] ? __fget_light+0x173/0x210 [ 385.968180][ T5559] __sys_setsockopt+0x1a4/0x270 [ 385.970020][ T5559] ? __pfx___sys_setsockopt+0x10/0x10 [ 385.971977][ T5559] ? fput+0x30/0x390 [ 385.973257][ T5559] ? ksys_write+0x1ab/0x260 [ 385.974741][ T5559] ? __pfx_ksys_write+0x10/0x10 [ 385.976512][ T5559] __x64_sys_setsockopt+0xbd/0x160 [ 385.978343][ T5559] ? do_syscall_64+0x91/0x250 [ 385.979941][ T5559] ? lockdep_hardirqs_on+0x7c/0x110 [ 385.981784][ T5559] do_syscall_64+0xcd/0x250 [ 385.983411][ T5559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.985508][ T5559] RIP: 0033:0x7f36e5f7def9 [ 385.987104][ T5559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.993598][ T5559] RSP: 002b:00007f36e6d3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 385.996111][ T5559] RAX: ffffffffffffffda RBX: 00007f36e6135f80 RCX: 00007f36e5f7def9 [ 385.998296][ T5559] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 386.000417][ T5559] RBP: 00007f36e6d3a090 R08: 0000000000000048 R09: 0000000000000000 [ 386.002920][ T5559] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000001 [ 386.005190][ T5559] R13: 0000000000000000 R14: 00007f36e6135f80 R15: 00007fff6f7eed88 [ 386.007584][ T5559] [ 386.012263][ T5559] Mem-Info: [ 386.013432][ T5559] active_anon:11920 inactive_anon:0 isolated_anon:0 [ 386.013432][ T5559] active_file:1595 inactive_file:38334 isolated_file:0 [ 386.013432][ T5559] unevictable:1777 dirty:485 writeback:0 [ 386.013432][ T5559] slab_reclaimable:11262 slab_unreclaimable:64625 [ 386.013432][ T5559] mapped:17541 shmem:2295 pagetables:628 [ 386.013432][ T5559] sec_pagetables:312 bounce:0 [ 386.013432][ T5559] kernel_misc_reclaimable:0 [ 386.013432][ T5559] free:506417 free_pcp:4753 free_cma:0 [ 386.029249][ T5559] Node 0 active_anon:49168kB inactive_anon:0kB active_file:6380kB inactive_file:153256kB unevictable:3572kB isolated(anon):0kB isolated(file):0kB mapped:70164kB dirty:1932kB writeback:0kB shmem:5644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10832kB pagetables:2512kB sec_pagetables:1248kB all_unreclaimable? no [ 386.040714][ T5559] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 386.051830][ T5559] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.060790][ T5559] lowmem_reserve[]: 0 1218 0 0 0 [ 386.062657][ T5559] Node 0 DMA32 free:368716kB boost:0kB min:27696kB low:34620kB high:41544kB reserved_highatomic:0KB active_anon:49168kB inactive_anon:0kB active_file:6628kB inactive_file:153256kB unevictable:3572kB writepending:1932kB present:2080628kB managed:1274744kB mlocked:36kB bounce:0kB free_pcp:16576kB local_pcp:260kB free_cma:0kB [ 386.072846][ T5559] lowmem_reserve[]: 0 0 0 0 0 [ 386.074620][ T5559] Node 1 Normal free:1640104kB boost:0kB min:39540kB low:49424kB high:59308kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:2068kB local_pcp:0kB free_cma:0kB [ 386.084653][ T5559] lowmem_reserve[]: 0 0 0 0 0 [ 386.086397][ T5559] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 386.090944][ T5559] Node 0 DMA32: 89*4kB (UE) 162*8kB (U) 167*16kB (UM) 311*32kB (UME) 95*64kB (UME) 37*128kB (UME) 60*256kB (UME) 41*512kB (UME) 36*1024kB (ME) 12*2048kB (ME) 60*4096kB (ME) = 368644kB [ 386.098103][ T5559] Node 1 Normal: 0*4kB 3*8kB (UM) 3*16kB (M) 1*32kB (M) 3*64kB (M) 3*128kB (M) 0*256kB 4*512kB (UM) 1*1024kB (U) 3*2048kB (UM) 398*4096kB (M) = 1640104kB [ 386.103947][ T5559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.109533][ T5559] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.114228][ T5559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.114679][ T5573] warning: `syz.0.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 386.121355][ T5559] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.122628][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 386.126416][ T5559] 42303 total pagecache pages [ 386.127633][ T5559] 0 pages in swap cache [ 386.129165][ T5559] Free swap = 124996kB [ 386.130621][ T5559] Total swap = 124996kB [ 386.131924][ T5559] 1048443 pages RAM [ 386.135210][ T5559] 0 pages HighMem/MovableOnly [ 386.136936][ T5559] 280436 pages reserved [ 386.138339][ T5559] 0 pages cma reserved [ 386.196849][ T5577] syz.3.36 uses obsolete (PF_INET,SOCK_PACKET) [ 386.844233][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 386.922435][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 386.922470][ T5378] Bluetooth: hci2: command 0x0c1a tx timeout [ 387.206684][ T5615] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 387.208856][ T5610] sp0: Synchronizing with TNC [ 387.225568][ T5378] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 387.313961][ T5619] netlink: 892 bytes leftover after parsing attributes in process `syz.2.46'. [ 387.390480][ T5621] FAULT_INJECTION: forcing a failure. [ 387.390480][ T5621] name failslab, interval 1, probability 0, space 0, times 0 [ 387.395304][ T5621] CPU: 1 UID: 0 PID: 5621 Comm: syz.1.44 Not tainted 6.11.0-syzkaller-03917-ga940d9a43e62 #0 [ 387.398744][ T5621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 387.401749][ T5621] Call Trace: [ 387.402698][ T5621] [ 387.403512][ T5621] dump_stack_lvl+0x16c/0x1f0 [ 387.405192][ T5621] should_fail_ex+0x497/0x5b0 [ 387.406853][ T5621] ? fs_reclaim_acquire+0xae/0x160 [ 387.408660][ T5621] should_failslab+0xc2/0x120 [ 387.410334][ T5621] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 387.412338][ T5621] ? __d_alloc+0x31/0xaa0 [ 387.413867][ T5621] __d_alloc+0x31/0xaa0 [ 387.415070][ T5621] ? ktime_get_coarse_real_ts64+0x1b7/0x200 [ 387.416741][ T5621] d_alloc_pseudo+0x1c/0xc0 [ 387.418061][ T5621] alloc_file_pseudo+0xdc/0x210 [ 387.419615][ T5621] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 387.421186][ T5621] ioctx_alloc+0x596/0x1fc0 [ 387.422501][ T5621] ? irqentry_exit+0x3b/0x90 [ 387.423789][ T5621] ? __pfx_ioctx_alloc+0x10/0x10 [ 387.425280][ T5621] ? __x64_sys_io_setup+0x6b/0x210 [ 387.426755][ T5621] __x64_sys_io_setup+0xc9/0x210 [ 387.428201][ T5621] do_syscall_64+0xcd/0x250 [ 387.429511][ T5621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.431282][ T5621] RIP: 0033:0x7f8f4357def9 [ 387.432757][ T5621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.438126][ T5621] RSP: 002b:00007f8f44319038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 387.440412][ T5621] RAX: ffffffffffffffda RBX: 00007f8f43736130 RCX: 00007f8f4357def9 [ 387.442490][ T5621] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000008 [ 387.444570][ T5621] RBP: 00007f8f44319090 R08: 0000000000000000 R09: 0000000000000000 [ 387.446627][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.448725][ T5621] R13: 0000000000000000 R14: 00007f8f43736130 R15: 00007ffe4e9c7fc8 [ 387.450798][ T5621] [ 387.451655][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.867039][ T5635] overlayfs: missing 'lowerdir' [ 387.914836][ T5640] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 388.741129][ T5656] FAULT_INJECTION: forcing a failure. [ 388.741129][ T5656] name failslab, interval 1, probability 0, space 0, times 0 [ 388.745745][ T5656] CPU: 0 UID: 0 PID: 5656 Comm: syz.1.58 Not tainted 6.11.0-syzkaller-03917-ga940d9a43e62 #0 [ 388.749001][ T5656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 388.752408][ T5656] Call Trace: [ 388.753439][ T5656] [ 388.754229][ T5656] dump_stack_lvl+0x16c/0x1f0 [ 388.755764][ T5656] should_fail_ex+0x497/0x5b0 [ 388.757172][ T5656] ? fs_reclaim_acquire+0xae/0x160 [ 388.758883][ T5656] should_failslab+0xc2/0x120 [ 388.760336][ T5656] __kmalloc_node_noprof+0xd1/0x430 [ 388.761823][ T5656] ? lockdep_init_map_type+0x16d/0x7d0 [ 388.763593][ T5656] ? __kvmalloc_node_noprof+0x9d/0x1a0 [ 388.765577][ T5656] __kvmalloc_node_noprof+0x9d/0x1a0 [ 388.767427][ T5656] open_substream+0x30c/0x9b0 [ 388.769432][ T5656] rawmidi_open_priv+0x542/0x6e0 [ 388.771390][ T5656] snd_rawmidi_open+0x4bf/0xbd0 [ 388.773246][ T5656] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 388.775012][ T5656] ? __pfx_lock_release+0x10/0x10 [ 388.776809][ T5656] ? __pfx_default_wake_function+0x10/0x10 [ 388.778869][ T5656] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 388.780757][ T5656] ? __pfx_lock_release+0x10/0x10 [ 388.782367][ T5656] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 388.784269][ T5656] soundcore_open+0x409/0x580 [ 388.785931][ T5656] ? __pfx_soundcore_open+0x10/0x10 [ 388.788014][ T5656] chrdev_open+0x237/0x6a0 [ 388.790031][ T5656] ? __pfx_chrdev_open+0x10/0x10 [ 388.791777][ T5656] ? security_file_open+0x62a/0x9d0 [ 388.793669][ T5656] do_dentry_open+0x6ca/0x1530 [ 388.795324][ T5656] ? __pfx_chrdev_open+0x10/0x10 [ 388.796921][ T5656] ? inode_permission+0xdd/0x5f0 [ 388.798646][ T5656] vfs_open+0x82/0x3f0 [ 388.800025][ T5656] ? may_open+0x1f2/0x400 [ 388.801567][ T5656] path_openat+0x1e6a/0x2d60 [ 388.803114][ T5656] ? __pfx_path_openat+0x10/0x10 [ 388.804885][ T5656] ? __pfx___lock_acquire+0x10/0x10 [ 388.806717][ T5656] ? find_held_lock+0x2d/0x110 [ 388.808696][ T5656] do_filp_open+0x1dc/0x430 [ 388.810376][ T5656] ? __pfx_do_filp_open+0x10/0x10 [ 388.812193][ T5656] ? find_held_lock+0x2d/0x110 [ 388.813811][ T5656] ? _raw_spin_unlock+0x28/0x50 [ 388.815530][ T5656] ? alloc_fd+0x2d7/0x6c0 [ 388.816962][ T5656] do_sys_openat2+0x17a/0x1e0 [ 388.818631][ T5656] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.820400][ T5656] __x64_sys_openat+0x175/0x210 [ 388.822139][ T5656] ? __pfx___x64_sys_openat+0x10/0x10 [ 388.824071][ T5656] ? ksys_write+0x1ab/0x260 [ 388.825770][ T5656] do_syscall_64+0xcd/0x250 [ 388.827263][ T5656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.829268][ T5656] RIP: 0033:0x7f8f4357c890 [ 388.830782][ T5656] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 388.837244][ T5656] RSP: 002b:00007f8f4435ab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 388.840033][ T5656] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8f4357c890 [ 388.842717][ T5656] RDX: 0000000000000002 RSI: 00007f8f4435ac10 RDI: 00000000ffffff9c [ 388.845413][ T5656] RBP: 00007f8f4435ac10 R08: 0000000000000000 R09: 00236964696d6d64 [ 388.848087][ T5656] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 388.850721][ T5656] R13: 0000000000000000 R14: 00007f8f43735f80 R15: 00007ffe4e9c7fc8 [ 388.854037][ T5656] [ 388.922197][ T5378] Bluetooth: hci0: command 0x0c1a tx timeout [ 388.960378][ T5672] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 389.002652][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 389.012212][ T5378] Bluetooth: hci3: command 0x0405 tx timeout [ 389.015793][ T5378] Bluetooth: hci2: command 0x0c1a tx timeout [ 389.275462][ T5684] Invalid logical block size (1) [ 389.742182][ T5439] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 389.902160][ T5439] usb 5-1: Using ep0 maxpacket: 8 [ 389.907620][ T5439] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 389.910703][ T5439] usb 5-1: config 179 has no interface number 0 [ 389.922141][ T5439] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 389.926078][ T5439] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 389.930232][ T5439] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 389.933249][ T5439] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 389.937871][ T5439] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 389.940719][ T5439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.975248][ T5696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 390.180813][ T5700] netlink: 'syz.1.71': attribute type 13 has an invalid length. [ 390.210104][ T5439] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input5 [ 390.236427][ T39] kauditd_printk_skb: 115 callbacks suppressed [ 390.236438][ T39] audit: type=1400 audit(1726638803.073:339): avc: denied { read } for pid=4813 comm="acpid" name="js0" dev="devtmpfs" ino=2395 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 390.246075][ T39] audit: type=1400 audit(1726638803.073:340): avc: denied { open } for pid=4813 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2395 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 390.254063][ T39] audit: type=1400 audit(1726638803.073:341): avc: denied { ioctl } for pid=4813 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2395 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 390.312365][ T5705] netlink: 'syz.1.72': attribute type 14 has an invalid length. [ 390.449439][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 390.449767][ T5348] usb 5-1: USB disconnect, device number 2 [ 390.454953][ T5348] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 390.482160][ T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 390.632280][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 390.638456][ T30] usb 7-1: config 0 has no interfaces? [ 390.646356][ T30] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 390.650133][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.653435][ T30] usb 7-1: Product: syz [ 390.654973][ T30] usb 7-1: Manufacturer: syz [ 390.656752][ T30] usb 7-1: SerialNumber: syz [ 390.665547][ T30] usb 7-1: config 0 descriptor?? [ 390.669680][ T39] audit: type=1400 audit(1726638803.503:342): avc: denied { ioctl } for pid=5708 comm="syz.3.75" path="socket:[10320]" dev="sockfs" ino=10320 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 390.875258][ T39] audit: type=1400 audit(1726638803.713:343): avc: denied { create } for pid=5703 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 390.880224][ T39] audit: type=1400 audit(1726638803.713:344): avc: denied { read } for pid=5703 comm="syz.2.73" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 390.887480][ T39] audit: type=1400 audit(1726638803.723:345): avc: denied { execute } for pid=5703 comm="syz.2.73" path="/21/cpu.stat" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 390.891829][ T5424] usb 7-1: USB disconnect, device number 2 [ 391.002305][ T5378] Bluetooth: hci0: command 0x0c1a tx timeout [ 391.050646][ T39] audit: type=1400 audit(1726638803.883:346): avc: denied { connect } for pid=5711 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 391.092213][ T5378] Bluetooth: hci2: command 0x0c1a tx timeout [ 391.093604][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 391.127529][ T39] audit: type=1400 audit(1726638803.963:347): avc: denied { read } for pid=5711 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 391.421746][ T39] audit: type=1400 audit(1726638804.253:348): avc: denied { name_bind } for pid=5717 comm="syz.1.77" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 393.104246][ T5419] libceph: connect (1)[c::]:6789 error -101 [ 393.107473][ T5419] libceph: mon0 (1)[c::]:6789 connect error [ 393.114570][ T5419] libceph: connect (1)[c::]:6789 error -101 [ 393.117205][ T5419] libceph: mon0 (1)[c::]:6789 connect error [ 393.367199][ T5769] syzkaller1: entered promiscuous mode [ 393.369194][ T5769] syzkaller1: entered allmulticast mode [ 393.373662][ T5419] libceph: connect (1)[c::]:6789 error -101 [ 393.375607][ T5419] libceph: mon0 (1)[c::]:6789 connect error [ 393.884011][ T5419] libceph: connect (1)[c::]:6789 error -101 [ 393.885779][ T5419] libceph: mon0 (1)[c::]:6789 connect error [ 393.994140][ T5756] ceph: No mds server is up or the cluster is laggy [ 394.306461][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 394.752324][ T5808] veth0_vlan: left promiscuous mode [ 394.755002][ T5808] veth0_vlan: entered promiscuous mode [ 395.135530][ T5820] syzkaller1: entered promiscuous mode [ 395.137633][ T5820] syzkaller1: entered allmulticast mode [ 395.402300][ T30] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 395.572353][ T5445] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 395.577770][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 395.580720][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.583400][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 395.586950][ T30] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 395.589370][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.593478][ T30] usb 5-1: config 0 descriptor?? [ 395.736242][ T5445] usb 7-1: config 1 interface 0 has no altsetting 0 [ 395.740404][ T5445] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 395.742962][ T5445] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.745522][ T5445] usb 7-1: Product: syz [ 395.746681][ T5445] usb 7-1: Manufacturer: syz [ 395.747980][ T5445] usb 7-1: SerialNumber: syz [ 396.005965][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.008252][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.010452][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.014800][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.018342][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.021241][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.024173][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.026774][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.029322][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.031909][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.035151][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.038549][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.040738][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.046916][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.048992][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 396.053859][ T30] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 396.064730][ T30] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 396.077451][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 396.077461][ T39] audit: type=1400 audit(1726638808.913:371): avc: denied { getopt } for pid=5833 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 396.296718][ T5439] usb 5-1: USB disconnect, device number 3 [ 396.360211][ T5445] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 396.980669][ T5851] snd_dummy snd_dummy.0: control 0:0:0:syz1:255 is already present [ 397.292143][ T5348] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 397.442244][ T5348] usb 6-1: Using ep0 maxpacket: 32 [ 397.447415][ T5348] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=10.fe [ 397.450331][ T5348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.453345][ T5348] usb 6-1: Product: syz [ 397.455218][ T5348] usb 6-1: Manufacturer: syz [ 397.456984][ T5348] usb 6-1: SerialNumber: syz [ 397.460780][ T5348] usb 6-1: config 0 descriptor?? [ 397.465689][ T5348] ati_remote2 6-1:0.0: ati_remote2_probe(): interface 0 must have an endpoint [ 397.683448][ T5856] syz.1.113[5856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.683524][ T5856] syz.1.113[5856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.688166][ T39] audit: type=1400 audit(1726638810.523:372): avc: denied { write } for pid=5855 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 397.698818][ T39] audit: type=1400 audit(1726638810.523:373): avc: denied { nlmsg_write } for pid=5855 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 397.708021][ T5348] usb 6-1: USB disconnect, device number 2 [ 397.946313][ T39] audit: type=1400 audit(1726638810.783:374): avc: denied { accept } for pid=5861 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 397.955126][ T39] audit: type=1400 audit(1726638810.793:375): avc: denied { create } for pid=5861 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 398.176630][ T30] usb 7-1: USB disconnect, device number 3 [ 398.190108][ T30] usblp0: removed [ 398.307039][ T5874] Cannot find map_set index 0 as target [ 398.308582][ T5874] FAULT_INJECTION: forcing a failure. [ 398.308582][ T5874] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 398.308632][ T5874] [ 398.308636][ T5874] ====================================================== [ 398.308638][ T5874] WARNING: possible circular locking dependency detected [ 398.308642][ T5874] 6.11.0-syzkaller-03917-ga940d9a43e62 #0 Not tainted [ 398.308646][ T5874] ------------------------------------------------------ [ 398.308649][ T5874] syz.1.120/5874 is trying to acquire lock: [ 398.308654][ T5874] ffffffff8dda88d8 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0x12/0x70 [ 398.308679][ T5874] [ 398.308679][ T5874] but task is already holding lock: [ 398.308681][ T5874] ffff88806a63eb98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 398.308705][ T5874] [ 398.308705][ T5874] which lock already depends on the new lock. [ 398.308705][ T5874] [ 398.308707][ T5874] [ 398.308707][ T5874] the existing dependency chain (in reverse order) is: [ 398.308709][ T5874] [ 398.308709][ T5874] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 398.308720][ T5874] _raw_spin_lock_nested+0x31/0x40 [ 398.308728][ T5874] raw_spin_rq_lock_nested+0x29/0x130 [ 398.308740][ T5874] task_fork_fair+0x73/0x250 [ 398.308751][ T5874] sched_cgroup_fork+0x3cf/0x510 [ 398.308760][ T5874] copy_process+0x439b/0x8dd0 [ 398.308770][ T5874] kernel_clone+0xfd/0x960 [ 398.308779][ T5874] user_mode_thread+0xb4/0xf0 [ 398.308788][ T5874] rest_init+0x23/0x2b0 [ 398.308798][ T5874] start_kernel+0x3e4/0x4d0 [ 398.308808][ T5874] x86_64_start_reservations+0x18/0x30 [ 398.308818][ T5874] x86_64_start_kernel+0xb2/0xc0 [ 398.308826][ T5874] common_startup_64+0x13e/0x148 [ 398.308835][ T5874] [ 398.308835][ T5874] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 398.308845][ T5874] _raw_spin_lock_irqsave+0x3a/0x60 [ 398.308853][ T5874] try_to_wake_up+0x9a/0x13e0 [ 398.308864][ T5874] up+0x79/0xb0 [ 398.308873][ T5874] __up_console_sem+0x85/0xe0 [ 398.308885][ T5874] console_unlock+0x1dc/0x210 [ 398.308893][ T5874] vga_remove_vgacon+0x90/0xd0 [ 398.308901][ T5874] aperture_remove_conflicting_pci_devices+0x16a/0x1e0 [ 398.308913][ T5874] virtio_gpu_probe+0x408/0x4e0 [ 398.308928][ T5874] virtio_dev_probe+0x586/0x8a0 [ 398.308939][ T5874] really_probe+0x23e/0xa90 [ 398.308947][ T5874] __driver_probe_device+0x1de/0x440 [ 398.308955][ T5874] driver_probe_device+0x4c/0x1b0 [ 398.308962][ T5874] __driver_attach+0x283/0x580 [ 398.308970][ T5874] bus_for_each_dev+0x13c/0x1d0 [ 398.308980][ T5874] bus_add_driver+0x2e9/0x690 [ 398.308991][ T5874] driver_register+0x15c/0x4b0 [ 398.309000][ T5874] do_one_initcall+0x128/0x700 [ 398.309011][ T5874] kernel_init_freeable+0x69d/0xca0 [ 398.309020][ T5874] kernel_init+0x1c/0x2b0 [ 398.309030][ T5874] ret_from_fork+0x45/0x80 [ 398.309042][ T5874] ret_from_fork_asm+0x1a/0x30 [ 398.309053][ T5874] [ 398.309053][ T5874] -> #0 ((console_sem).lock){-...}-{2:2}: [ 398.309063][ T5874] __lock_acquire+0x250b/0x3ce0 [ 398.309074][ T5874] lock_acquire+0x1b1/0x560 [ 398.309085][ T5874] _raw_spin_lock_irqsave+0x3a/0x60 [ 398.309093][ T5874] down_trylock+0x12/0x70 [ 398.309102][ T5874] __down_trylock_console_sem+0x40/0x140 [ 398.309114][ T5874] vprintk_emit+0x3ec/0x6f0 [ 398.309122][ T5874] vprintk+0x7f/0xa0 [ 398.309131][ T5874] _printk+0xc8/0x100 [ 398.309141][ T5874] should_fail_ex+0x46c/0x5b0 [ 398.309154][ T5874] strncpy_from_user+0x38/0x320 [ 398.309164][ T5874] strncpy_from_user_nofault+0x7f/0x180 [ 398.309175][ T5874] bpf_probe_read_compat_str+0xf1/0x170 [ 398.309187][ T5874] bpf_prog_1ccb8ba97563bf77+0x40/0x63 [ 398.309194][ T5874] bpf_trace_run2+0x231/0x590 [ 398.309205][ T5874] __bpf_trace_tlb_flush+0xd2/0x110 [ 398.309216][ T5874] trace_tlb_flush+0xf3/0x170 [ 398.309226][ T5874] switch_mm_irqs_off+0x697/0xbb0 [ 398.309235][ T5874] __schedule+0xc4d/0x5490 [ 398.309243][ T5874] preempt_schedule_common+0x44/0xc0 [ 398.309251][ T5874] preempt_schedule_thunk+0x1a/0x30 [ 398.309258][ T5874] vprintk_emit+0x458/0x6f0 [ 398.309266][ T5874] vprintk+0x7f/0xa0 [ 398.309275][ T5874] _printk+0xc8/0x100 [ 398.309285][ T5874] set_target_v3_checkentry+0x777/0x8b0 [ 398.309298][ T5874] xt_check_target+0x272/0xa30 [ 398.309308][ T5874] find_check_entry.constprop.0+0x82f/0xa20 [ 398.309317][ T5874] translate_table+0xd06/0x17b0 [ 398.309325][ T5874] do_ip6t_set_ctl+0x605/0xc40 [ 398.309332][ T5874] nf_setsockopt+0x8a/0xf0 [ 398.309341][ T5874] ipv6_setsockopt+0x135/0x170 [ 398.309349][ T5874] udpv6_setsockopt+0x7d/0xd0 [ 398.309358][ T5874] do_sock_setsockopt+0x222/0x480 [ 398.309368][ T5874] __sys_setsockopt+0x1a4/0x270 [ 398.309379][ T5874] __x64_sys_setsockopt+0xbd/0x160 [ 398.309386][ T5874] do_syscall_64+0xcd/0x250 [ 398.309396][ T5874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.309405][ T5874] [ 398.309405][ T5874] other info that might help us debug this: [ 398.309405][ T5874] [ 398.309407][ T5874] Chain exists of: [ 398.309407][ T5874] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 398.309407][ T5874] [ 398.309418][ T5874] Possible unsafe locking scenario: [ 398.309418][ T5874] [ 398.309420][ T5874] CPU0 CPU1 [ 398.309422][ T5874] ---- ---- [ 398.309424][ T5874] lock(&rq->__lock); [ 398.309429][ T5874] lock(&p->pi_lock); [ 398.309434][ T5874] lock(&rq->__lock); [ 398.309439][ T5874] lock((console_sem).lock); [ 398.309443][ T5874] [ 398.309443][ T5874] *** DEADLOCK *** [ 398.309443][ T5874] [ 398.309445][ T5874] 2 locks held by syz.1.120/5874: [ 398.309450][ T5874] #0: ffff88806a63eb98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 398.309473][ T5874] #1: ffffffff8ddbaea0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 398.309496][ T5874] [ 398.309496][ T5874] stack backtrace: [ 398.309499][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: syz.1.120 Not tainted 6.11.0-syzkaller-03917-ga940d9a43e62 #0 [ 398.309509][ T5874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 398.309514][ T5874] Call Trace: [ 398.309517][ T5874] [ 398.309521][ T5874] dump_stack_lvl+0x116/0x1f0 [ 398.309533][ T5874] print_circular_bug+0x419/0x5d0 [ 398.309546][ T5874] check_noncircular+0x31a/0x400 [ 398.309559][ T5874] ? __pfx_check_noncircular+0x10/0x10 [ 398.309570][ T5874] ? __pfx__prb_read_valid+0x10/0x10 [ 398.309582][ T5874] ? __pfx_format_decode+0x10/0x10 [ 398.309592][ T5874] ? lockdep_lock+0xc6/0x200 [ 398.309602][ T5874] ? __pfx_lockdep_lock+0x10/0x10 [ 398.309613][ T5874] __lock_acquire+0x250b/0x3ce0 [ 398.309628][ T5874] ? __pfx___lock_acquire+0x10/0x10 [ 398.309641][ T5874] ? vprintk_store+0x22a/0xb70 [ 398.309651][ T5874] lock_acquire+0x1b1/0x560 [ 398.309663][ T5874] ? down_trylock+0x12/0x70 [ 398.309674][ T5874] ? __pfx_lock_acquire+0x10/0x10 [ 398.309686][ T5874] ? hlock_class+0x4e/0x130 [ 398.309695][ T5874] ? mark_lock+0xb5/0xc60 [ 398.309707][ T5874] ? __pfx_mark_lock+0x10/0x10 [ 398.309719][ T5874] ? vprintk+0x7f/0xa0 [ 398.309729][ T5874] _raw_spin_lock_irqsave+0x3a/0x60 [ 398.309737][ T5874] ? down_trylock+0x12/0x70 [ 398.309747][ T5874] down_trylock+0x12/0x70 [ 398.309758][ T5874] __down_trylock_console_sem+0x40/0x140 [ 398.309772][ T5874] vprintk_emit+0x3ec/0x6f0 [ 398.309782][ T5874] ? __pfx_vprintk_emit+0x10/0x10 [ 398.309791][ T5874] ? hlock_class+0x4e/0x130 [ 398.309800][ T5874] ? __lock_acquire+0xbdd/0x3ce0 [ 398.309814][ T5874] vprintk+0x7f/0xa0 [ 398.309824][ T5874] _printk+0xc8/0x100 [ 398.309835][ T5874] ? __pfx__printk+0x10/0x10 [ 398.309848][ T5874] ? ___ratelimit+0x24c/0x580 [ 398.309858][ T5874] ? __pfx_mark_lock+0x10/0x10 [ 398.309869][ T5874] ? __pfx____ratelimit+0x10/0x10 [ 398.309880][ T5874] should_fail_ex+0x46c/0x5b0 [ 398.309893][ T5874] strncpy_from_user+0x38/0x320 [ 398.309906][ T5874] strncpy_from_user_nofault+0x7f/0x180 [ 398.309917][ T5874] bpf_probe_read_compat_str+0xf1/0x170 [ 398.309933][ T5874] bpf_prog_1ccb8ba97563bf77+0x40/0x63 [ 398.309940][ T5874] bpf_trace_run2+0x231/0x590 [ 398.309953][ T5874] ? __pfx_bpf_trace_run2+0x10/0x10 [ 398.309965][ T5874] ? find_held_lock+0x2d/0x110 [ 398.309976][ T5874] ? psi_task_switch+0x20c/0x900 [ 398.309988][ T5874] __bpf_trace_tlb_flush+0xd2/0x110 [ 398.309999][ T5874] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 398.310012][ T5874] ? __phys_addr+0xc6/0x150 [ 398.310021][ T5874] trace_tlb_flush+0xf3/0x170 [ 398.310032][ T5874] switch_mm_irqs_off+0x697/0xbb0 [ 398.310044][ T5874] __schedule+0xc4d/0x5490 [ 398.310053][ T5874] ? __pfx__prb_read_valid+0x10/0x10 [ 398.310068][ T5874] ? __pfx___schedule+0x10/0x10 [ 398.310079][ T5874] ? __up_console_sem+0x8f/0xe0 [ 398.310091][ T5874] ? lockdep_hardirqs_on+0x7c/0x110 [ 398.310101][ T5874] ? preempt_schedule_thunk+0x1a/0x30 [ 398.310109][ T5874] preempt_schedule_common+0x44/0xc0 [ 398.310119][ T5874] preempt_schedule_thunk+0x1a/0x30 [ 398.310128][ T5874] ? vprintk_emit+0x445/0x6f0 [ 398.310137][ T5874] ? vprintk_emit+0x453/0x6f0 [ 398.310146][ T5874] vprintk_emit+0x458/0x6f0 [ 398.310156][ T5874] ? __pfx_vprintk_emit+0x10/0x10 [ 398.310166][ T5874] ? __pfx_lock_release+0x10/0x10 [ 398.310179][ T5874] vprintk+0x7f/0xa0 [ 398.310189][ T5874] _printk+0xc8/0x100 [ 398.310201][ T5874] ? __pfx__printk+0x10/0x10 [ 398.310213][ T5874] ? ___ratelimit+0x24c/0x580 [ 398.310223][ T5874] ? __pfx____ratelimit+0x10/0x10 [ 398.310233][ T5874] ? set_target_v3_checkentry+0x67b/0x8b0 [ 398.310247][ T5874] set_target_v3_checkentry+0x777/0x8b0 [ 398.310260][ T5874] ? __pfx_set_target_v3_checkentry+0x10/0x10 [ 398.310274][ T5874] xt_check_target+0x272/0xa30 [ 398.310285][ T5874] ? __pfx_xt_check_target+0x10/0x10 [ 398.310296][ T5874] ? pcpu_memcg_post_alloc_hook+0x1e/0x6a0 [ 398.310308][ T5874] ? xt_find_target+0x1ee/0x290 [ 398.310319][ T5874] find_check_entry.constprop.0+0x82f/0xa20 [ 398.310330][ T5874] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 398.310341][ T5874] ? lockdep_hardirqs_on+0x7c/0x110 [ 398.310351][ T5874] ? kvfree+0x47/0x50 [ 398.310362][ T5874] translate_table+0xd06/0x17b0 [ 398.310374][ T5874] ? __pfx_translate_table+0x10/0x10 [ 398.310384][ T5874] do_ip6t_set_ctl+0x605/0xc40 [ 398.310393][ T5874] ? trace_contention_end+0xea/0x140 [ 398.310402][ T5874] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 398.310412][ T5874] ? __pfx___mutex_lock+0x10/0x10 [ 398.310422][ T5874] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 398.310436][ T5874] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 398.310448][ T5874] nf_setsockopt+0x8a/0xf0 [ 398.310458][ T5874] ipv6_setsockopt+0x135/0x170 [ 398.310467][ T5874] udpv6_setsockopt+0x7d/0xd0 [ 398.310478][ T5874] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 398.310489][ T5874] do_sock_setsockopt+0x222/0x480 [ 398.310499][ T5874] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 398.310510][ T5874] ? __fget_files+0x244/0x3f0 [ 398.310522][ T5874] ? __fget_light+0x173/0x210 [ 398.310533][ T5874] __sys_setsockopt+0x1a4/0x270 [ 398.310547][ T5874] ? __pfx___sys_setsockopt+0x10/0x10 [ 398.310560][ T5874] ? fput+0x30/0x390 [ 398.310568][ T5874] ? ksys_write+0x1ab/0x260 [ 398.310579][ T5874] ? __pfx_ksys_write+0x10/0x10 [ 398.310591][ T5874] __x64_sys_setsockopt+0xbd/0x160 [ 398.310598][ T5874] ? do_syscall_64+0x91/0x250 [ 398.310608][ T5874] ? lockdep_hardirqs_on+0x7c/0x110 [ 398.310617][ T5874] do_syscall_64+0xcd/0x250 [ 398.310628][ T5874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.310637][ T5874] RIP: 0033:0x7f8f4357def9 [ 398.310644][ T5874] Code: Unable to access opcode bytes at 0x7f8f4357decf. [ 398.310648][ T5874] RSP: 002b:00007f8f4435b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 398.310656][ T5874] RAX: ffffffffffffffda RBX: 00007f8f43735f80 RCX: 00007f8f4357def9 [ 398.310661][ T5874] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 398.310666][ T5874] RBP: 00007f8f4435b090 R08: 0000000000000658 R09: 0000000000000000 [ 398.310671][ T5874] R10: 0000000020001340 R11: 0000000000000246 R12: 0000000000000001 [ 398.310676][ T5874] R13: 0000000000000000 R14: 00007f8f43735f80 R15: 00007ffe4e9c7fc8 [ 398.310685][ T5874] [ 398.635090][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: syz.1.120 Not tainted 6.11.0-syzkaller-03917-ga940d9a43e62 #0 [ 398.637743][ T5874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 398.640578][ T5874] Call Trace: [ 398.641438][ T5874] [ 398.642231][ T5874] dump_stack_lvl+0x116/0x1f0 [ 398.643486][ T5874] should_fail_ex+0x497/0x5b0 [ 398.644729][ T5874] strncpy_from_user+0x38/0x320 [ 398.646030][ T5874] strncpy_from_user_nofault+0x7f/0x180 [ 398.647515][ T5874] bpf_probe_read_compat_str+0xf1/0x170 [ 398.649032][ T5874] bpf_prog_1ccb8ba97563bf77+0x40/0x63 [ 398.650466][ T5874] bpf_trace_run2+0x231/0x590 [ 398.651715][ T5874] ? __pfx_bpf_trace_run2+0x10/0x10 [ 398.653148][ T5874] ? find_held_lock+0x2d/0x110 [ 398.654471][ T5874] ? psi_task_switch+0x20c/0x900 [ 398.655828][ T5874] __bpf_trace_tlb_flush+0xd2/0x110 [ 398.657233][ T5874] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 398.658765][ T5874] ? __phys_addr+0xc6/0x150 [ 398.659980][ T5874] trace_tlb_flush+0xf3/0x170 [ 398.661241][ T5874] switch_mm_irqs_off+0x697/0xbb0 [ 398.662639][ T5874] __schedule+0xc4d/0x5490 [ 398.663870][ T5874] ? __pfx__prb_read_valid+0x10/0x10 [ 398.665301][ T5874] ? __pfx___schedule+0x10/0x10 [ 398.666614][ T5874] ? __up_console_sem+0x8f/0xe0 [ 398.667947][ T5874] ? lockdep_hardirqs_on+0x7c/0x110 [ 398.669329][ T5874] ? preempt_schedule_thunk+0x1a/0x30 [ 398.670720][ T5874] preempt_schedule_common+0x44/0xc0 [ 398.672116][ T5874] preempt_schedule_thunk+0x1a/0x30 [ 398.673506][ T5874] ? vprintk_emit+0x445/0x6f0 [ 398.674745][ T5874] ? vprintk_emit+0x453/0x6f0 [ 398.675991][ T5874] vprintk_emit+0x458/0x6f0 [ 398.677197][ T5874] ? __pfx_vprintk_emit+0x10/0x10 [ 398.678519][ T5874] ? __pfx_lock_release+0x10/0x10 [ 398.680008][ T5874] vprintk+0x7f/0xa0 [ 398.681143][ T5874] _printk+0xc8/0x100 [ 398.682253][ T5874] ? __pfx__printk+0x10/0x10 [ 398.683476][ T5874] ? ___ratelimit+0x24c/0x580 [ 398.684697][ T5874] ? __pfx____ratelimit+0x10/0x10 [ 398.686008][ T5874] ? set_target_v3_checkentry+0x67b/0x8b0 [ 398.687519][ T5874] set_target_v3_checkentry+0x777/0x8b0 [ 398.689003][ T5874] ? __pfx_set_target_v3_checkentry+0x10/0x10 [ 398.690606][ T5874] xt_check_target+0x272/0xa30 [ 398.691882][ T5874] ? __pfx_xt_check_target+0x10/0x10 [ 398.693291][ T5874] ? pcpu_memcg_post_alloc_hook+0x1e/0x6a0 [ 398.694818][ T5874] ? xt_find_target+0x1ee/0x290 [ 398.696115][ T5874] find_check_entry.constprop.0+0x82f/0xa20 [ 398.697666][ T5874] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 398.699291][ T5874] ? lockdep_hardirqs_on+0x7c/0x110 [ 398.700627][ T5874] ? kvfree+0x47/0x50 [ 398.701678][ T5874] translate_table+0xd06/0x17b0 [ 398.702965][ T5874] ? __pfx_translate_table+0x10/0x10 [ 398.704372][ T5874] do_ip6t_set_ctl+0x605/0xc40 [ 398.705636][ T5874] ? trace_contention_end+0xea/0x140 [ 398.707030][ T5874] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 398.708437][ T5874] ? __pfx___mutex_lock+0x10/0x10 [ 398.709749][ T5874] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 398.711311][ T5874] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 398.712889][ T5874] nf_setsockopt+0x8a/0xf0 [ 398.714061][ T5874] ipv6_setsockopt+0x135/0x170 [ 398.715318][ T5874] udpv6_setsockopt+0x7d/0xd0 [ 398.716561][ T5874] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 398.718108][ T5874] do_sock_setsockopt+0x222/0x480 [ 398.719423][ T5874] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 398.720859][ T5874] ? __fget_files+0x244/0x3f0 [ 398.722127][ T5874] ? __fget_light+0x173/0x210 [ 398.723385][ T5874] __sys_setsockopt+0x1a4/0x270 [ 398.724689][ T5874] ? __pfx___sys_setsockopt+0x10/0x10 [ 398.726104][ T5874] ? fput+0x30/0x390 [ 398.727164][ T5874] ? ksys_write+0x1ab/0x260 [ 398.728375][ T5874] ? __pfx_ksys_write+0x10/0x10 [ 398.729701][ T5874] __x64_sys_setsockopt+0xbd/0x160 [ 398.731043][ T5874] ? do_syscall_64+0x91/0x250 [ 398.732285][ T5874] ? lockdep_hardirqs_on+0x7c/0x110 [ 398.733648][ T5874] do_syscall_64+0xcd/0x250 [ 398.734849][ T5874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.736416][ T5874] RIP: 0033:0x7f8f4357def9 [ 398.737638][ T5874] Code: Unable to access opcode bytes at 0x7f8f4357decf. [ 398.739518][ T5874] RSP: 002b:00007f8f4435b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 398.741776][ T5874] RAX: ffffffffffffffda RBX: 00007f8f43735f80 RCX: 00007f8f4357def9 [ 398.743861][ T5874] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 398.745924][ T5874] RBP: 00007f8f4435b090 R08: 0000000000000658 R09: 0000000000000000 [ 398.748006][ T5874] R10: 0000000020001340 R11: 0000000000000246 R12: 0000000000000001 [ 398.750151][ T5874] R13: 0000000000000000 R14: 00007f8f43735f80 R15: 00007ffe4e9c7fc8 [ 398.752180][ T5874] [ 398.770335][ T39] audit: type=1400 audit(1726638811.153:376): avc: denied { read } for pid=5867 comm="syz.2.118" name="mouse0" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 398.776765][ T39] audit: type=1400 audit(1726638811.593:377): avc: denied { open } for pid=5867 comm="syz.2.118" path="/dev/input/mouse0" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 VM DIAGNOSIS: 05:53:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff813c54fe RDX=ffff888032db8000 RSI=ffffffff813c551b RDI=0000000000000000 RBP=ffff88806a63eb80 RSP=ffffc900036c79a8 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a63fa40 R15=ffffed100d4c7d70 RIP=ffffffff813c551c RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555807ed500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33c0aff8 CR3=0000000054034000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813082df ffffffff813082df ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff813082ed ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4e27f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4e27f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4e27f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4e27f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4e27f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4e27f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8157f15b ffffffff8157f0ef ffffffff8157f0a7 ffffffff8132e475 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4e346d100 00007fa4e290b440 00007fa400040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4e290b498 00007fa4e290b490 00007fa4e290b488 00007fa4e290b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8504e205 RDI=ffffffff9a68fb00 RBP=ffffffff9a68fac0 RSP=ffffc900033b6a98 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e31312e36 R12=0000000000000000 R13=0000000000000074 R14=ffffffff8504e1a0 R15=0000000000000000 RIP=ffffffff8504e22f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8f4435b6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020000000 CR3=0000000054034000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffffe Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f4435b060 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f435f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f435f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f435f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f435f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f435f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f435f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7000642520732520 6425206425000a67 6e69747465736572 203a732520656c62 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5500410005560005 4100054100000a42 4b4c515140564057 051f560005404947 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88806a63eb80 RCX=ffffffff8b1c9154 RDX=ffffed100d4c7d71 RSI=0000000000000004 RDI=ffff88806a63eb80 RBP=0000000000000003 RSP=ffffc900039a72e8 R8 =0000000000000000 R9 =ffffed100d4c7d70 R10=ffff88806a63eb83 R11=ffffffff815f79b0 R12=ffffed100d4c7d70 R13=0000000000000000 R14=ffff88806a83fa40 R15=0000000000000002 RIP=ffffffff81eafaa8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f36e6d196c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000033f0a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffe0000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e5ff199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e5ff19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e5ff19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e5ff19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e5ff1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e5ff1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 6573756f6d2f7475 706e692f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000013 4650564c4e0c5756 534d4a0c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9500000004000000 8500000000000003 b700000008000002 b7fffffff8000001 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07000000000000a1 bf00000000fff81a 7b20202000000000 00256c7520000001 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 180000002d000000 8520000000000003 b700000008000002 b7fffffff8000001 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07000000000000a1 bf00000000fff81a 7b20202000000000 00256c6420000001 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000040000 RBX=ffff88806a8465c0 RCX=ffffc90006a21000 RDX=0000000000040000 RSI=ffffffff81800f95 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900039b7250 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=dffffc0000000000 R12=ffffed100d508cb9 R13=0000000000000001 R14=ffff88806a8465c8 R15=ffff88806a93fd80 RIP=ffffffff81800f97 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f36e6d3a6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000033f0a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e5ff199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e5ff19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e5ff19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e5ff19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e5ff1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e5ff1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e610b488 00007f36e610b480 00007f36e610b478 00007f36e610b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e6c6d100 00007f36e610b440 00007f36e610b458 00007f36e610b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36e610b498 00007f36e610b490 00007f36e610b488 00007f36e610b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9500000004000000 8500000000000003 b700000008000002 b7fffffff8000001 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07000000000000a1 bf00000000fff81a 7b20202000000000 00256c7520000001 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 180000002d000000 8520000000000003 b700000008000002 b7fffffff8000001 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07000000000000a1 bf00000000fff81a 7b20202000000000 00256c6420000001 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000