last executing test programs: 5.330072159s ago: executing program 2 (id=202): r0 = socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmmsg$sock(r0, &(0x7f0000000b00)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)="009a36866c8dbf19566686f3f32be20b51bd", 0x12}, 0x1, 0x0, 0x0, 0x801}, 0x800) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000280)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, 0x0}}], 0x1, 0x20000000) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket(0x15, 0x6, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000400)) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r9, 0x4100}], 0x1, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff00800", 0x0, 0x104, 0x6000000000000000, 0xc1, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab30", 0x0}, 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$nfc_llcp(r9, &(0x7f0000000240)={&(0x7f0000000100)={0x27, r11, 0x1, 0x1, 0x8, 0x8, "fbb6e649f0c7f6ff2556405dad9d9d9dda5601c7b840092c6002efc9f1a2bdf046a2463a2e52a7fc58e2357ab3ba1f7527b60adcb50d5c46de6880ad46745d", 0x1b}, 0x60, &(0x7f0000000200)=[{&(0x7f0000000180)="0ec926c97c41e2bf97ab1ad6257173a8cf7672010da32bcab17380db8d5e4f6130b644f09d03ffd1193a649f2801b2941a36d02c5a2fdfd2eb6b334fcdc81133d1a1254878a2f0da2054ab2774b9524f2772196e4c0379", 0x11}, {&(0x7f0000000300)="7f761e68d6ba57aa0c017f34e1b3b880d707a3c6930e8c21ecb015bc5651d13b1ecddc302bc3d4a4bb6272fc220686837fa643437a244c09a99afefd65d1c36ea674208cd8f7c41f979843909c0324fade3db18707a5b39a50921db4c8750171d2fc07a60871fafcf08c35bb6af9b80904b5a61ecb8a82991f50b43e377a558af2826c1aea1d9aab051fb676c13e3795b99a65a28cd7611ee33c9b3cb15c1ac5186afd8877c0a381902146d82028ebb1f8ea3c73aeb9180d07428862205ad3abc683035823c2e344f7a63987abee0f3f17a8c4176e29da", 0xd7}, {&(0x7f0000000080)="cca8e50fd514c4ed9a700a95f7dde0175982eef8f02225c0c3968e9ca993b19e7ed607a7ea410333705cc0280d6237e6a46f", 0x32}], 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="800000000020000008010000aa060000ebd9ef9766aa237e8f9e5878995d5157c8e4703d11df6c56bd9017ae684c1ad0d1be7c3606b923b19b390c11a3b397bdc8bfb63fa338fdaf389c81d609d18956838ca18cbb99dca0c0477795c78010f10a075629a0a9c86701faef3953bd775da4b92c705ec933e7efe80000000000001b1e5009542ba46f844d9cd0b5cc5e6d67ee9d65d05c2edf60959e53041728a4e304909e7f64458acf397ef5c2e332858472f542d6b77a2669bcf22a"], 0x80, 0x40081}, 0x10) 5.212790863s ago: executing program 2 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x6}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x2800, 0x20, 0x14}, 0x18) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x110) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000000)='./bus\x00', 0x551481, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) close(r3) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) 5.161064813s ago: executing program 0 (id=210): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400030200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='personality\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='personality\x00') preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1, 0x68, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x1, 0x78bd27, 0xa6, {0x0, 0x0, 0x0, r5, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffffffff, @mcast2, 0x5}, 0x51) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffffffff, @mcast2, 0x5}, 0x51) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x816) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004280)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r8, &(0x7f0000000500)=ANY=[@ANYRES8=r7], 0xa9) close(r8) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="365a387ddf27e77f4a217ee7ea5445e57955721fd22517528ff9f7a78b43ef1e1d67f8c025d87a9ab7e83156c22e815fcdc0245be7c25ceda90fc2e4097d0313caf7afc172538450142f22ea8959445538bc5b1c0125fe39e7865b30d98ef5054b71ba2689a73c5ede6820332e36678d3bd56c17a3a4aa554ba24d1c2f776b0b79fb5c21847e4b5f09f662c5ac6b97f27e23", 0x92}], 0x1}}], 0x1, 0x4001c00) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) (async) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r9, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r10, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '\xf6-'}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '.!+'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'J\'@\xe2'}, @NFC_ATTR_FIRMWARE_NAME={0x21, 0x14, '/proc/asound/card0/oss_mixer\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040090}, 0x24000805) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r9, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r10, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '\xf6-'}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '.!+'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'J\'@\xe2'}, @NFC_ATTR_FIRMWARE_NAME={0x21, 0x14, '/proc/asound/card0/oss_mixer\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040090}, 0x24000805) 4.892231438s ago: executing program 0 (id=217): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) ptrace$setregs(0x1a, r3, 0xc, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, r0, 0x0, 0xd, &(0x7f0000000000)='&@/&^-/\x9d(\x03\'%\x00'}, 0x30) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x6, 0x0, 0x5) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000040)) 4.888591074s ago: executing program 0 (id=219): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (async) pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0xb, 0x8, 0xd, 0x9, @local, @rand_addr=' \x01\x00', 0x20, 0x8000, 0xcf4, 0x6}}) (async, rerun: 64) r4 = socket(0x18, 0x0, 0x0) (rerun: 64) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'gre0\x00'}}, 0x1e) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2100, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x4040004) (async) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0xe, r3, 0xc, r1}, 0x10) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) (async, rerun: 64) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x80, 0x1) (async, rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='nfsd\x00', 0x403, 0x0) (rerun: 64) 4.812252284s ago: executing program 0 (id=220): exit(0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x6, '\x00', @p_u16=&(0x7f0000000240)}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x6, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000801, 0x0, &(0x7f0000000140)={0x5, 0x6, 0x4, 0x0, 0x100000000, 0xfffffffffffffff8, 0x4, 0x7, 0x368a}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 3.98990838s ago: executing program 0 (id=237): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) sendto$inet6(r1, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x3, 0x3, 0x9, 0x20, 0xff}, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x2, 0x6, 0x95}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x418}}, {0xd6, &(0x7f0000000280)=@string={0xd6, 0x3, "122ae5feafde617657d87daacce35c0b903263420a130dec588a7fff5b28a7b0033c52bcefc2f186206658e904b8cc53d8ff3709b09917cd2c64b4d0af5705f519533e8ef371504bf1bb9dc4dcb4bb6032b10fe299acf5f7c80106e10ed6a4cb504560b0370efa03fbf8a86b33650bb7387c731e32ef6b4e0d4b82e52836dfad7ff1d216f61956b3bb905f5ae3c0908758a015592888070723bcec6e0a3d126f8c69f8686e85fb0682632ee4f40548c516787282a4fb6ba033f63b83d33ec20e0d15f51596d2ac46f2f8e3d02dfe124465b1aeb9"}}]}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r3, &(0x7f0000001480)=[{&(0x7f0000000100)="0c37f8246f3e4c0f268894edcd5b1a9964c8dae6b413288a16aa77bca416bb6c2ed80e4c948037035c05a3f6d188b7f720f619c3aed8885056565487fbfcf347f9759031056a5c6f6510bba78a970af194a3bfff9ee162bfd08f9d87b199bad71d4b704bbe05f9458f7edb6ea6df3da93d4439b26d0a2fd23b7969b4ccf926f6c02246b837960e2e6ffd0b", 0x8b}, {&(0x7f0000000440)='0', 0x1}], 0x2) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={0x37c, 0x3a, 0x200, 0x70bd29, 0x25dfdbfc, {0xb}, [@typed={0x8, 0x101, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x4, 0xa7}, @generic="fd87957580ed175f82d3cec4efb636ee5118c28f065f583a53be1e8a3197092c06ebc2879c954cca9679a94a801b6d7d54b1a40d62d6c093b80a3fdb589d64db8e024210c338c038e59b8e7ef0895d366b61eb89134ff1104a30b3eef4cb5358d57bf6edaaf6ffb6e35d2b7a2cf6b036b4f214f5d83ba98e1fc5a70f0cabdabc0630ab60b09452a6da90223912b2611885d22e7d86cf84e617c6c661eb6f1ea071f0d20b1ee2178f1abbc05580adc705c05ffa5f4ece25d0136bf94a7c1e509073001eebef9330acb1d75fb7d54d7cca2375523f76b49fe799c7c103292e5247", @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x118, 0x12f, 0x0, 0x1, [@generic="d1aa34a59aa3a9d1340b2969acc8673b86175ced133cefe5186a63196cfd8d0417834a0be168c877ab4c536143d5efed7806ad92c7fe74817111b627117d8f0173b8aa9c840ff3e700029980b7a5d9b278e84b911f", @generic="0ca4556f7fde4b8227f93992fe0c46990ec3c50b6f8a228c1246c7681c477a01f419c6bcccc0469a7d1aab1d0590609f46aa24a548937371dc0fbd1d5671e5cdf97812898f767f2ff5386f243d9a366f4549cf1a0ae0c9b4a5207511f59e2f73375b9535c24ff2880c8efc27af23fb1b8b0b700055b42f1fb04312f5c76fa1d2f6b10f4c782b71665a73c526daeda704b74ca567c46bf885bfa308a7af104f7d00b59e344375577e42faa357fce7f1aa534fda2d8751bbee00afa40fd92b62"]}, @nested={0xb7, 0x14d, 0x0, 0x1, [@typed={0x15, 0x11e, 0x0, 0x0, @str='/selinux/enforce\x00'}, @typed={0x14, 0x9d, 0x0, 0x0, @ipv6=@empty}, @typed={0x19, 0xc9, 0x0, 0x0, @str='/dev/bus/usb/00#/00#\x00'}, @generic="c9951ea7a8f835df5addeca04e9273d5ec175896771667d63223636f66d02ac8ba5f933ed4a54c68cbb7c3f5326ec8a4e04e2da53daa82315b55e639e33801398bea30a6427398d1de6bce8bc243359bb26c1961f9c5b8", @typed={0x14, 0xd3, 0x0, 0x0, @ipv6=@loopback}]}, @nested={0x96, 0xaa, 0x0, 0x1, [@generic="1eca068a809cec055c69b06b5c53905f6f87a170fd7e5a0b54d3bc77d95cfea4154685d52d8b15f5199542c4847833a1e51f8bc5cff1d95c5647030dd389a899fc7341611bda31731c2c6dbbd62b3d58813d1c1ef52e6682d5a5fc7aacc52e5c37fe278cb97947c69b8b97ed00a4112fb98de0ba730df2a0ea220d7430a35e0a6e70c3e46fd322ac4cf6", @nested={0x4, 0xd1}, @typed={0x4, 0x26}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40001) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, 0x0, &(0x7f0000001700)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000001b000000070021006262"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4010) syz_usb_disconnect(r2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) 3.720361249s ago: executing program 0 (id=243): syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x8, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000280)=""/239, 0xef}, {&(0x7f00000000c0)=""/125, 0x7d}, {&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000480)=""/170, 0xaa}, {&(0x7f0000000000)=""/26, 0x1a}], &(0x7f00000005c0)=[0x6, 0x401], 0x6}, 0x20) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000380)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80842, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) memfd_create(&(0x7f0000000000)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe0]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x050x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x200000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x0, r2, 0x0, 0xfcc00000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x3, 0x0, 0xffff, 0x4000000000000, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2000, 0x0, r2, 0x0, 0x440, 0x880000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f0000000000)='./file0/file0\x00', 0xa02, 0x1) ioctl$FS_IOC_GETVERSION(r5, 0x5409, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30040000002c5d2d00030a0102000000000000000001000000090001", @ANYBLOB="46170e5a8a640728a0a25f8f9383e0e4191ef16aa79cfa0f2bc6df9edc61a369902e5a20456b71a2c1938b1d2bdff79d2037fa4f69245d2216d76b869da180f9a6f240d0fb6499354e85"], 0xc0}, 0x1, 0x0, 0x0, 0x4c084}, 0x4000) mknod$loop(&(0x7f0000000180)='.\x00', 0x20, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 3.645115171s ago: executing program 32 (id=243): syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x8, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000280)=""/239, 0xef}, {&(0x7f00000000c0)=""/125, 0x7d}, {&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000480)=""/170, 0xaa}, {&(0x7f0000000000)=""/26, 0x1a}], &(0x7f00000005c0)=[0x6, 0x401], 0x6}, 0x20) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000380)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80842, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) memfd_create(&(0x7f0000000000)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe0]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x050x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x70bd25, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@ip4=@remote, 0x86dd}}}]}, 0x38}, 0x1, 0xf0, 0x0, 0x4}, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2010049, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7, {0x5}}, './file1\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f00000000c0)=""/159) 1.992186802s ago: executing program 1 (id=258): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @const={0x7, 0x0, 0x0, 0xa, 0x5}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x1, 0x3}]}, {0x0, [0x30, 0x5f, 0x5f, 0x71, 0x30, 0x0, 0x0]}}, &(0x7f00000001c0)=""/167, 0x49, 0xa7, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xe7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x1e, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc}, [@map_fd={0x18, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x84, &(0x7f0000000080)=""/132, 0x41000, 0x60, '\x00', 0x0, @fallback=0x18, r1, 0x8, &(0x7f00000002c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x10, 0x10f, 0x65d1f3a6}, 0x10, r2, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000640)=[{0x0, 0x4, 0x6, 0x6}, {0x2, 0x4, 0xe, 0x4}, {0x4, 0x2, 0xa, 0xc}], 0x10, 0x8c, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @const={0x7, 0x0, 0x0, 0xa, 0x5}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x1, 0x3}]}, {0x0, [0x30, 0x5f, 0x5f, 0x71, 0x30, 0x0, 0x0]}}, &(0x7f00000001c0)=""/167, 0x49, 0xa7, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xe7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x1e, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc}, [@map_fd={0x18, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x84, &(0x7f0000000080)=""/132, 0x41000, 0x60, '\x00', 0x0, @fallback=0x18, r1, 0x8, &(0x7f00000002c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x10, 0x10f, 0x65d1f3a6}, 0x10, r2, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000640)=[{0x0, 0x4, 0x6, 0x6}, {0x2, 0x4, 0xe, 0x4}, {0x4, 0x2, 0xa, 0xc}], 0x10, 0x8c, @void, @value}, 0x94) (async) 1.911802062s ago: executing program 1 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0xf5, 0x0, 0x4001}, 0x0) 1.910875498s ago: executing program 1 (id=260): r0 = socket$nl_route(0x10, 0x3, 0x0) iopl(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x3) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000280)='D', 0x1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0xf3, &(0x7f0000000140)=""/243, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$packet(r5, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r9, &(0x7f00000011c0)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="0a0040000c0064010000006e32c7c51e3a995a90016f6ed5bce4bb524437885e70935a2e5979a054816a51c1d9a3371bad844387bac81f8cc228991b2d5fbc4046f5417074c4929bc2a36d9eb3eb0f8b62bbb43112f3579c7b3651e86e9f78fd9691a027ec2230fc64bc4371084a83fdb6d9280bedba21b1cbcdd83708ba86d8c6275b00eb8ddcbc84bf8620ed19b5436e4a4ccfd4ff926e8f03ca87bba9818ee06df98e741afbc68b0007669d9750154ab84061c14877249dbe7b41be01339198867cae6268f55c47c046eee81682d78d52d88805619099a743bdb7"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa000000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002000010300000000000000001700"/31], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 1.292359562s ago: executing program 1 (id=261): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7f}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x9, 0x1000, 0x2, 0x5ca0, 0xfffc, 0x4]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) (async) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) (async) close(r7) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x36) (async) syz_kvm_assert_syzos_uexit$x86(r5, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) syz_kvm_assert_syzos_uexit$x86(r5, 0xaaaa) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) syz_kvm_assert_syzos_uexit$x86(r5, 0xffffffffffffffff) 1.072085618s ago: executing program 1 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xff}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x300, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r7, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x43}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x815}, 0x40010) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) write(r5, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x10, 0x1, 0x1, 0x0, {{0x5, 0x4, 0x3, 0x35, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 902.257671ms ago: executing program 2 (id=264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda32}) close(r0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) 732.016816ms ago: executing program 3 (id=266): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8}}}, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000021000010000000000000000000000000a6c000000060a0b04000000000000000002000008400004803c0001800b00010065787468647200002c000280080004400000000208000740000000090800064000000001050002000000000008000340000000040900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r5], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x2, 0x6}, 0xfffffffffffffdd9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r6, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) socket$packet(0x11, 0x2, 0x300) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r7, 0x7ff, 0x1) getdents64(r7, 0x0, 0x10) bind$alg(r7, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58) 632.063844ms ago: executing program 3 (id=267): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x402, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x9) r4 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, 0xfffffffffffffffe) (async) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000380)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) (async) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000040)='cifs.spnego\x00', &(0x7f00000000c0)=')\x00') request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r4) 460.682038ms ago: executing program 3 (id=268): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) 459.658943ms ago: executing program 3 (id=269): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101182) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@inode32}]}) write$sndseq(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8}]}, 0x34}}, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x4, 0x3, &(0x7f0000000040)={0x5, "e9248c66cc563184a0b86b492024429192b3061face77a066820ec41329203bfc2"}}) 412.717147ms ago: executing program 3 (id=270): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknod(0x0, 0xc000, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) socket(0x23, 0x2, 0xfff) write$P9_RGETLOCK(r0, 0x0, 0xffffff6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xe) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047454, 0x0) 410.96519ms ago: executing program 1 (id=271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 342.298912ms ago: executing program 3 (id=272): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) close(r2) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xe0c}, 0x1, 0x0, 0x0, 0x40000}, 0x408d4) r4 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x2, &(0x7f0000001d40)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = fsopen(&(0x7f0000000380)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xc, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = syz_io_uring_setup(0xe, &(0x7f0000000480)={0x0, 0x6967, 0x2000, 0x2, 0x4a}, &(0x7f0000000000), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r7, 0x1a, &(0x7f0000000300)={0x40}, 0x1) read$FUSE(r5, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0}, 0xfffffeef) setxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@v3={0x3000000, [{0xa, 0xe}, {0x800, 0x8}], r9}, 0x18, 0x1) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r8, {0x7, 0x9, 0x3, 0x8695c3813a9bd78d, 0x0, 0xfffc, 0xbad, 0x0, 0x0, 0x0, 0x0, 0x80000}}, 0x50) socket$kcm(0x10, 0x2, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) r10 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r10, 0x0) ioctl$BLKZEROOUT(r10, 0x127f, 0x0) syz_open_procfs(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 202.505843ms ago: executing program 4 (id=273): mkdir(&(0x7f0000000300)='./bus\x00', 0x90) (async) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x100c0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/38, 0x26}, {&(0x7f00000000c0)=""/122, 0x7a}], 0x2, 0x5, 0x800) 202.356461ms ago: executing program 4 (id=274): r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x20000) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller1\x00', @ifru_data=0x0}}) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000000)=""/39, 0x27, 0x2001, &(0x7f00000000c0)={{0x3, @default, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) 82.334466ms ago: executing program 4 (id=275): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000004000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x2, @sdr={0x34343452, 0x80}}) r2 = socket$xdp(0x2c, 0x3, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) 81.888875ms ago: executing program 4 (id=276): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}]}}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000200), 0x2, 0x80) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x6, r2, 0x29, r5}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r8 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f00000000c0)={0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @enc_lim={0x4, 0x1, 0xf}]}, 0x20) r9 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) write$selinux_attr(r9, &(0x7f0000000080)='system_u:object_r:scsi_generic_device_t:s0\x00', 0x2b) sendmmsg$inet6(r9, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="a1"}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x48890) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) 1.021698ms ago: executing program 4 (id=277): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x9c, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r1, 0x7}) (async) r2 = dup(r0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) (async) r5 = getgid() write$FUSE_STATX(r2, &(0x7f00000021c0)={0x130, 0x0, r3, {0xffffffffffff0602, 0xfffffffb, 0x0, '\x00', {0x100, 0x1, 0x7, 0x1c6, r4, r5, 0x8000, '\x00', 0x3, 0xffffffffffffffff, 0xff, 0x100000000, {0x6, 0x7}, {0x5, 0x8}, {0x9aa3, 0x1}, {0x1, 0x3ff}, 0x5, 0xffffffff, 0x6, 0x7}}}, 0x130) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000002300)) ioctl$KDDELIO(r2, 0x4b35, 0x8) (async) timer_create(0x3, &(0x7f0000002500)={0x0, 0x14, 0x0, @thr={&(0x7f0000002340)="986dbe61ce63ac5cc97fcbd0ac26876764440a94423298ddd1ecde6b6eab1f3f5d799f30fcb031e930a7a52295b050d19035ba0cba0f30d4d4c595a1bc66391209dc62081876e2f799b3e722d8788cbfc7d2af20a3cc9b87780939fc1658633b8d7db39416f7c0ffc6c44a32c8dfe0aae674f8be9080090da69a67056be1008238590c675d186e957d856c5db23c46d9fdf43dfd06a0689414d8258231d5efd6a4f882f6e391e35e53c158ba28cea9a94122561a012067d83c11aada45ddcac677743ded0cc307b1507861ebb11017696dd79e1c82a41341c3e05994926dfd660d4679a71cf22d9697c8ad53cc", &(0x7f0000002440)="42ce34bd791be11bb7a2936c8313c4fe671b254761150d81e59b130bc4c38f84bc2a7a637e606d6922b54f982cfcd1b297c29a1ea4fe5ed6414e66815b0cfb93c59c8e7ec35c7081f0b1055d98cd4a41979bfd3f8361403f42957b0ca9babf3e60a28964903918a5fb27c3e3aa915692dec5790797de4e7fac60e37c4007dab215da74ca26594b7ad79de7105f97d43b58c753db8fe322dea3fec2d48895ee4d12a60b8292e26324"}}, &(0x7f0000002540)=0x0) (async) clock_gettime(0x0, &(0x7f0000002580)={0x0, 0x0}) timer_settime(r6, 0x0, &(0x7f00000025c0)={{0x0, 0x989680}, {r7, r8+10000000}}, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000002600)=""/4096) (async) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000003600)) (async) ioctl$TCXONC(r2, 0x540a, 0x1) (async) r9 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000003640)) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r9, 0xc01064c7, &(0x7f00000036c0)={0x2, 0x0, &(0x7f0000003680)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000003700)={r10}) (async) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000003740)={0x10, 0x424}) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003780), r11) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000003840)={&(0x7f00000037c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000003900)={&(0x7f0000003880)="a0d1655ebef1b0f8e43de3689d5f451e487ffdc89000ee71e2a600c43c7934ddb6e36bc80e3a902924fba7c54f948052cd35d9641d3e9c6476252321b3371375f16bed9e50857dacca1a0e5a33c146a10b156a1152b90800f0631a9913927b59e8126040a86678d6bdb1f78cfb5f29458c101a040512c1502c19fd20b8", 0x7d, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000003940)={0x2, r12, r13, 0xe0e0e0e0}) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000003980)='/dev/dri/card#\x00', 0x0, r2) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000039c0)={0x0, 0x0, @ioapic={0x10000, 0xffffff12, 0x4, 0xcdfb, 0x0, [{0x7, 0xb5, 0x5, '\x00', 0x8}, {0x2, 0x1, 0x3, '\x00', 0xd7}, {0xe, 0x1, 0x5, '\x00', 0x4}, {0x5, 0x1, 0x9, '\x00', 0x8}, {0x4, 0x0, 0xcf, '\x00', 0xff}, {0x2, 0x4, 0x4, '\x00', 0xc}, {0x7, 0x4, 0x0, '\x00', 0x4a}, {0x8, 0x4, 0x0, '\x00', 0x6}, {0x2, 0xf1, 0x0, '\x00', 0x80}, {0x2, 0x5, 0xf3, '\x00', 0x1}, {0x5, 0x31, 0x9, '\x00', 0x20}, {0x4, 0x6, 0x9, '\x00', 0x80}, {0x2, 0xf, 0x7, '\x00', 0xb}, {0xea, 0x16, 0xf7, '\x00', 0x8}, {0x0, 0x0, 0x6, '\x00', 0xf3}, {0x9, 0x9c, 0x81, '\x00', 0xd}, {0x7, 0x1, 0xc, '\x00', 0x6}, {0x6e, 0x7, 0xe, '\x00', 0x7}, {0x3, 0x0, 0xe, '\x00', 0x5}, {0x2, 0x7, 0x3, '\x00', 0x6}, {0x9, 0x87, 0x5, '\x00', 0x3}, {0x1, 0xd, 0xf1}, {0x3, 0x4e, 0x5, '\x00', 0x4}, {0x4, 0x7, 0xc, '\x00', 0x80}]}}) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000003c00)={"d65430e3", 0x5a37, 0x6, 0x0, 0x1, 0xfb, "ef1212b6416278b60133d9ddadd6d9", "958bee78", "34669b77", "e6cc1669", ["23377db567ae3a73c70c7269", "3fdd0a4abf89ac75ece702ab", "384788b4ffd65f388470c33d", "97dce95bc2b8c41716fe5313"]}) ioctl$TCXONC(r2, 0x540a, 0x0) 306.626µs ago: executing program 4 (id=278): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r4, 0x89e2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) write$FUSE_NOTIFY_RESEND(r5, &(0x7f0000000400)={0x14}, 0x14) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000013008000000000000000000000a2c000000050a03000000000000000000020000000900010073797a30000000000c0002400000000000000004140000001100010000000000000000000000000a"], 0x54}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r6, 0x0, 0x40000000}, 0x18) r7 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x1000001) inotify_rm_watch(r0, r7) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x400008c0}, 0x0) msync(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1) 0s ago: executing program 2 (id=279): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x42802) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) keyctl$set_reqkey_keyring(0xe, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x0, 0x3, 0x2e0, {0x0, 0x1}, 0xf, 0x2d7}) 0s ago: executing program 2 (id=280): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r2 = memfd_create(&(0x7f0000000240)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x00\x00\x00\x00\xa9t\xa24>X@\rq@\xf2\xe9[\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a`\xf0\xc728\xfc\xfc\x1c1?\x86\xac\xd4\f\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6\x8b\x1d*1\xe8\xb0\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\xdfe;\xc0w\xad\xef\xa3r\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s3\xd7s\xef\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\x9d\xd3[i\x1b|{4)\xd8\xa2\xb8\x8f\xa2\x84_k\xe5\xf0\x05a2)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x1a5\x8c\xa6\xfbq\xa9\x87\x9f\xe1\xfa\xb5\x92\xb1\x00\x00\x00\x00\xd6\xce\xab\x1d%\xb0\xaa\xed\x10\xe9Z\"\x7f\xb2\xde\x00\x00\x00\x00\x00y\xd8\xdf\xc8R\x8b0Bs\x95N\xfa\x02\xe9\xf6\xa20\f1L\v\xdf8W{P\xab\x82\x84\xf0w\x9c\t\xf8\x85\x98S)M*\x88\xf8\xbaC\xa2\xf8\xc3\xe0\xb2)\xf8\x9da%\xd7\x8c\x03\xa9\xb6\x15\x8c\xdd\xaf\xeb\xfa\x1bV\x1c\fJ\xe6n\x19\x94\xea\xb7\xcc\x12q\x06\xbab\xda\xfa\xf7\xe4\x85U:\x1e\xeaC\x9b\xa5\xbb:\xe8\x04\xd9\xb2|\x85\a\x93\xa1a\r\xf0R\x8f\xac\xbc]\xc6\x1a\x86RK\xb3\x95\xbaz\xb7I\a\xd6j,pI\xb07\xc4\x82G\xd2u\x8a\xfc\x10\xffs5\xfd\x99\xdc\x9e\xdf\x86\x11~0+\xa7\x11\x13\xbb5\xc8\x8aW\xfd{\xe1QN\xef\xce~k7\xd9\x02\xac#n\xc3\xdd\x9a\xdaeJ7\x9f5\xae4\x9aoJ\xdcZf\xd4\x7f\x01}\'\x1f\x8e\xee_Q\xb4\xad@\x1a(>\x88\xd2F\x14r\x8c\x1aq@n6~1WP\xc8\xb5\x82\x02*\xcf\x95I\xc01\"\x8c_\x8d\xcb-X\x1f:bOmgTC\xe16\xef\xed\x87\xe42\b\xe5)\x99\x1dt\x17\x8d\xdc\xc2\aL\xb9\x90\xdc~\xf4\x12eXR\x89\x14E\x06\xeb<\x1b-\x955\xb4U\xceN\xf4\xb4l\xd5\xd0\xbfc\xa0\xb4{\xa9\\JL@tW\xa8\xf5\x8b\x9a\x9cF\xf5\xe0\xf4\xeeR#\x16r\x80\x91]c\x99\xd0o\x81b.\x82\xcf4\x01j\xe8\xaf[\xc1\b\xc5@n\x8a(qC\x16\x9e\xf8\x11l\xdbLM\xf9\xb7\xd1\xd5\xa1^\xcb=X\xe56\xc4FW\x0f\xe3\xe0\xa0\xb5JBE\xb5F(\t\xd8\x87\xf7\x92id\x8b\xcf\x846Z\x00\x80\x94\x999\xc2\xc7_\xb0\x02\xcb\xa2k\nB\x8a\'s95\x93Z\xf0\xf1\x9d\n\xf1$N\x03\f\x04Z\xfeX6\xf1\xe0\x95\x80(AV\x91\xd8\xa3\xc4?\xebhh|\xe0\xad2#\xcdF\xd8\x89akF\x05\xb5r6Ueh\x03\x82\x91@\xba\x84\xf5\x84\xaa\x1fZ\x11\n\xb9Y\xba;\xf27\xb9\xd3e1\xe5\xf9\xb3\xeb\x82V\x12\xebO\x02\x81\xd0\xfc1\xf5\x9c|\xfc\x1e_\x00\xa7\x89\x9e\xbe@\xcd\a\x82\xa8`\xa4e\xb7\xb8d\xb45>\xd5o\x1a[d\x04t\xb9\xc2Q T]j~\xa5\x12Lo\xfbP\x1fH*\xe5\a|\x1c/\xc3\x84\x01.F6\xba+\x90/\xc5\xc7\x95Tu\xacH\xbd\xb8\xe9\x04\xe6\xaf\xe7\xa6\x10\xb6\xde', 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) fcntl$addseals(r2, 0x409, 0x8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) r4 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x94040000}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x7ffff, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0xc, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x84, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0x16010000}}], 0x98}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000003, 0x11, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8, 0xbb}}, './file0\x00'}) write$P9_RLCREATE(r5, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x20, 0x2, 0x7}, 0xcc4}}, 0x18) kernel console output (not intermixed with test programs): [ 39.295829][ T40] audit: type=1400 audit(1746103027.011:83): avc: denied { read } for pid=5326 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.303329][ T40] audit: type=1400 audit(1746103027.021:84): avc: denied { append } for pid=5326 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.312403][ T40] audit: type=1400 audit(1746103027.021:85): avc: denied { open } for pid=5326 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.321657][ T40] audit: type=1400 audit(1746103027.021:86): avc: denied { getattr } for pid=5326 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:9048' (ED25519) to the list of known hosts. [ 40.001303][ T40] audit: type=1400 audit(1746103027.721:87): avc: denied { name_bind } for pid=5879 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.840934][ T5885] cgroup: Unknown subsys name 'net' [ 41.979260][ T5885] cgroup: Unknown subsys name 'cpuset' [ 41.983775][ T5885] cgroup: Unknown subsys name 'rlimit' [ 42.188475][ T5915] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.825504][ T5885] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.599872][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 45.599887][ T40] audit: type=1400 audit(1746103033.321:105): avc: denied { execmem } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.835688][ T40] audit: type=1400 audit(1746103033.551:106): avc: denied { create } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.841819][ T40] audit: type=1400 audit(1746103033.561:108): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.852508][ T40] audit: type=1400 audit(1746103033.561:109): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="socket:[5894]" dev="sockfs" ino=5894 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.875133][ T40] audit: type=1400 audit(1746103033.551:107): avc: denied { read write } for pid=5927 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.878588][ T5930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.886210][ T5933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.887618][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.889512][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.890579][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.890959][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.891481][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.892674][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.892961][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.893313][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.893667][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.895360][ T5933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.896659][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.898518][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.900326][ T40] audit: type=1400 audit(1746103033.621:110): avc: denied { read } for pid=5935 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.901477][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.902071][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.910505][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.910893][ T40] audit: type=1400 audit(1746103033.621:111): avc: denied { open } for pid=5935 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.913929][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.916375][ T40] audit: type=1400 audit(1746103033.621:112): avc: denied { mounton } for pid=5935 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.920339][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.958257][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.112174][ T40] audit: type=1400 audit(1746103033.831:113): avc: denied { module_request } for pid=5927 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.166860][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 46.204352][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 46.216764][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 46.360660][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.362997][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.366197][ T5927] bridge_slave_0: entered allmulticast mode [ 46.369076][ T5927] bridge_slave_0: entered promiscuous mode [ 46.415003][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.417188][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.419895][ T5927] bridge_slave_1: entered allmulticast mode [ 46.422637][ T5927] bridge_slave_1: entered promiscuous mode [ 46.464352][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.466537][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.468734][ T5928] bridge_slave_0: entered allmulticast mode [ 46.471469][ T5928] bridge_slave_0: entered promiscuous mode [ 46.478654][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.480887][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.483243][ T5928] bridge_slave_1: entered allmulticast mode [ 46.486827][ T5928] bridge_slave_1: entered promiscuous mode [ 46.512749][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.547336][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 46.557489][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.593221][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.621482][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.624310][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.627582][ T5935] bridge_slave_0: entered allmulticast mode [ 46.631162][ T5935] bridge_slave_0: entered promiscuous mode [ 46.637396][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.679744][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.682126][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.684444][ T5935] bridge_slave_1: entered allmulticast mode [ 46.687410][ T5935] bridge_slave_1: entered promiscuous mode [ 46.737942][ T5927] team0: Port device team_slave_0 added [ 46.788641][ T5928] team0: Port device team_slave_0 added [ 46.792927][ T5927] team0: Port device team_slave_1 added [ 46.814268][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.821259][ T5928] team0: Port device team_slave_1 added [ 46.841721][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.844205][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.852366][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.859195][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.880324][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.883045][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.895034][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.941551][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.943811][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.951696][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.997320][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.000165][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.010522][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.019248][ T5935] team0: Port device team_slave_0 added [ 47.021893][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.024253][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.027282][ T5940] bridge_slave_0: entered allmulticast mode [ 47.030429][ T5940] bridge_slave_0: entered promiscuous mode [ 47.034509][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.037970][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.040322][ T5940] bridge_slave_1: entered allmulticast mode [ 47.043013][ T5940] bridge_slave_1: entered promiscuous mode [ 47.073591][ T5935] team0: Port device team_slave_1 added [ 47.122701][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.141036][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.143759][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.154564][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.184016][ T5927] hsr_slave_0: entered promiscuous mode [ 47.186649][ T5927] hsr_slave_1: entered promiscuous mode [ 47.190503][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.193782][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.196980][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.206971][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.237520][ T5928] hsr_slave_0: entered promiscuous mode [ 47.239914][ T5928] hsr_slave_1: entered promiscuous mode [ 47.242071][ T5928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.244559][ T5928] Cannot create hsr debugfs directory [ 47.284080][ T5940] team0: Port device team_slave_0 added [ 47.288299][ T5940] team0: Port device team_slave_1 added [ 47.439610][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.441919][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.451116][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.457447][ T5935] hsr_slave_0: entered promiscuous mode [ 47.459694][ T5935] hsr_slave_1: entered promiscuous mode [ 47.461729][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.464123][ T5935] Cannot create hsr debugfs directory [ 47.474315][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.477414][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.487358][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.651337][ T5940] hsr_slave_0: entered promiscuous mode [ 47.653621][ T5940] hsr_slave_1: entered promiscuous mode [ 47.655736][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.658092][ T5940] Cannot create hsr debugfs directory [ 47.813357][ T5927] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.818556][ T5927] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.834791][ T5927] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.842170][ T5927] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.874309][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.880873][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.885868][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.890387][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.915680][ T5938] Bluetooth: hci0: command tx timeout [ 47.916034][ T5930] Bluetooth: hci1: command tx timeout [ 47.917697][ T5938] Bluetooth: hci2: command tx timeout [ 47.929370][ T5935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.936548][ T5935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.941399][ T5935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.946463][ T5935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.995741][ T5938] Bluetooth: hci3: command tx timeout [ 47.996208][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.002136][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.006314][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.011258][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.031704][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.068062][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.089080][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.092528][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.094994][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.116697][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.118951][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.139375][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.150184][ T1222] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.152510][ T1222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.163292][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.169979][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.180713][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.183072][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.203131][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.210941][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.213259][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.217731][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.220347][ T40] audit: type=1400 audit(1746103035.941:114): avc: denied { sys_module } for pid=5927 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.229079][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.231357][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.247007][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.249264][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.252813][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.255103][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.290924][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.296793][ T5935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.342184][ T5927] veth0_vlan: entered promiscuous mode [ 48.354194][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.358239][ T5927] veth1_vlan: entered promiscuous mode [ 48.379169][ T5927] veth0_macvtap: entered promiscuous mode [ 48.392220][ T5927] veth1_macvtap: entered promiscuous mode [ 48.399661][ T5928] veth0_vlan: entered promiscuous mode [ 48.409715][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.413123][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.418481][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.425048][ T5928] veth1_vlan: entered promiscuous mode [ 48.432838][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.436854][ T5927] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.439853][ T5927] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.442517][ T5927] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.445774][ T5927] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.483146][ T5928] veth0_macvtap: entered promiscuous mode [ 48.507989][ T5928] veth1_macvtap: entered promiscuous mode [ 48.513411][ T5940] veth0_vlan: entered promiscuous mode [ 48.521249][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.523827][ T5935] veth0_vlan: entered promiscuous mode [ 48.523835][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.538179][ T5940] veth1_vlan: entered promiscuous mode [ 48.548260][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.550883][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.551938][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.558709][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.564404][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.569915][ T5935] veth1_vlan: entered promiscuous mode [ 48.577154][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.581393][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.586233][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.595611][ T5928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.598391][ T5928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.601139][ T5928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.603914][ T5928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.609852][ T5927] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.616670][ T5940] veth0_macvtap: entered promiscuous mode [ 48.626530][ T5935] veth0_macvtap: entered promiscuous mode [ 48.633769][ T5935] veth1_macvtap: entered promiscuous mode [ 48.637971][ T5940] veth1_macvtap: entered promiscuous mode [ 48.659170][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.662355][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.666460][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.669724][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.673737][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.683841][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.688027][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.691140][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.694464][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.697747][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.700935][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.704826][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.714549][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.720370][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.723733][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.727651][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.731752][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.734718][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.738224][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.741254][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.744520][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.748161][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.751401][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.755998][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.760603][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.761616][ T5940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.763198][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.766717][ T5940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.771014][ T5940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.773819][ T5940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.782559][ T5935] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.785640][ T5935] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.788314][ T5935] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.789210][ T5998] syz.0.6 (5998): attempted to duplicate a private mapping with mremap. This is not supported. [ 48.790903][ T5935] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.817346][ T1222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.819937][ T1222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.846138][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.850269][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.850358][ T6004] process 'syz.0.7' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 48.870679][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.873602][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.898192][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.901591][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.918119][ T6008] netlink: 'syz.1.2': attribute type 23 has an invalid length. [ 48.918728][ T6006] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 48.921386][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.926606][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.967882][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 48.971131][ T6010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6010 comm=syz.2.3 [ 48.974981][ T6013] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET) [ 48.981770][ T6016] Zero length message leads to an empty skb [ 49.095698][ T6030] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 49.098631][ T6033] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 49.281471][ T6048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6048 comm=syz.2.19 [ 49.481287][ T6072] netlink: 80 bytes leftover after parsing attributes in process `syz.2.27'. [ 49.512840][ T1222] Bluetooth: hci4: Frame reassembly failed (-84) [ 49.531263][ T6079] xt_NFQUEUE: number of total queues is 0 [ 49.623627][ T6087] warning: `syz.2.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.952356][ T6093] overlay: Unknown parameter 'smackfsdef' [ 49.954683][ T6093] overlay: Unknown parameter 'subj_user' [ 49.958077][ T6093] capability: warning: `syz.0.34' uses deprecated v2 capabilities in a way that may be insecure [ 49.989653][ T9] IPVS: starting estimator thread 0... [ 50.006145][ T5930] Bluetooth: hci1: command tx timeout [ 50.007879][ T5930] Bluetooth: hci2: command tx timeout [ 50.008418][ T68] Bluetooth: hci0: command tx timeout [ 50.075223][ T6096] IPVS: using max 44 ests per chain, 105600 per kthread [ 50.076394][ T68] Bluetooth: hci3: command tx timeout [ 50.286026][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 50.289793][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.39'. [ 50.316801][ T6113] mkiss: ax0: crc mode is auto. [ 50.336192][ T6113] ip6t_rpfilter: unknown options [ 50.633141][ T6125] netlink: 'syz.2.45': attribute type 64 has an invalid length. [ 50.636266][ T6125] netlink: 'syz.2.45': attribute type 4 has an invalid length. [ 50.639250][ T6125] netlink: 152 bytes leftover after parsing attributes in process `syz.2.45'. [ 50.701405][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 50.701419][ T40] audit: type=1400 audit(1746103038.421:216): avc: denied { write } for pid=6129 comm="syz.2.47" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.702123][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 50.798967][ T40] audit: type=1400 audit(1746103038.521:217): avc: denied { accept } for pid=6134 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.852736][ T40] audit: type=1400 audit(1746103038.571:218): avc: denied { map } for pid=6134 comm="syz.2.48" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 50.997045][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 51.090349][ T40] audit: type=1400 audit(1746103038.811:219): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.177020][ T40] audit: type=1400 audit(1746103038.901:220): avc: denied { ioctl } for pid=6146 comm="syz.2.52" path="socket:[9610]" dev="sockfs" ino=9610 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.179825][ T6147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.52'. [ 51.189358][ T40] audit: type=1400 audit(1746103038.921:221): avc: denied { ioctl } for pid=6146 comm="syz.2.52" path="socket:[9613]" dev="sockfs" ino=9613 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.214412][ T40] audit: type=1400 audit(1746103038.931:222): avc: denied { connect } for pid=6148 comm="syz.2.53" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.222728][ T40] audit: type=1400 audit(1746103038.941:223): avc: denied { write } for pid=6148 comm="syz.2.53" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.281729][ T40] audit: type=1400 audit(1746103039.001:224): avc: denied { create } for pid=6150 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.283787][ T6151] lo speed is unknown, defaulting to 1000 [ 51.290398][ T40] audit: type=1400 audit(1746103039.001:225): avc: denied { write } for pid=6150 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.292747][ T6151] lo speed is unknown, defaulting to 1000 [ 51.302543][ T6151] lo speed is unknown, defaulting to 1000 [ 51.309071][ T6151] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.315616][ T6151] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 51.330381][ T6151] lo speed is unknown, defaulting to 1000 [ 51.333080][ T6151] lo speed is unknown, defaulting to 1000 [ 51.336739][ T6151] lo speed is unknown, defaulting to 1000 [ 51.340339][ T6151] lo speed is unknown, defaulting to 1000 [ 51.515083][ T5938] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 51.628544][ T6166] 9pnet_fd: Insufficient options for proto=fd [ 51.635176][ T1336] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 51.796867][ T1336] usb 6-1: config 1 interface 0 has no altsetting 0 [ 51.800560][ T1336] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 51.803437][ T1336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.806097][ T1336] usb 6-1: Product: syz [ 51.807466][ T1336] usb 6-1: Manufacturer: syz [ 51.808934][ T1336] usb 6-1: SerialNumber: syz [ 52.075137][ T5938] Bluetooth: hci0: command tx timeout [ 52.075634][ T68] Bluetooth: hci1: command tx timeout [ 52.075688][ T5930] Bluetooth: hci2: command tx timeout [ 52.079402][ T6176] program syz.2.61 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.155024][ T68] Bluetooth: hci3: command tx timeout [ 52.264837][ T6183] FAULT_INJECTION: forcing a failure. [ 52.264837][ T6183] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.269356][ T6183] CPU: 2 UID: 0 PID: 6183 Comm: syz.0.64 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 52.269379][ T6183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.269389][ T6183] Call Trace: [ 52.269394][ T6183] [ 52.269401][ T6183] dump_stack_lvl+0x16c/0x1f0 [ 52.269425][ T6183] should_fail_ex+0x512/0x640 [ 52.269449][ T6183] _copy_from_user+0x2e/0xd0 [ 52.269473][ T6183] copy_msghdr_from_user+0x98/0x160 [ 52.269489][ T6183] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 52.269538][ T6183] ___sys_sendmsg+0xfe/0x1d0 [ 52.269556][ T6183] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.269599][ T6183] __sys_sendmsg+0x16d/0x220 [ 52.269615][ T6183] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.269637][ T6183] ? rcu_is_watching+0x12/0xc0 [ 52.269662][ T6183] do_syscall_64+0xcd/0x260 [ 52.269684][ T6183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.269699][ T6183] RIP: 0033:0x7f24c798e969 [ 52.269712][ T6183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.269727][ T6183] RSP: 002b:00007f24c887c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.269743][ T6183] RAX: ffffffffffffffda RBX: 00007f24c7bb5fa0 RCX: 00007f24c798e969 [ 52.269753][ T6183] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 52.269762][ T6183] RBP: 00007f24c887c090 R08: 0000000000000000 R09: 0000000000000000 [ 52.269772][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.269781][ T6183] R13: 0000000000000000 R14: 00007f24c7bb5fa0 R15: 00007fff0fa5cb38 [ 52.269803][ T6183] [ 52.338569][ T835] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.397951][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.402198][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.406813][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.409794][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.413792][ T6188] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.423484][ T1336] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 52.509549][ T835] usb 7-1: config 0 has no interfaces? [ 52.511764][ T835] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 52.515590][ T835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.520676][ T835] usb 7-1: config 0 descriptor?? [ 52.728802][ T6176] overlayfs: failed to resolve './file1': -2 [ 52.735398][ T5970] usb 7-1: USB disconnect, device number 2 [ 52.791424][ T6208] netlink: 'syz.1.55': attribute type 2 has an invalid length. [ 53.511660][ T6235] xt_hashlimit: size too large, truncated to 1048576 [ 53.567099][ T6241] Bluetooth: MGMT ver 1.23 [ 53.727928][ T6266] FAULT_INJECTION: forcing a failure. [ 53.727928][ T6266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.732065][ T6266] CPU: 2 UID: 0 PID: 6266 Comm: syz.0.91 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 53.732080][ T6266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.732086][ T6266] Call Trace: [ 53.732090][ T6266] [ 53.732094][ T6266] dump_stack_lvl+0x16c/0x1f0 [ 53.732112][ T6266] should_fail_ex+0x512/0x640 [ 53.732128][ T6266] _copy_from_iter+0x2a4/0x15b0 [ 53.732143][ T6266] ? __alloc_skb+0x200/0x380 [ 53.732160][ T6266] ? __pfx__copy_from_iter+0x10/0x10 [ 53.732175][ T6266] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 53.732190][ T6266] netlink_sendmsg+0x829/0xdd0 [ 53.732203][ T6266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.732219][ T6266] ____sys_sendmsg+0xa95/0xc70 [ 53.732232][ T6266] ? copy_msghdr_from_user+0x10a/0x160 [ 53.732241][ T6266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.732260][ T6266] ___sys_sendmsg+0x134/0x1d0 [ 53.732270][ T6266] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.732294][ T6266] __sys_sendmsg+0x16d/0x220 [ 53.732303][ T6266] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.732316][ T6266] ? rcu_is_watching+0x12/0xc0 [ 53.732332][ T6266] do_syscall_64+0xcd/0x260 [ 53.732346][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.732356][ T6266] RIP: 0033:0x7f24c798e969 [ 53.732365][ T6266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.732375][ T6266] RSP: 002b:00007f24c887c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.732385][ T6266] RAX: ffffffffffffffda RBX: 00007f24c7bb5fa0 RCX: 00007f24c798e969 [ 53.732392][ T6266] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 53.732398][ T6266] RBP: 00007f24c887c090 R08: 0000000000000000 R09: 0000000000000000 [ 53.732403][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.732409][ T6266] R13: 0000000000000000 R14: 00007f24c7bb5fa0 R15: 00007fff0fa5cb38 [ 53.732421][ T6266] [ 53.795043][ C2] vkms_vblank_simulate: vblank timer overrun [ 54.155037][ T68] Bluetooth: hci1: command tx timeout [ 54.166804][ T68] Bluetooth: hci0: command tx timeout [ 54.235468][ T68] Bluetooth: hci3: command tx timeout [ 54.397872][ T5941] usb 6-1: USB disconnect, device number 2 [ 54.403214][ T5941] usblp0: removed [ 54.406640][ T6304] ip6erspan0: entered promiscuous mode [ 54.413753][ T6306] binder: 6305:6306 ioctl c00c620f 200000000040 returned -22 [ 54.417543][ T6306] overlayfs: failed to resolve './file2': -2 [ 54.430367][ T6308] FAULT_INJECTION: forcing a failure. [ 54.430367][ T6308] name failslab, interval 1, probability 0, space 0, times 0 [ 54.434229][ T6308] CPU: 3 UID: 0 PID: 6308 Comm: syz.2.100 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 54.434243][ T6308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.434249][ T6308] Call Trace: [ 54.434254][ T6308] [ 54.434258][ T6308] dump_stack_lvl+0x16c/0x1f0 [ 54.434275][ T6308] should_fail_ex+0x512/0x640 [ 54.434291][ T6308] should_failslab+0xc2/0x120 [ 54.434302][ T6308] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 54.434319][ T6308] ? skb_clone+0x190/0x3f0 [ 54.434332][ T6308] skb_clone+0x190/0x3f0 [ 54.434342][ T6308] netlink_deliver_tap+0xabd/0xd30 [ 54.434356][ T6308] netlink_unicast+0x5df/0x7f0 [ 54.434368][ T6308] ? __pfx_netlink_unicast+0x10/0x10 [ 54.434383][ T6308] netlink_sendmsg+0x8d1/0xdd0 [ 54.434396][ T6308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.434412][ T6308] ____sys_sendmsg+0xa95/0xc70 [ 54.434425][ T6308] ? copy_msghdr_from_user+0x10a/0x160 [ 54.434435][ T6308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 54.434453][ T6308] ___sys_sendmsg+0x134/0x1d0 [ 54.434463][ T6308] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.434487][ T6308] __sys_sendmsg+0x16d/0x220 [ 54.434497][ T6308] ? __pfx___sys_sendmsg+0x10/0x10 [ 54.434515][ T6308] do_syscall_64+0xcd/0x260 [ 54.434529][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.434539][ T6308] RIP: 0033:0x7f698e38e969 [ 54.434548][ T6308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.434557][ T6308] RSP: 002b:00007f698f220038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.434567][ T6308] RAX: ffffffffffffffda RBX: 00007f698e5b5fa0 RCX: 00007f698e38e969 [ 54.434574][ T6308] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 54.434580][ T6308] RBP: 00007f698f220090 R08: 0000000000000000 R09: 0000000000000000 [ 54.434585][ T6308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.434591][ T6308] R13: 0000000000000000 R14: 00007f698e5b5fa0 R15: 00007ffd5cbe9098 [ 54.434603][ T6308] [ 54.577835][ T6315] dvmrp0: entered allmulticast mode [ 54.592979][ T6318] netlink: 'syz.2.104': attribute type 4 has an invalid length. [ 54.786462][ T6326] netlink: 'syz.2.104': attribute type 4 has an invalid length. [ 54.909221][ T6336] FAULT_INJECTION: forcing a failure. [ 54.909221][ T6336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.913680][ T6336] CPU: 0 UID: 0 PID: 6336 Comm: syz.0.109 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 54.913694][ T6336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.913700][ T6336] Call Trace: [ 54.913705][ T6336] [ 54.913709][ T6336] dump_stack_lvl+0x16c/0x1f0 [ 54.913731][ T6336] should_fail_ex+0x512/0x640 [ 54.913747][ T6336] _copy_to_user+0x32/0xd0 [ 54.913763][ T6336] simple_read_from_buffer+0xcb/0x170 [ 54.913779][ T6336] proc_fail_nth_read+0x197/0x270 [ 54.913795][ T6336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.913811][ T6336] ? rw_verify_area+0xcf/0x680 [ 54.913825][ T6336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.913840][ T6336] vfs_read+0x1de/0xc70 [ 54.913856][ T6336] ? __pfx___mutex_lock+0x10/0x10 [ 54.913869][ T6336] ? __pfx_vfs_read+0x10/0x10 [ 54.913887][ T6336] ? __fget_files+0x20e/0x3c0 [ 54.913906][ T6336] ksys_read+0x12a/0x240 [ 54.913920][ T6336] ? __pfx_ksys_read+0x10/0x10 [ 54.913934][ T6336] ? rcu_is_watching+0x12/0xc0 [ 54.913950][ T6336] do_syscall_64+0xcd/0x260 [ 54.913964][ T6336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.913974][ T6336] RIP: 0033:0x7f24c798d37c [ 54.913983][ T6336] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 54.913993][ T6336] RSP: 002b:00007f24c887c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.914003][ T6336] RAX: ffffffffffffffda RBX: 00007f24c7bb5fa0 RCX: 00007f24c798d37c [ 54.914009][ T6336] RDX: 000000000000000f RSI: 00007f24c887c0a0 RDI: 0000000000000005 [ 54.914015][ T6336] RBP: 00007f24c887c090 R08: 0000000000000000 R09: 0000000000000000 [ 54.914021][ T6336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.914026][ T6336] R13: 0000000000000000 R14: 00007f24c7bb5fa0 R15: 00007fff0fa5cb38 [ 54.914039][ T6336] [ 55.144509][ T6343] lo speed is unknown, defaulting to 1000 [ 55.315121][ T6349] hsr_slave_0: left promiscuous mode [ 55.318309][ T6349] hsr_slave_1: left promiscuous mode [ 55.478375][ T6357] syz.1.115: attempt to access beyond end of device [ 55.478375][ T6357] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 55.484052][ T6357] qnx6: unable to read the first superblock [ 55.486731][ T6357] syz.1.115: attempt to access beyond end of device [ 55.486731][ T6357] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 55.490662][ T6357] qnx6: unable to read the first superblock [ 55.492578][ T6357] qnx6: unable to read the first superblock [ 55.589896][ T6362] xt_hashlimit: size too large, truncated to 1048576 [ 55.720767][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 55.720779][ T40] audit: type=1400 audit(1746103043.441:283): avc: denied { write } for pid=6368 comm="syz.2.119" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 55.721351][ T6369] syzkaller1: entered promiscuous mode [ 55.731632][ T6369] syzkaller1: entered allmulticast mode [ 55.746606][ T40] audit: type=1400 audit(1746103043.471:284): avc: denied { create } for pid=6370 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.752754][ T40] audit: type=1400 audit(1746103043.471:285): avc: denied { ioctl } for pid=6370 comm="syz.3.120" path="socket:[11393]" dev="sockfs" ino=11393 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.822496][ T40] audit: type=1400 audit(1746103043.541:286): avc: denied { create } for pid=6375 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 55.823294][ T6376] cgroup: Name too long [ 56.138863][ T6380] ======================================================= [ 56.138863][ T6380] WARNING: The mand mount option has been deprecated and [ 56.138863][ T6380] and is ignored by this kernel. Remove the mand [ 56.138863][ T6380] option from the mount to silence this warning. [ 56.138863][ T6380] ======================================================= [ 56.241015][ T40] audit: type=1400 audit(1746103043.961:287): avc: denied { bind } for pid=6385 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.247157][ T40] audit: type=1400 audit(1746103043.961:288): avc: denied { setopt } for pid=6385 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.251683][ T6387] netlink: 32 bytes leftover after parsing attributes in process `syz.2.126'. [ 56.253165][ T40] audit: type=1400 audit(1746103043.971:289): avc: denied { write } for pid=6385 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.256312][ T6387] netlink: 32 bytes leftover after parsing attributes in process `syz.2.126'. [ 56.268922][ T6388] lo speed is unknown, defaulting to 1000 [ 56.299253][ T40] audit: type=1400 audit(1746103044.021:290): avc: denied { write } for pid=6386 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.307189][ T40] audit: type=1400 audit(1746103044.031:291): avc: denied { bind } for pid=6391 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.316254][ T40] audit: type=1400 audit(1746103044.031:292): avc: denied { name_bind } for pid=6391 comm="syz.2.127" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 56.420195][ T6412] bond0: entered promiscuous mode [ 56.421860][ T6412] bond_slave_0: entered promiscuous mode [ 56.423772][ T6412] bond_slave_1: entered promiscuous mode [ 56.426944][ T6412] batadv0: entered promiscuous mode [ 56.428981][ T6412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.431375][ T6412] Cannot create hsr debugfs directory [ 56.433759][ T6412] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 56.438528][ T6412] bond0: left promiscuous mode [ 56.440099][ T6412] bond_slave_0: left promiscuous mode [ 56.442138][ T6412] bond_slave_1: left promiscuous mode [ 56.444740][ T6412] batadv0: left promiscuous mode [ 56.469879][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.134'. [ 56.472891][ T6419] netlink: 224 bytes leftover after parsing attributes in process `syz.1.134'. [ 56.474043][ T6420] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 56.480238][ T6420] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 57.285576][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.291329][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.293672][ T6463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.507406][ T6482] /dev/sr0: Can't open blockdev [ 57.511373][ T6487] program syz.3.156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.575772][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 57.618281][ T6503] kvm: emulating exchange as write [ 57.681556][ T6508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.748010][ T6514] x_tables: ip6_tables: NETMAP target: only valid in nat table, not rpc_pipefs [ 57.833844][ T6531] can: request_module (can-proto-0) failed. [ 57.844773][ T6536] input: syz1 as /devices/virtual/input/input5 [ 58.073898][ T6548] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 58.141009][ T6551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.172'. [ 58.167584][ T6555] xt_hashlimit: size too large, truncated to 1048576 [ 58.178002][ T6557] netlink: 'syz.1.174': attribute type 1 has an invalid length. [ 58.188724][ T6557] bond2: entered promiscuous mode [ 58.190367][ T6557] bond2: entered allmulticast mode [ 58.210436][ T6557] ip6gretap1: entered allmulticast mode [ 58.214113][ T6557] bond2: (slave ip6gretap1): making interface the new active one [ 58.216807][ T6557] ip6gretap1: entered promiscuous mode [ 58.219601][ T6557] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 58.334648][ T6564] netlink: 'syz.1.176': attribute type 2 has an invalid length. [ 58.343191][ T6564] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 58.549604][ T6575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6575 comm=syz.2.180 [ 58.560715][ T6575] IPVS: length: 24 != 9240 [ 58.759443][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 58.762207][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'. [ 58.907734][ T6590] loop6: detected capacity change from 0 to 63 [ 58.915283][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.919146][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.922444][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.926097][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.929537][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.933069][ T6590] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.936908][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.939567][ T6590] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.939618][ T6117] Buffer I/O error on dev loop6, logical block 3, async page read [ 58.962322][ T6593] netlink: 'syz.2.186': attribute type 2 has an invalid length. [ 58.962389][ T5930] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 58.970413][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: kworker/u33:2 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 58.970439][ T5930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.970450][ T5930] Workqueue: hci3 hci_rx_work [ 58.970500][ T5930] Call Trace: [ 58.970506][ T5930] [ 58.970513][ T5930] dump_stack_lvl+0x16c/0x1f0 [ 58.970538][ T5930] sysfs_warn_dup+0x7f/0xa0 [ 58.970568][ T5930] sysfs_create_dir_ns+0x24b/0x2b0 [ 58.970593][ T5930] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 58.970614][ T5930] ? find_held_lock+0x2b/0x80 [ 58.970639][ T5930] ? do_raw_spin_unlock+0x172/0x230 [ 58.970657][ T5930] kobject_add_internal+0x2c4/0x9b0 [ 58.970678][ T5930] kobject_add+0x16e/0x240 [ 58.970692][ T5930] ? __pfx_kobject_add+0x10/0x10 [ 58.970708][ T5930] ? do_raw_spin_unlock+0x172/0x230 [ 58.970719][ T5930] ? kobject_put+0xab/0x5a0 [ 58.970737][ T5930] device_add+0x288/0x1a70 [ 58.970757][ T5930] ? __pfx_dev_set_name+0x10/0x10 [ 58.970771][ T5930] ? __pfx_device_add+0x10/0x10 [ 58.970785][ T5930] ? mgmt_send_event_skb+0x2fb/0x460 [ 58.970806][ T5930] hci_conn_add_sysfs+0x17e/0x230 [ 58.970824][ T5930] le_conn_complete_evt+0x1075/0x1d70 [ 58.970844][ T5930] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 58.970859][ T5930] ? hci_event_packet+0x43c/0x1190 [ 58.970879][ T5930] hci_le_conn_complete_evt+0x23c/0x370 [ 58.970898][ T5930] hci_le_meta_evt+0x2f3/0x5e0 [ 58.970913][ T5930] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 58.970934][ T5930] hci_event_packet+0x669/0x1190 [ 58.970949][ T5930] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 58.970965][ T5930] ? __pfx_hci_event_packet+0x10/0x10 [ 58.970980][ T5930] ? kcov_remote_start+0x3c9/0x6d0 [ 58.970992][ T5930] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.971015][ T5930] hci_rx_work+0x2c5/0x16b0 [ 58.971039][ T5930] ? rcu_is_watching+0x12/0xc0 [ 58.971062][ T5930] process_one_work+0x9cc/0x1b70 [ 58.971089][ T5930] ? __pfx_process_one_work+0x10/0x10 [ 58.971114][ T5930] ? assign_work+0x1a0/0x250 [ 58.971134][ T5930] worker_thread+0x6c8/0xf10 [ 58.971163][ T5930] ? __pfx_worker_thread+0x10/0x10 [ 58.971179][ T5930] kthread+0x3c2/0x780 [ 58.971195][ T5930] ? __pfx_kthread+0x10/0x10 [ 58.971208][ T5930] ? __pfx_kthread+0x10/0x10 [ 58.971221][ T5930] ? __pfx_kthread+0x10/0x10 [ 58.971235][ T5930] ? __pfx_kthread+0x10/0x10 [ 58.971249][ T5930] ? rcu_is_watching+0x12/0xc0 [ 58.971267][ T5930] ? __pfx_kthread+0x10/0x10 [ 58.971283][ T5930] ret_from_fork+0x45/0x80 [ 58.971297][ T5930] ? __pfx_kthread+0x10/0x10 [ 58.971312][ T5930] ret_from_fork_asm+0x1a/0x30 [ 58.971345][ T5930] [ 58.971360][ T5930] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 58.984793][ T6595] loop2: detected capacity change from 0 to 7 [ 58.985823][ T5930] Bluetooth: hci3: failed to register connection device [ 58.989798][ T6117] Dev loop2: unable to read RDB block 7 [ 59.072391][ T6117] loop2: unable to read partition table [ 59.075853][ T6117] loop2: partition table beyond EOD, truncated [ 59.081940][ T6595] Dev loop2: unable to read RDB block 7 [ 59.084041][ T6595] loop2: unable to read partition table [ 59.087178][ T6595] loop2: partition table beyond EOD, truncated [ 59.089408][ T6595] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 59.154773][ T6609] xt_hashlimit: size too large, truncated to 1048576 [ 59.265712][ T6333] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.385060][ T58] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 59.415052][ T6333] usb 6-1: Using ep0 maxpacket: 8 [ 59.419565][ T6333] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 59.422205][ T6333] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 59.424955][ T6333] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 59.427880][ T6333] usb 6-1: config 250 has no interface number 0 [ 59.430014][ T6333] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 59.433655][ T6333] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 59.439475][ T6333] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 59.444685][ T6333] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 59.448258][ T6333] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 59.452712][ T6333] usb 6-1: config 250 interface 228 has no altsetting 0 [ 59.456724][ T6333] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 59.459750][ T6333] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 59.462475][ T6333] usb 6-1: Product: syz [ 59.463903][ T6333] usb 6-1: SerialNumber: syz [ 59.470517][ T6333] hub 6-1:250.228: bad descriptor, ignoring hub [ 59.472978][ T6333] hub 6-1:250.228: probe with driver hub failed with error -5 [ 59.534992][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 59.540258][ T58] usb 7-1: unable to get BOS descriptor or descriptor too short [ 59.543773][ T58] usb 7-1: config index 0 descriptor too short (expected 34347, got 43) [ 59.547139][ T58] usb 7-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 59.550778][ T58] usb 7-1: config 31 has an invalid descriptor of length 174, skipping remainder of the config [ 59.554325][ T58] usb 7-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 59.557341][ T58] usb 7-1: config 31 has no interface number 0 [ 59.559342][ T58] usb 7-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 59.563930][ T58] usb 7-1: config 31 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 119, changing to 7 [ 59.568571][ T58] usb 7-1: config 31 interface 81 altsetting 3 endpoint 0x83 has invalid maxpacket 34394, setting to 1024 [ 59.572806][ T58] usb 7-1: config 31 interface 81 has no altsetting 0 [ 59.579019][ T58] usb 7-1: string descriptor 0 read error: -22 [ 59.581595][ T58] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 59.585490][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.590928][ T6618] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 59.594182][ T6618] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.193'. [ 59.599723][ T58] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:31.81/input/input8 [ 59.686923][ T6333] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 59.710214][ T6624] loop6: detected capacity change from 0 to 63 [ 59.714350][ T6189] Buffer I/O error on dev loop6, logical block 0, async page read [ 59.717530][ T6333] usb 6-1: USB disconnect, device number 3 [ 59.719914][ T6333] usblp0: removed [ 59.870782][ T5941] usb 7-1: USB disconnect, device number 3 [ 59.937220][ T6634] netlink: 132 bytes leftover after parsing attributes in process `syz.2.198'. [ 59.940803][ T6634] fuse: Unknown parameter 'rootm' [ 60.032470][ T6644] kAFS: unparsable volume name [ 60.037893][ T6644] fuse: Bad value for 'fd' [ 60.059885][ T6651] loop6: detected capacity change from 0 to 63 [ 60.155092][ T68] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 60.157030][ T5930] Bluetooth: hci4: command 0xfc11 tx timeout [ 60.171405][ T6670] overlayfs: failed to resolve './file0': -2 [ 60.177239][ T6553] sp0: Synchronizing with TNC [ 60.229838][ T6677] syz.2.206: attempt to access beyond end of device [ 60.229838][ T6677] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 60.234688][ T6677] befs: (nbd2): unable to read superblock [ 60.355591][ T6680] ALSA: mixer_oss: invalid OSS volume '' [ 60.431982][ T6710] loop6: detected capacity change from 0 to 63 [ 60.435441][ T6694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.440578][ T6693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.853568][ T6738] binder: BINDER_SET_CONTEXT_MGR already set [ 60.856893][ T6738] binder: 6737:6738 ioctl 4018620d 2000000000c0 returned -16 [ 61.024093][ T40] kauditd_printk_skb: 88 callbacks suppressed [ 61.024104][ T40] audit: type=1400 audit(1746103048.741:381): avc: denied { create } for pid=6749 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.032687][ T40] audit: type=1400 audit(1746103048.741:382): avc: denied { write } for pid=6749 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.038460][ T40] audit: type=1400 audit(1746103048.751:383): avc: denied { getopt } for pid=6749 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.065855][ T6752] bond0: entered promiscuous mode [ 61.067525][ T6752] bond_slave_0: entered promiscuous mode [ 61.069389][ T6752] bond_slave_1: entered promiscuous mode [ 61.072129][ T6752] batadv0: entered promiscuous mode [ 61.076039][ T6752] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 61.126049][ T40] audit: type=1400 audit(1746103048.851:384): avc: denied { execute } for pid=6753 comm="syz.3.229" name="file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.134361][ T40] audit: type=1400 audit(1746103048.851:385): avc: denied { execute_no_trans } for pid=6753 comm="syz.3.229" path="/41/file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.151490][ T6756] xt_l2tp: v2 tid > 0xffff: 150994944 [ 61.259670][ T40] audit: type=1400 audit(1746103048.981:386): avc: denied { setopt } for pid=6765 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.275972][ T40] audit: type=1400 audit(1746103049.001:387): avc: denied { search } for pid=5326 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.469319][ T40] audit: type=1400 audit(1746103049.191:388): avc: denied { getopt } for pid=6776 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.479930][ T6777] __nla_validate_parse: 4 callbacks suppressed [ 61.479941][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 61.485561][ T6777] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 61.487968][ T6777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.609080][ T40] audit: type=1400 audit(1746103049.331:389): avc: denied { view } for pid=6783 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 61.645027][ T5941] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 61.648289][ T6787] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 61.650907][ T6787] NCSI netlink: No device for ifindex 0 [ 61.708754][ T1140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.773946][ T1140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.782181][ T40] audit: type=1400 audit(1746103049.501:390): avc: denied { write } for pid=6793 comm="syz.2.244" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 61.796920][ T5941] usb 8-1: config 4 has an invalid interface number: 135 but max is 1 [ 61.799522][ T5941] usb 8-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 61.802240][ T5941] usb 8-1: config 4 has an invalid interface number: 129 but max is 1 [ 61.804799][ T5941] usb 8-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 61.807767][ T5941] usb 8-1: config 4 has an invalid interface number: 123 but max is 1 [ 61.810383][ T5941] usb 8-1: config 4 has 3 interfaces, different from the descriptor's value: 2 [ 61.813210][ T5941] usb 8-1: config 4 has no interface number 0 [ 61.815370][ T5941] usb 8-1: config 4 has no interface number 1 [ 61.817401][ T5941] usb 8-1: config 4 has no interface number 2 [ 61.819339][ T5941] usb 8-1: config 4 interface 135 altsetting 127 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 61.822871][ T5941] usb 8-1: config 4 interface 135 altsetting 127 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 61.826557][ T5941] usb 8-1: config 4 interface 135 altsetting 127 has 4 endpoint descriptors, different from the interface descriptor's value: 12 [ 61.830684][ T5941] usb 8-1: too many endpoints for config 4 interface 129 altsetting 203: 92, using maximum allowed: 30 [ 61.834136][ T5941] usb 8-1: config 4 interface 129 altsetting 203 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 61.834349][ T6797] bad cache= option: noneÿÿ [ 61.834349][ T6797] [ 61.837658][ T5941] usb 8-1: config 4 interface 129 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 61.837674][ T5941] usb 8-1: config 4 interface 129 altsetting 203 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 61.837687][ T5941] usb 8-1: config 4 interface 129 altsetting 203 has an endpoint descriptor with address 0xA8, changing to 0x88 [ 61.837699][ T5941] usb 8-1: config 4 interface 129 altsetting 203 endpoint 0x88 has an invalid bInterval 195, changing to 7 [ 61.837712][ T5941] usb 8-1: config 4 interface 129 altsetting 203 endpoint 0x88 has invalid maxpacket 49974, setting to 1024 [ 61.837724][ T5941] usb 8-1: config 4 interface 129 altsetting 203 has a duplicate endpoint with address 0x2, skipping [ 61.837735][ T5941] usb 8-1: config 4 interface 129 altsetting 203 has a duplicate endpoint with address 0xB, skipping [ 61.837746][ T5941] usb 8-1: config 4 interface 129 altsetting 203 has a duplicate endpoint with address 0x8, skipping [ 61.837758][ T5941] usb 8-1: config 4 interface 129 altsetting 203 has 9 endpoint descriptors, different from the interface descriptor's value: 92 [ 61.837778][ T5941] usb 8-1: config 4 interface 123 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 61.837790][ T5941] usb 8-1: config 4 interface 123 altsetting 9 endpoint 0x3 has an invalid bInterval 222, changing to 7 [ 61.837802][ T5941] usb 8-1: config 4 interface 123 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 61.837812][ T5941] usb 8-1: config 4 interface 123 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 61.837823][ T5941] usb 8-1: config 4 interface 135 has no altsetting 0 [ 61.837832][ T5941] usb 8-1: config 4 interface 129 has no altsetting 0 [ 61.837840][ T5941] usb 8-1: config 4 interface 123 has no altsetting 0 [ 61.846245][ T5941] usb 8-1: New USB device found, idVendor=1737, idProduct=0079, bcdDevice=25.1e [ 61.851121][ T6797] CIFS: VFS: bad cache= option: noneÿÿ [ 61.853692][ T5941] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.853704][ T5941] usb 8-1: Product: syz [ 61.853711][ T5941] usb 8-1: Manufacturer: syz [ 61.853719][ T5941] usb 8-1: SerialNumber: syz [ 61.885989][ T5930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.917913][ T1140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.918508][ T5930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.927793][ T5930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.931282][ T5930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.934041][ T5930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.961027][ T6799] lo speed is unknown, defaulting to 1000 [ 62.002880][ T1140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.057237][ T6773] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 62.062693][ T6773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.066165][ T6799] chnl_net:caif_netlink_parms(): no params data found [ 62.079607][ T6773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.176297][ T5941] usb 8-1: USB disconnect, device number 2 [ 62.191536][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.192410][ T6117] udevd[6117]: setting mode of /dev/bus/usb/008/002 to 020664 failed: No such file or directory [ 62.195637][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.197978][ T6117] udevd[6117]: setting owner of /dev/bus/usb/008/002 to uid=0, gid=0 failed: No such file or directory [ 62.199612][ T6799] bridge_slave_0: entered allmulticast mode [ 62.200354][ T6799] bridge_slave_0: entered promiscuous mode [ 62.234418][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.238064][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.240455][ T6799] bridge_slave_1: entered allmulticast mode [ 62.243095][ T6799] bridge_slave_1: entered promiscuous mode [ 62.274693][ T6799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.278489][ T1140] bridge_slave_1: left allmulticast mode [ 62.280468][ T1140] bridge_slave_1: left promiscuous mode [ 62.283094][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.287967][ T1140] bridge_slave_0: left allmulticast mode [ 62.289969][ T1140] bridge_slave_0: left promiscuous mode [ 62.291935][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.314994][ T1345] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 62.476553][ T1345] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.479916][ T1345] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.482979][ T1345] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 62.485990][ T1345] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.489797][ T1345] usb 7-1: config 0 descriptor?? [ 62.529040][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.534228][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.539103][ T1140] bond0 (unregistering): Released all slaves [ 62.556712][ T6799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.620396][ T6799] team0: Port device team_slave_0 added [ 62.628871][ T6799] team0: Port device team_slave_1 added [ 62.730429][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.732698][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.741104][ T6799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.747810][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.749998][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.759123][ T6799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.845050][ T6799] hsr_slave_0: entered promiscuous mode [ 62.848093][ T6799] hsr_slave_1: entered promiscuous mode [ 62.850510][ T6799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.853496][ T6799] Cannot create hsr debugfs directory [ 62.871047][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 62.899084][ T6805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.905034][ T6805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.912719][ T1140] hsr_slave_0: left promiscuous mode [ 62.916483][ T1140] hsr_slave_1: left promiscuous mode [ 62.918649][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.920990][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.924797][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.927320][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.958280][ T1140] veth1_macvtap: left promiscuous mode [ 62.960321][ T1140] veth0_macvtap: left promiscuous mode [ 62.962791][ T1140] veth1_vlan: left promiscuous mode [ 62.965207][ T1140] veth0_vlan: left promiscuous mode [ 63.434054][ T6852] ip6t_srh: unknown srh invflags 7D00 [ 63.438922][ T6853] ip6t_srh: unknown srh invflags 7D00 [ 63.485121][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 63.546651][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 63.650016][ T6862] netlink: 'syz.1.260': attribute type 64 has an invalid length. [ 63.652325][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 63.957068][ T1345] usbhid 7-1:0.0: can't add hid device: -71 [ 63.959932][ T1345] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 63.966704][ T1345] usb 7-1: USB disconnect, device number 4 [ 63.980647][ T6859] batman_adv: batadv0: Adding interface: dummy0 [ 63.982745][ T6859] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.991420][ T6859] batman_adv: batadv0: Interface activated: dummy0 [ 63.995684][ T5930] Bluetooth: hci1: command tx timeout [ 64.004016][ T6861] batadv0: mtu less than device minimum [ 64.007411][ T6861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.011226][ T6861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.014992][ T6861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.019173][ T6861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.023595][ T6861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.027437][ T6861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.031138][ T6861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.035112][ T6861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.039067][ T6861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.177741][ T6799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.183371][ T6799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.194344][ T6799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.203082][ T6799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.255712][ T6799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.271119][ T6799] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.280848][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.283453][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.292870][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.295885][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.320720][ T6877] random: crng reseeded on system resumption [ 64.413495][ T1140] IPVS: stop unused estimator thread 0... [ 64.430419][ T6877] Restarting kernel threads ... done. [ 64.443276][ T6799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.599986][ T6906] tipc: Enabling of bearer rejected, failed to enable media [ 64.603035][ T6902] tipc: Enabling of bearer rejected, failed to enable media [ 64.625831][ T6799] veth0_vlan: entered promiscuous mode [ 64.636761][ T6799] veth1_vlan: entered promiscuous mode [ 64.667128][ T6799] veth0_macvtap: entered promiscuous mode [ 64.669755][ T6799] veth1_macvtap: entered promiscuous mode [ 64.690023][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.693361][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.697429][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.700666][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.703758][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.707207][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.712031][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.723616][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.727812][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.730906][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.734653][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.738129][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.741415][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.748929][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.753133][ T6799] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.756338][ T6799] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.760005][ T6799] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.763130][ T6799] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.811423][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.813944][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.834762][ T1222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.839543][ T1222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.101897][ T6935] mmap: syz.4.245 (6935) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.125029][ T5930] Bluetooth: hci3: command 0x0406 tx timeout [ 65.398680][ T6978] bridge0: entered promiscuous mode [ 65.400621][ T6978] macvlan2: entered promiscuous mode [ 65.403056][ T6978] bridge0: port 3(macvlan2) entered blocking state [ 65.409982][ T6978] bridge0: port 3(macvlan2) entered disabled state [ 65.412245][ T6978] macvlan2: entered allmulticast mode [ 65.413962][ T6978] bridge0: entered allmulticast mode [ 65.420954][ T6978] macvlan2: left allmulticast mode [ 65.422575][ T6978] bridge0: left allmulticast mode [ 65.424871][ T6978] bridge0: left promiscuous mode [ 65.469432][ T6984] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] SMP KASAN NOPTI [ 65.473285][ T6984] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 65.477286][ T6984] CPU: 2 UID: 0 PID: 6984 Comm: syz.2.280 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 65.481547][ T6984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.484876][ T6984] RIP: 0010:skb_segment+0x194f/0x3ef0 [ 65.486621][ T6984] Code: 00 00 fe e9 48 eb ff ff e8 1e 2d 77 f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 30 a8 dc f8 48 8b 84 24 d0 [ 65.492631][ T6984] RSP: 0018:ffffc900062b6820 EFLAGS: 00010202 [ 65.494542][ T6984] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffc90007b13000 [ 65.496885][ T6984] RDX: 000000000000000e RSI: ffffffff894405d2 RDI: 0000000000000070 [ 65.499374][ T6984] RBP: ffffc900062b69c8 R08: 0000000000000005 R09: 000000000000ffff [ 65.501865][ T6984] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff88804f305b80 [ 65.504406][ T6984] R13: 000000000001fffe R14: 000000000000ffff R15: 000000000000004a [ 65.506885][ T6984] FS: 00007f698f2206c0(0000) GS:ffff8880d6be2000(0000) knlGS:0000000000000000 [ 65.509659][ T6984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.511755][ T6984] CR2: 0000200000200000 CR3: 000000004eed8000 CR4: 0000000000352ef0 [ 65.514166][ T6984] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.516545][ T6984] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.518932][ T6984] Call Trace: [ 65.519976][ T6984] [ 65.520920][ T6984] ? __pfx_skb_segment+0x10/0x10 [ 65.522494][ T6984] ? get_page_from_freelist+0x133c/0x3920 [ 65.524278][ T6984] tcp_gso_segment+0x3be/0x19e0 [ 65.525886][ T6984] ? __pfx_tcp_wfree+0x10/0x10 [ 65.527409][ T6984] tcp6_gso_segment+0x1ec/0x1140 [ 65.528980][ T6984] ipv6_gso_segment+0x810/0x1db0 [ 65.530557][ T6984] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 65.532249][ T6984] ? __lock_acquire+0x5ca/0x1ba0 [ 65.533852][ T6984] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.535711][ T6984] skb_mac_gso_segment+0x2a5/0x650 [ 65.537307][ T6984] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 65.539018][ T6984] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 65.540777][ T6984] ? cx231xx_init_bulk+0x122a/0x1230 [ 65.542462][ T6984] ? find_held_lock+0x2b/0x80 [ 65.543915][ T6984] __skb_gso_segment+0x36e/0x700 [ 65.545552][ T6984] validate_xmit_skb+0x956/0xfe0 [ 65.547220][ T6984] ? find_held_lock+0x2b/0x80 [ 65.548741][ T6984] validate_xmit_skb_list+0xc1/0x130 [ 65.550482][ T6984] sch_direct_xmit+0x433/0xcf0 [ 65.552027][ T6984] ? netem_dequeue+0x1d1/0xd60 [ 65.553632][ T6984] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.555349][ T6984] ? __pfx_sch_direct_xmit+0x10/0x10 [ 65.557111][ T6984] ? ktime_get+0x1a7/0x310 [ 65.558567][ T6984] ? get_slot_next+0x2d0/0x2f0 [ 65.560100][ T6984] ? netem_enqueue+0x107f/0x3680 [ 65.561702][ T6984] __qdisc_run+0x541/0x1bf0 [ 65.563065][ T6984] ? rcu_is_watching+0x12/0xc0 [ 65.564550][ T6984] __dev_queue_xmit+0x2aa4/0x43e0 [ 65.566190][ T6984] ? selinux_ip_postroute+0x73a/0xde0 [ 65.567937][ T6984] ? __pfx___dev_queue_xmit+0x10/0x10 [ 65.569684][ T6984] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 65.571491][ T6984] ? __lock_acquire+0xaa4/0x1ba0 [ 65.573067][ T6984] ? find_held_lock+0x2b/0x80 [ 65.574646][ T6984] ip6_finish_output2+0xe98/0x2020 [ 65.576278][ T6984] ip6_finish_output+0x3f9/0x1360 [ 65.577885][ T6984] ip6_output+0x1f9/0x540 [ 65.579276][ T6984] ? __pfx_ip6_output+0x10/0x10 [ 65.580828][ T6984] ip6_xmit+0x12d7/0x2320 [ 65.582240][ T6984] ? __pfx_ip6_xmit+0x10/0x10 [ 65.583756][ T6984] ? __sk_dst_check+0x120/0x350 [ 65.585299][ T6984] inet6_csk_xmit+0x3c7/0x740 [ 65.586855][ T6984] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 65.588504][ T6984] ? csum_ipv6_magic+0x299/0x320 [ 65.590118][ T6984] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 65.591783][ T6984] __tcp_transmit_skb+0x19d6/0x3e90 [ 65.593464][ T6984] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 65.595205][ T6984] ? kasan_quarantine_put+0x10a/0x240 [ 65.596925][ T6984] ? kfree_skbmem+0x16c/0x1f0 [ 65.598431][ T6984] tcp_write_xmit+0x1274/0x8770 [ 65.599991][ T6984] __tcp_push_pending_frames+0xaf/0x390 [ 65.601776][ T6984] tcp_rcv_established+0x860/0x2180 [ 65.603440][ T6984] ? ip6_dst_check+0x352/0x940 [ 65.604959][ T6984] ? __pfx_tcp_rcv_established+0x10/0x10 [ 65.606763][ T6984] tcp_v6_do_rcv+0x895/0x1740 [ 65.608218][ T6984] ? __local_bh_enable_ip+0xa4/0x120 [ 65.609895][ T6984] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 65.611518][ T6984] __release_sock+0x14c/0x400 [ 65.613020][ T6984] __sk_flush_backlog+0x27/0xc0 [ 65.614608][ T6984] tcp_sendmsg_locked+0x3058/0x3930 [ 65.616268][ T6984] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 65.618027][ T6984] ? do_raw_spin_lock+0x12c/0x2b0 [ 65.619632][ T6984] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 65.621339][ T6984] ? __local_bh_enable_ip+0xa4/0x120 [ 65.623038][ T6984] tcp_sendmsg+0x2e/0x50 [ 65.624408][ T6984] ? __pfx_tcp_sendmsg+0x10/0x10 [ 65.626035][ T6984] inet6_sendmsg+0xb9/0x140 [ 65.627492][ T6984] __sys_sendto+0x37d/0x510 [ 65.628954][ T6984] ? __pfx___sys_sendto+0x10/0x10 [ 65.630570][ T6984] ? xfd_validate_state+0x5d/0x180 [ 65.632194][ T6984] ? rcu_is_watching+0x12/0xc0 [ 65.633768][ T6984] __x64_sys_sendto+0xe0/0x1c0 [ 65.635286][ T6984] ? do_syscall_64+0x91/0x260 [ 65.636798][ T6984] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.638450][ T6984] do_syscall_64+0xcd/0x260 [ 65.639908][ T6984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.641788][ T6984] RIP: 0033:0x7f698e38e969 [ 65.643216][ T6984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.649239][ T6984] RSP: 002b:00007f698f220038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 65.651861][ T6984] RAX: ffffffffffffffda RBX: 00007f698e5b5fa0 RCX: 00007f698e38e969 [ 65.654339][ T6984] RDX: ffffffffffffff1d RSI: 00002000000000c0 RDI: 0000000000000006 [ 65.656826][ T6984] RBP: 00007f698e410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 65.659306][ T6984] R10: 0000000000000850 R11: 0000000000000246 R12: 0000000000000000 [ 65.661799][ T6984] R13: 0000000000000000 R14: 00007f698e5b5fa0 R15: 00007ffd5cbe9098 [ 65.664291][ T6984] [ 65.665283][ T6984] Modules linked in: [ 65.666625][ C2] vkms_vblank_simulate: vblank timer overrun [ 65.668563][ T6984] ---[ end trace 0000000000000000 ]--- [ 65.670319][ T6984] RIP: 0010:skb_segment+0x194f/0x3ef0 [ 65.672031][ T6984] Code: 00 00 fe e9 48 eb ff ff e8 1e 2d 77 f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 30 a8 dc f8 48 8b 84 24 d0 [ 65.678248][ T6984] RSP: 0018:ffffc900062b6820 EFLAGS: 00010202 [ 65.680157][ T6984] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffc90007b13000 [ 65.682661][ T6984] RDX: 000000000000000e RSI: ffffffff894405d2 RDI: 0000000000000070 [ 65.685168][ T6984] RBP: ffffc900062b69c8 R08: 0000000000000005 R09: 000000000000ffff [ 65.687677][ T6984] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff88804f305b80 [ 65.690166][ T6984] R13: 000000000001fffe R14: 000000000000ffff R15: 000000000000004a [ 65.692680][ T6984] FS: 00007f698f2206c0(0000) GS:ffff8880d6be2000(0000) knlGS:0000000000000000 [ 65.695554][ T6984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.697656][ T6984] CR2: 0000200000200000 CR3: 000000004eed8000 CR4: 0000000000352ef0 [ 65.700156][ T6984] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.702679][ T6984] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.705236][ T6984] Kernel panic - not syncing: Fatal exception in interrupt [ 65.708232][ T6984] Kernel Offset: disabled [ 65.709654][ T6984] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:37:33 Registers: info registers vcpu 0 CPU#0 RAX=000000000003d7b4 RBX=0000000000000000 RCX=ffffffff8b6c8419 RDX=ffffed100d4865be RSI=ffffffff8bf47da0 RDI=ffffffff81919901 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff9084fd10 R15=0000000000000000 RIP=ffffffff8b6c6caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f698e5b7bac CR3=000000004bc81000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec777b7c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa544e11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa544e11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa544e11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa544e11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa544e11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa544e11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff888035820e40 RBX=ffff88802ec369d0 RCX=ffffffff8aebf870 RDX=0000000000000000 RSI=0000000000000010 RDI=0000000000000003 RBP=ffff888035821604 RSP=ffffc900006a0b70 R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000000 R11=ffffc900006a0ff8 R12=ffffc900006a0c28 R13=ffff888035838000 R14=0000000000000000 R15=ffff88802ec36500 RIP=ffffffff8aebf937 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ae2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe77a2e7d60 CR3=000000002f92c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7797836a3 00007fe7797836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc5c5c810 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558fae7413 000055558fae6e60 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558fae67f0 000055558fae5df0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01a80302080001a0 030008000198030b c008000190030608 0001880300080001 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010180041885e2cd 8008000100000008 06060124f4000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001ffff fffffffffffeff08 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01b8030bae080001 b0031e080001a803 02080001a0030008 000198030bc00800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f27b5 RDI=ffffffff9adf64e0 RBP=ffffffff9adf64a0 RSP=ffffc900062b6220 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000037 R14=ffffffff9adf64a0 R15=ffffffff854f2750 RIP=ffffffff854f27df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f698f2206c0 ffffffff 00c00000 GS =0000 ffff8880d6be2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000200000 CR3=000000004eed8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5cbe9420 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f698e411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f698e411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f698e411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f698e411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f698e411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f698e411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000004943c RBX=0000000000000003 RCX=ffffffff8b6c8419 RDX=ffffed100d4e65be RSI=ffffffff8bf47da0 RDI=ffffffff81919901 RBP=ffffed1003bdb000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded8000 R14=ffffffff9084fd10 R15=0000000000000000 RIP=ffffffff8b6c6caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ce2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa2a3610d58 CR3=00000000298d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa544e11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa544e11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa544e11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa544e11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa544e11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa544e11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa544f83488 00007fa544f83480 00007fa544f83478 00007fa544f83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa545aed100 00007fa544f83440 00007fa544f80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa544f83498 00007fa544f83490 00007fa544f83488 00007fa544f83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000