last executing test programs: 3.604620495s ago: executing program 3 (id=108): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000000), 0x28880, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x7, 0x10, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0]}) write$uinput_user_dev(r0, &(0x7f0000000740)={'syz0\x00', {0xf70, 0x6, 0x40, 0x1}, 0x26, [0x1, 0x9, 0x4, 0xffff8000, 0x2, 0x0, 0xe, 0x1c00000, 0x6, 0x6, 0x5, 0x2fd, 0x6, 0x8, 0x6, 0x10, 0x40, 0x7ff, 0x1ff, 0x7, 0xf, 0xfffffff9, 0x800, 0x69d2, 0x548, 0xfffffffa, 0x8000, 0x3, 0x6, 0xc0, 0xd2, 0x7, 0x0, 0xd501, 0x1, 0x2, 0x0, 0x7, 0x0, 0x2, 0x4, 0x1000, 0x0, 0x30000, 0x8, 0x4, 0x2, 0x8, 0xfffffff9, 0x7fffffff, 0x4, 0x6, 0x2, 0x5266, 0x2, 0x9, 0x6, 0x81, 0x1000, 0x8, 0xc4, 0x2898a507, 0x80000001, 0x100], [0xc, 0x6, 0x2, 0x2, 0x5, 0x6, 0xa5d, 0xb, 0x76, 0x9cb, 0x0, 0x6, 0xdb2f, 0x6, 0x2, 0x4, 0x7, 0x1, 0xc, 0x10001, 0x7, 0x0, 0x6, 0x6, 0x2, 0x7, 0x80000000, 0x7, 0x0, 0x5703f301, 0x3ff, 0x5, 0xfffffff7, 0xfffff1f2, 0x3, 0x85d, 0x4, 0x2, 0x958, 0xffffffff, 0x7, 0xfffffffe, 0x8000, 0x5, 0xffffffc0, 0x7, 0xfffffffb, 0x9, 0x1, 0xb, 0x2ba, 0x1, 0xbf2e, 0x10001, 0x5, 0x9, 0x80, 0x6, 0x5, 0x7ff, 0x7, 0x479d, 0x0, 0x4], [0x3, 0x6, 0xeaa, 0x1, 0x9, 0x3, 0xac, 0x20f5, 0x7f, 0x4, 0x678a8a1f, 0x3, 0x2, 0x1ff, 0x8, 0x8, 0x4, 0x3b, 0x7fff, 0x4, 0x5, 0xfffffffe, 0xd, 0x52, 0x0, 0x7fffffff, 0x3, 0x0, 0x7fffffff, 0x1000, 0xaf, 0x10000, 0x4ee8f8a1, 0x3, 0x5, 0x6, 0x32fa, 0xcec2, 0x101, 0x400, 0xa, 0x5, 0x4, 0xfff, 0x3e, 0x5, 0xfc, 0x2, 0x7, 0xf0d3, 0xffff, 0xff, 0x6, 0xf85, 0x3, 0x8000, 0x8, 0xffffff00, 0x5, 0x6, 0x4, 0x8, 0x1, 0x9], [0x4, 0x1224e972, 0x0, 0xd, 0x8, 0x3, 0x0, 0xff9, 0xffffffff, 0x100, 0xa, 0x5, 0x24, 0x86, 0xad0c, 0x33a, 0x1, 0x2, 0x9, 0x7, 0x2, 0x3, 0x986f, 0x100, 0x0, 0x6, 0x7ff, 0x3, 0x2, 0x2da7cbb3, 0xff, 0x7, 0x7ff, 0x9, 0x7f, 0x6, 0xfffffffe, 0x3, 0xd, 0x2a09, 0x8, 0x2, 0xc9, 0x2, 0x1, 0x2, 0x7, 0x5, 0xa4, 0x5, 0x401, 0x866, 0x8, 0xffff5192, 0x5, 0x7, 0xc00000, 0x101, 0x2, 0x5, 0xff, 0x5, 0x9f, 0x3]}, 0x45c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b31, &(0x7f0000000580)) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0209000002"], 0x10}, 0x1, 0xfdffffff}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x405}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.766632078s ago: executing program 3 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0x2, 0x6}}) (async) sendto$packet(r4, 0x0, 0x0, 0x24048004, 0x0, 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) (async, rerun: 64) r6 = inotify_init1(0x0) (rerun: 64) inotify_add_watch(r6, &(0x7f00000002c0)='.\x00', 0x600010c) (async, rerun: 32) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) (rerun: 32) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) ioctl$KVM_HAS_DEVICE_ATTR_vm(r7, 0x4018aee3, &(0x7f0000000300)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000280)={0x3, 0x2}}) 2.681913266s ago: executing program 3 (id=133): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x38}, 0x1, 0xfffc, 0x0, 0x40008c0}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 2.605028228s ago: executing program 3 (id=135): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) mount(0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='!.\x00') (async) mount(0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='!.\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x18, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x0) sendfile(r1, r1, 0x0, 0x40008) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="888788", 0x3}, {&(0x7f0000000080)="1b39298dccf27235231f4e32adfe09cb46c71fc3933ff9b6e161b5b64807139851fe5970ae94417606a52ca9bff5797b567a77e7b58c7369"}], 0x1000000000000229) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="888788", 0x3}, {&(0x7f0000000080)="1b39298dccf27235231f4e32adfe09cb46c71fc3933ff9b6e161b5b64807139851fe5970ae94417606a52ca9bff5797b567a77e7b58c7369"}], 0x1000000000000229) r4 = syz_open_procfs(r0, &(0x7f0000000040)='net\x00') exit(0xffff) syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) (async) r5 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) r6 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x44a102, 0x1) renameat2(r6, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00', 0x7) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x3010, 0x0, 0x0, 0x2, 0x0, 0x2}}) syncfs(r4) fchdir(r4) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000000)='binder\x00', 0x2200892, 0x0) (async) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000000)='binder\x00', 0x2200892, 0x0) 1.995159614s ago: executing program 1 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x2, 0x1, 0x10}) close(0x3) 1.845429816s ago: executing program 1 (id=155): memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) (async) r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) execveat(r0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x100) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000500), 0x0, &(0x7f0000000440)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './bus'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000500), 0x0, &(0x7f0000000440)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './bus'}, 0x3a}], [], 0x2f}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000005200010a"], 0x20}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000005200010a"], 0x20}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close(0x3) r3 = fcntl$dupfd(r0, 0x406, r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x6, 0x0, @mcast2, 0x4}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000080)={@loopback, r6}, 0x14) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f37, 0x7, 0x3, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x5, 0x2, 0x1, 0x200001, 0x81, 0x6, 0x101, 0x0, 0x2, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x92d1, 0xb, 0xe68, 0x3d, 0x8, 0x6, 0x0, 0xfffffff9]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x28) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, r4, 0x55b28e4b13eb9fdc, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4c28}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4c}, @ETHTOOL_A_CHANNELS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x14edb701}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000800) 1.734813556s ago: executing program 1 (id=157): syz_open_dev$dri(&(0x7f0000000140), 0x2002, 0x2000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket(0x10, 0x3, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400), 0x3, 0x8, 0x6}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004a008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="ef541d2caa0479d0"], 0x1c}}, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x4b52, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000c00)={0x8, {{0x2, 0x4e24, @empty}}, 0x1, 0x9, [{{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}, {{0x2, 0x4e20, @rand_addr=0x64010100}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}, {{0x2, 0x4e23, @private=0xa010100}}, {{0x2, 0x4e23, @multicast1}}]}, 0x510) socket$inet6(0xa, 0x803, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) shutdown(r6, 0x1) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0x4000000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={0x0, 0x3a}) 1.665369494s ago: executing program 3 (id=159): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x81, 0x5}) 1.663240396s ago: executing program 3 (id=161): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r0 = syz_open_dev$I2C(0x0, 0x1, 0x0) capset(0x0, 0x0) (async, rerun: 32) ioctl$I2C_RDWR(r0, 0x707, 0x0) (async, rerun: 32) syz_open_dev$sg(0x0, 0x1, 0x1d1543) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) write$char_usb(r2, &(0x7f0000001300)='7', 0x1) r3 = socket(0x10, 0x80003, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x7, 0x7ffc}, 0x90) close_range(r3, 0xffffffffffffffff, 0x0) 1.55552218s ago: executing program 2 (id=162): openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x48000, 0x0) (async) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x48000, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x14957e, 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x5f53}}, './file0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="140100002200010010000000fddbdf2515000000"], 0x14}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) (async) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r8, 0x0, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa2}, {0x6, 0x11, 0x9}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2004800}, 0x20000000) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r8, 0x0, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa2}, {0x6, 0x11, 0x9}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2004800}, 0x20000000) r9 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg(r9, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) 1.5546162s ago: executing program 2 (id=163): fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) io_setup(0x7, &(0x7f0000000040)=0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) r2 = eventfd2(0xfffffffb, 0x80001) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r4 = eventfd(0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = eventfd(0x6) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500), 0x80001, 0x0) io_submit(r0, 0x6, &(0x7f0000000640)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x3, r1, &(0x7f00000000c0)="98fa056d1cc06cffb724", 0xa, 0x3, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="4a920eeda8eed94d9b85d0a3dd7aae788992428159f85c0d3c442b9df68e517fbd8d112cad45622af7c6dda84856049bb0c00b302c307434345f6c9f20222a825b998ddcdaf1b4f60d914cc540ab8a286d098bcc03086d202269772b87c464e34bb69523534e8f9590d135df48f628019b14bd7c4b", 0x75, 0x0, 0x0, 0x0, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x4, r3, &(0x7f0000000240)="0b3d8bbc2b40eb804d566e766aabf47085926d98699298cd32ef6f450a1bf62bb324962d9dac17789c8d55465d6e1d88ff0b9eb55ade56f5c8572d41ad17c102a71c8d36f0705d6ba9656f0a432083d46b00a40a5e5f89bfcb0ee9e5097ebfc8d08469bd7cf6bb94392be7647a9ed24be10da51db9c6caac6f714d5e4c9505e23257340060ed28512f5bba49d0a0", 0x8e, 0x8d, 0x0, 0x2, r4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000340)="5ea0b3a77e9e5fa79d0927b72940387710989913437a8559b250dd70d270ecda1b1a13b5151b704fc1135fb273180f6d95db64de2a174e7e2cc127e4ab7d05ed94ed9d4718e397d72d0fbd3d2c95c62e577641fea32a9ff84ff78aba8785dc39e3c026aa8ddb910461f0b2bc9db616442582e218c1f9b300bc938b3829d0ed855a56aff023968cdf9dbe82c758f4b7e4f28405a57819d927076636458141d436f779a57e0c806f86a49f9b56db", 0xad, 0xd}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x312e, r6, &(0x7f0000000440)="2ae216f65fefcd7f936edad04009a855cfa14306d111182cf983a4ea0f399f8156b40807fb987e24544cf9a42abfb7b89ed4fb68ffd10ffb8ef5f95d2e86e2930020479ec08929f8a3b5940331ec6e1e29e6d9", 0x53, 0x800, 0x0, 0x2, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x6, r8, &(0x7f0000000540)="bf43eea7742f34525eb1eb951fb2c7fd856c260552836108e02398974a319fce97b039b676b83669c724fc34845665e333a621c6ce9742ad612499ee9113dd1f0e3234240d13321bb1ffe0a34ea4cafdd83afcfd54b4030b190d1ec7eb202f58c0b041d8fad9d778576aece4bd12ec26bef0f0da8436b013ec765275af07751c778b824270f9f81ea900157cd98b6555fb1b0fe133d011233157711fdd75a5eec9", 0xa1, 0x100000001, 0x0, 0xd313a52f0ed11e95}]) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x1c8, r9, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5c}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x43b}, {0x6}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0xd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0xfff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x23}, {0x6}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0xa}, {0x8, 0x15, 0xe1}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20040}, 0xc0) r10 = accept$inet6(r5, &(0x7f0000000980)={0xa, 0x0, 0x0, @private2}, &(0x7f00000009c0)=0x1c) lsetxattr$trusted_overlay_redirect(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x8, 0x1) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r11, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xf, 0x8, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000ec0)={&(0x7f0000000c80)="39fbf6fb0e4e9081650cd444d4f8e0f3b75855b1608469b480f38858ce8970b241d9b48b2758161687009a083616163c3887ed52abe84bbf172b01f4338ddeb6abf67eab6fd99ebe8257b5bd141c57eaa3ee8ebcba2ab6e59dfd53658643f8c5296be53cd8e2eb449c29cf7bd397ccdd648a9487346a9e863966ee3fb5264c4444874fdfa826f3ed72ea4b06df4cc9df4c8ea69dadeaf473541b1461de112ebb292a2c90ad1ca839a5c8c72826de7e5bd542ec437e6ca77250e35522f5689b8816b9d0d09c44a2262a7be4bc24fd73f3", &(0x7f0000000d80)=""/161, &(0x7f0000000e40)="8137", &(0x7f0000000e80)="6d4844f43b9a01c8daaa5b8f268418d72dc6f1ec601d9ec31b389bd930b18f046a02faedc0b0", 0x7fff, r8}, 0x38) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000f00)={'wg1\x00', 0x0}) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0x464202, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r13, 0x3ba0, &(0x7f0000000f80)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x2be8a9, 0xade2f}) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x44, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFULA_CFG_MODE={0xa, 0x2, {0xbca}}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0xb, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$TIOCGICOUNT(r8, 0x545d, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000001140)={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @empty, 0x0, 0x8, 0x6, 0x0, 0x8, 0x10, r12}) syz_usb_connect(0x4, 0x82e, &(0x7f00000011c0)={{0x12, 0x1, 0x300, 0x93, 0x39, 0x73, 0x10, 0x19d2, 0x136, 0x2846, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81c, 0x2, 0x5, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xf5, 0xb, 0xf, 0xff, 0xff, 0xff, 0xc6, [@hid_hid={0x9, 0x21, 0xf, 0xff, 0x1, {0x22, 0x80}}], [{{0x9, 0x5, 0x6, 0x3, 0x220, 0x10, 0xdf, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x5}, @generic={0xf0, 0x22, "4159c5683d224d6c6c5ba9b1ca2107cf044a0179d07ec3c4be02fdb5dd79ed7f0565043c34609b6f55cd9d07775b66a9da40b64b8d1b3469ae1f83d01ac65e9537c1febce1f7d38736ec3abd526d0125e422082221bae4e5ae20d33d500a6949b502675f5adfb1bf93bd5f4d69a22b72b491f86d8c644cfce5a32245b362dfe125b3fd45b90c40078d81841eaac518767771a31a49604ab89207c937ee4949b2e973c629ce923a8a051087ca18046c4fe15a40b6bd952f86b4427e10d2a214a004169b1f7b64a22f13c17a89b2c1c92b7935fef3215556e4a1334faae904bd3f251e37a45c4d5287ca4fb4cef7dd"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x460, 0x7f, 0x0, 0xc0}}, {{0x9, 0x5, 0x4, 0x4, 0x0, 0x3, 0x2, 0x76, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0xfe, 0x8}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0x9, 0xfe, 0x35, [@generic={0x14, 0x11, "1c7e8806ff89e84fdc7be476dbfb2d4b4359"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x5, 0x8, 0x0, [@generic={0x8f, 0x23, "47ee5c4736464d6fa068ff8aa10e85ee5b89f1239df3577d7ea0a3a5e307097fd31505ad66aef677aef2edb9b2367e80f13840aed52eb2aa19a99648e05aa300277fec7b25264cdd591014df0f93451edd0c935fd2467f0783f1d6944778eae890253693fea9978a3dcc845e6391bc5e14f4992c34f0da6dda014aeeca35faabdcb03c20a04146d27781246d5a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x6, 0x10, 0x8}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x2, 0x6, 0xa, [@generic={0x4d, 0x24, "1c313003f73096f962dca859542c9ce41d5e32ce799be425f687a08bd6093bbe8ce97811f1b999d7cf3c0f34ebb037114a9ea5a74f51279248005bee9087fca6b59660e4e1cb9c8948054c"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x8, 0x2, 0x7, [@generic={0xc8, 0x21, "497031d5efeb501b6f939a1aef965e5e23495c74b912fd3c9db2788ad7c589bd8ba5c63aaa99c812efdffc9820de1b6f1fdd20126233e4fcc230e6ec221adfe3af99ef623ed8e6a31fc909eebd0fe7cc883d3533c6d95a929367cd17be01b82c4285ec66fb95824295c98da31a65c3f5180ad19fcdc6ddc64ac5308a4ee00cce3d1b063a5ff65bed1e326824260e8ab4539088637cd979c4b35b7ec665a5da28fa6093a3ca3d6c5aa1425247dd016a43aec75cc3197df903b5ee8a5fe7609f2026f875b9f68b"}]}}, {{0x9, 0x5, 0x2, 0x1a, 0x3ff, 0x4, 0x7, 0x5, [@generic={0x22, 0x4, "4ee7bc0e72f8455c749f5d3f2073910e0fb01eaf3413c9fa348bd97fa6b8681c"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0xd, 0x8, 0x7f, [@generic={0x3e, 0x21, "e0dd8369fc148fa9e948517819ea109220bf0f1928f135d7c3d8eab136058fa834b7c894b3fbbf488be87e7a3ba77ca5c8d26e429fc33dfbb98870ea"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xa4, 0x7f}]}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, [@generic={0x47, 0x22, "04a88f73e558c2aacd5bd4690980a8bb2e698ca92671d209e1e74760732db6d21d6157f298efcdfdff76667adfff7a8720a2d7480ce3060968768ab7b80207c1e4a941ab01"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xd, 0x1, 0x3}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0xe, 0x1, 0x5, [@generic={0x3c, 0xe, "d3da186674ed17b2c484d8a50f9f0bb148cf5046e2b60ac4993874a4f6e8ae80d6159f2b3b816edc7a7f6248e89c77315cd224c742c6a51ebfa6"}, @generic={0x65, 0xe, "e75e8903694ef0477457bf398a1da544d68304eadd6748ac8d7d647b53931eb69029d4f5aeca7e22949479cb8df1318b2973672042983f51f620b7030e3a4bfe9cd3c7bc680cd4be1516d0abdff003723d4c90afa4238daab0d5d350e2527f4f6c1d25"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0x6, 0x4, 0x9, [@generic={0x7a, 0x31, "464d0223089f546f2b28f4f861b61e215b0178985f085e43b449858107c588e827bb1ea9bf1c76d17cfcfcb2d60a30fd8e425ac92994f28a780c349a49667a2ff768abf25fbee75685b3207539053f449a65954faaec38ba81e72e5cee42420006ae16724a4f6075c79b30a68ed79783650534a2fc1d4490"}]}}]}}, {{0x9, 0x4, 0xd2, 0x4, 0x8, 0xce, 0xd0, 0x38, 0x9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0xf}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x9, 0x1, 0x8}, @obex={0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x1000, 0x1, 0x9}, @dmm={0x7, 0x24, 0x14, 0x0, 0x3}]}], [{{0x9, 0x5, 0xb, 0x8, 0xcdca7bdcea3bb83a, 0xfa, 0xe9, 0x3}}, {{0x9, 0x5, 0x0, 0x1a, 0x20, 0xf, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x6}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x0, 0x9, 0x2, [@generic={0x9d, 0x31, "b76251478403c0f3d577b72ab5a8430ea0a5afd472455bed6f91befed551d129e6a0f2941f22499c833faa5a764a6cdc3f94c152f6d6eeb9c90f8704afcea038e4b26a201ec7b3e1d8372977d3728aaa4ca3c4ea64787aba1b6b95d72cf4790564f2937dfb162aabd5a96cd3047aedc72353f487788970d8b6c24b46613eb5fa9251dbce1dbafea2627441a8bd9e66db03d815620936c1723660c1"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x91, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x8}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x10, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x71, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x0, 0x4, 0x2}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0xf7, 0x4, 0x5, [@generic={0xe9, 0xe, "1f1ab9590a8783182a19b86317a50721119ac3a6b1e1ac086ecbc7301669131dcd771b29be6111b5780529ca38fb96f6467b52c84bcaeafb06c1aebdcb9d2b954d4ea45b979ed9f4b56eb8fbbaeefccf4a8a7cfa83c49424f8cc24f6fbf7bd034ee074e03ac63053cc8d29c156a3fb0e1dc33b7a939ba44b3ca48d69662f931982548ce8ba899c7429eefd4b1427ff6ad362fca8a0200f393f839133844fbb8744a4fad38b558f566183252704e214a985c29be257bd0938d90cc6a581923cc04c1fdc883e4caca7e651e1c5ff983d7ba71acdb1414e71f88894e8112730b331f9b74fe29229b8"}, @generic={0xc8, 0x31, "b25d254a35e875326ad5950019654291ec94002d02695f9f53831ce6944e417c1b0cca665c1df4ebfb92e53524f8efd2fc9a16feb63a2fdcc3331aa0719cea6d8d0b959a6e1e46d99a2651bceb167f5dd5ab410da3a319e8a5f9a82322ff745bc9fc29527d71f9a810b528a519bde3d0474089f9e4fe3d0109a405f726075c59e4ef4b5a230e9c2626fd99c42c0fa14aa7f668c9ec14dfef4afa1087a781b24723bb4c8d0c6955158059e1e5864f0751d00ff3007a770e8bd3f0b997f1578dd1ad766ae48151"}]}}]}}]}}]}}, &(0x7f0000001fc0)={0xa, &(0x7f0000001a00)={0xa, 0x6, 0x110, 0x3, 0x9, 0x2, 0x10, 0x9}, 0xdc, &(0x7f0000001a40)={0x5, 0xf, 0xdc, 0x2, [@generic={0xd4, 0x10, 0xb, "6c270c3d764ca64bfe5547dd32355bc80965750dfbd830532b87430dbe64f32ea270bbb7751c4c052811baec322b0d85fd60d263541b22a58949185be15ccf219275134e6702d8166065dcb794505c846e5dc3cbabbe05dbb698acbdbeaab32cb5d12f2ef9cd3473241efb404b252fe922b456ceedcba8f57be4b6825d04f411d2296d8bbdbfc504e1e10430abc5aa456fd56c350e901b7a275c0b7518841f529f2b2764fd28a5979122483015b7ffdaf50ca9cd5344ad48947260a725ab434acbef12dc9f754bd69b5a8ced833e0c3284"}, @ptm_cap={0x3}]}, 0xa, [{0x75, &(0x7f0000001b40)=@string={0x75, 0x3, "1f8dea4b1e4881215fc79db79dc980741e910bb26539ec4b382e4eaa5cba1d03d11f96e88a128065753ecb4e5a57d4819eb463471114e73227efb83fc1c5072e90a24f1a6888c5b22a8c8a9d12ddecd9d8ed2225657c6e2b07af37613907580d5148ed432b7fd7b56c4e429862ec599d4ca317"}}, {0x6a, &(0x7f0000001bc0)=@string={0x6a, 0x3, "aa265d257698b50a1017b5be4abd08a0229d7a93270f80b839dbe3e2a534dc1e024bd249933b5f2108254bfea9abc4826c3e9bea1d2f47c301454b129f52eff0a4b85f9284ac92c19ff8e0ba6adba16e788975ddd2f8fda985bcf779935f5eba78f0e8137a7d857b"}}, {0x6e, &(0x7f0000001c40)=@string={0x6e, 0x3, "2e9fa4d39e30ccccc7a07645bdc5dd191e5453fff3952b9a83459217255470ebc13f16d789973bb8ef42fa816be70e59bb6ea81ef98bcac63e14276a865bf7c74429374548b6f52c0f0141be1dada352e02701be5623519d61a8a59092b5ddbe209fba22e187aa964f96b4a4"}}, {0x4, &(0x7f0000001cc0)=@lang_id={0x4}}, {0x89, &(0x7f0000001d00)=@string={0x89, 0x3, "d3b02277ddbba911bfc16d6477f8ec48a6c2eb22562217511776281bcb27827095716d79b7ab04eb150aa195193aefb763d3711de4b35f57f5e7f3a586110698aa756b5763ac3f7ce9a24799627f8fbd034765e0408732c3127e29b731c2e23ea2ef063fd4d00d1aa12c6f6f748265b807c7945dc3f2277baf740ac65f0fcb3c54219bd8d4b441"}}, {0x4b, &(0x7f0000001dc0)=@string={0x4b, 0x3, "8c138ca81fe1e0aff0aa993f137b110317c258296c1e9775bd1c5bfb4022e10d30267d6d7f52eb608727741b5500359606afeb43bfa6cbd36a69568ce10092790d0dd4465e88f26cd6"}}, {0x5c, &(0x7f0000001e40)=@string={0x5c, 0x3, "afc61f1f43ef160a3ad95796b41fc5d24f962af2f1d033c3c7e93844001d80381cca53245a37911a92ace0b6418f45a51aee577bc5c4d77079a2ebfb4db5c425fa59afb0263af3037d08252741ae3aa289a88040654ebeefc941"}}, {0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4c, &(0x7f0000001f00)=@string={0x4c, 0x3, "a7f62598784b7456af725d70b858b09e9035bc5358313b9a61a24e1eb5c46a2ec71f3c4ebded92d020073dfd016c9d1124d605db5fdc217424e33e5d3d371ea8c2dd7d5f4967d30add39"}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x44b}}]}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000002080)=0x0) fcntl$setownex(r1, 0xf, &(0x7f00000020c0)={0x0, r14}) write$binfmt_aout(r8, &(0x7f0000002100)={{0x108, 0x1, 0x5, 0x3e0, 0x122, 0x1, 0x88, 0xa064}, "6bfa5ce02aadf2734a09d5a66122299d9f6089967575518e9eaf8eca5682a8ad8b6a2491f5f8dd301f127f49e445ee528c83b0aa3f9788a05c5172e68be81446f148be44ea22b1528d742f2cf06fdd80de938cb67fd1724157333013da4d5a220fb395adb0b2d5890a5fa4df05e3e8972f59c928ee0ea696447e930be10c8a2e85d4767827d60c964e9b43fdc6", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6ad) sendmsg$rds(r8, &(0x7f00000058c0)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000027c0)=""/188, 0xbc}, {&(0x7f0000002880)=""/103, 0x67}, {&(0x7f0000002900)=""/153, 0x99}, {&(0x7f00000029c0)=""/163, 0xa3}, {&(0x7f0000002a80)=""/200, 0xc8}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/211, 0xd3}, {&(0x7f0000002d00)=""/232, 0xe8}], 0x8, &(0x7f0000005640)=[@mask_cswp={0x58, 0x114, 0x9, {{0xd3cd, 0x80}, &(0x7f0000002e80)=0x320fca9a, &(0x7f0000002ec0)=0x1, 0x185f, 0x8000000000000001, 0x6, 0x9, 0x30, 0x6}}, @rdma_args={0x48, 0x114, 0x1, {{0x7, 0x3}, {&(0x7f0000002f00)=""/152, 0x98}, &(0x7f0000005180)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/41, 0x29}, {&(0x7f0000004000)=""/109, 0x6d}, {&(0x7f0000004080)=""/188, 0xbc}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)=""/51, 0x33}], 0x6, 0x14, 0xf}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7ff, 0x3}, &(0x7f0000005200)=0x1, &(0x7f0000005240)=0x6, 0xb33a, 0xc093, 0x4, 0x400, 0x1, 0x4}}, @fadd={0x58, 0x114, 0x6, {{0x5}, &(0x7f0000005280)=0x3, &(0x7f00000052c0)=0x2, 0x10001, 0xaf9, 0x100, 0x1, 0x3, 0x2}}, @fadd={0x58, 0x114, 0x6, {{0x6c0, 0x6}, &(0x7f0000005300), &(0x7f0000005340)=0x1a, 0x100000000, 0x7, 0x5, 0x3cae5732, 0x0, 0x4}}, @rdma_args={0x48, 0x114, 0x1, {{0x200, 0xfffffff5}, {&(0x7f0000005380)=""/74, 0x4a}, &(0x7f0000005440)=[{&(0x7f0000005400)=""/18, 0x12}], 0x1, 0x4, 0x192}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x5}, @rdma_args={0x48, 0x114, 0x1, {{0x6, 0x7298}, {&(0x7f0000005480)=""/255, 0xff}, &(0x7f0000005600)=[{&(0x7f0000005580)=""/101, 0x65}], 0x1, 0x18, 0x3}}], 0x250, 0x80000}, 0x4008800) 884.914028ms ago: executing program 2 (id=165): prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_procfs(r0, &(0x7f0000000000)='smaps_rollup\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delchain={0x2cc, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x0, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x2}}]}}, @TCA_CHAIN={0x8, 0xb, 0xc29}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1e4, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x9}, @TCA_FLOW_ACT={0x1b8, 0x9, 0x0, 0x1, [@m_ct={0x138, 0x17, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x7}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_PARMS={0x18, 0x1, {0x7, 0xfffffffe, 0x4, 0x200, 0xffffffff}}]}, {0xe5, 0x6, "4cdbff10c3051a105dfa582e52ff435e09fe295eb5fec42ba63ccbd784b8d787caf719cbdac1b541d81af126e0e1568f04c1a91fc61f24f3ae2fb572478c25443c52fb4dfc2756192d1b7a6865eca41f408e77fe639ad7bbc0a81765758f6a40a5b2bfdc9d72f41fa0eea5ca2ad1c2236e28da8b6ee902ce1212f12abd033aa65436c5bd2cb8f356c2904094e595aa57e42493f02fcc3a80241dbe1f8863ba379aa4bcf985a4bee67c6bd3b0163fd63d2d8eabf53e664a351a2f66adc25ed39c57b0f44b3d9a28ec02139a49304239050699237181bf29a2996c76986ce9c2ce15"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x7c, 0x13, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}]}, {0x2b, 0x6, "fec0fd0d8cdff823a2ee719e52aa7762a0fbf083eeb5c9ce3352dd64d25cbabec6879c155d6b2c"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xc48}, @TCA_FLOW_MASK={0x8, 0x6, 0xffff}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fffffff}]}}, @filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @local}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @private=0xa010102}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @loopback}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x100000001, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x2cc}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) 884.645842ms ago: executing program 1 (id=166): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x16, 0x1c, "fee8a2ab78fc879fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) alarm(0x709abc910000) alarm(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0xc0000082, 0x0, 0x5675}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) poll(&(0x7f00000001c0)=[{r3, 0x2}], 0x1, 0x9f) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) r4 = dup(r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$COMEDI_SETWSUBD(r4, 0x6411) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640001b0000080013400000000205000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x537981) 884.421766ms ago: executing program 2 (id=167): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x2, 0x70bd27, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24004080}, 0x4081) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000003580), 0x2, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 32) fdatasync(r3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_GETXATTR(r6, &(0x7f00000004c0)={0x18}, 0x18) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r6, &(0x7f00000005c0)={0xa0, 0x0, r8, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, r9, r10, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) (rerun: 64) r11 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r11, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 64) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) (async) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f00000035c0)) 694.815996ms ago: executing program 2 (id=168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r2 = geteuid() quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, r2, &(0x7f00000000c0)) 694.434709ms ago: executing program 2 (id=169): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r3 = fsopen(&(0x7f0000000040)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000001140)='cpu.stat\x00', 0x5000000, 0x0) readv(r5, &(0x7f0000001240)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe64, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = dup2(r6, r6) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x50) r8 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0xe65, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20040881, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x5}, 0x1c) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000000e6c0102000000000000000003000009090c020073797a440000000005006959c1838c27e7baf7250100070000e40400010007000000090002000005000100070000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4012}, 0x4880) openat$autofs(0xffffffffffffff9c, &(0x7f0000001280), 0x111000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001100)={{0x1, 0x1, 0x18, r9}, './file0/file0\x00'}) write$bt_hci(0xffffffffffffffff, &(0x7f0000001180)=ANY=[@ANYBLOB="6c954b41adeea93b267c296392c01349af9a2de51e6af543c62428bb17dc491f7ff2719f58f24a3399c8745c7dab37793b36de7d78f64fe3b315a4db17738fe68eeba8c56d1cc282d01d06fee73f178e34ec6a9a5fa37ffa4f857a134e84ffe51efea2e8dfe6a5c8b8d23b31717ae1d57048ef960a951c98026e28f4a21ee8360ce7", @ANYRES16=r1, @ANYRESOCT=r6], 0x1d) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) socket(0x23, 0xa, 0x3) r11 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc4c85512, &(0x7f0000000280)={{0x8000008, 0x1, 0xc, 0x0, 'syz0\x00'}, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_PCM_IOCTL_REWIND(r11, 0xc0844123, &(0x7f0000000180)=0x4) 284.699321ms ago: executing program 0 (id=172): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000bf000000720a00ff000000007900580e00000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000c5cf000000000000009500000800000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r1 = dup(r0) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfe00}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x3a, 0x0, 0x1, 0x2}, 0x28) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 181.210895ms ago: executing program 0 (id=173): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x16b, 0x1, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "ae771949a0cb35d4"}}, 0x48}}, 0x20000000) r2 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0xfe, 0x0, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1003, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) 179.657691ms ago: executing program 0 (id=174): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0xc6, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 4.285642ms ago: executing program 0 (id=175): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x5f, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0xffffff6f, 0x7, r2, 0x0, 0x0, 0x0, 0x3, 0x8f, 0x1fff}) 3.588128ms ago: executing program 1 (id=176): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@fwd={0x9}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x2, 0x2}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0x1}, @typedef={0xb, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x1e, 0x30]}}, &(0x7f0000000140)=""/69, 0x61, 0x45, 0x1, 0x64}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000500)=""/4096, 0x1000, 0x0, &(0x7f00000001c0)=""/189, 0xbd}}, 0x10) 1.854959ms ago: executing program 0 (id=177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffff7) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f00000000c0)=0x7f, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRESOCT=r2]) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffff7) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f00000000c0)=0x7f, 0x1) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRESOCT=r2]) (async) 1.667731ms ago: executing program 1 (id=178): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000100)={0x0, 0x1, 0x5}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="1d00000000010200"/20, @ANYRESHEX=r4, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x48) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, r5, 0x0, 0x154) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2400, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x20800, 0x0, 0x103, 0x1, 0x0, 0x7}, 0x20) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x202, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x41}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000100)={0xb, 0x6, 0xfe, 0x2, 0x3, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}, 0xe) setsockopt$sock_int(r9, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r9, 0x1) recvmmsg(r9, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r7]) ioctl$KVM_GET_VCPU_EVENTS(r10, 0xc048aeca, &(0x7f00000002c0)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) 0s ago: executing program 0 (id=179): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) unlink(&(0x7f0000000300)='.\x00') r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x80, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfe, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x54, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x3, 0x3, 0x1000, 0x401, 0x2}, {0x1d, 0x1, 0x8001, 0x5, 0x8, 0x5}, 0xa, 0x7f, 0x9b9}}]}}]}, 0x80}}, 0x44080) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r11, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r11, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r12 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') shutdown(0xffffffffffffffff, 0x0) r13 = openat$binfmt(0xffffffffffffff9c, r12, 0x42, 0x1ff) write$binfmt_elf64(r13, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r13) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x401, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000790408000000000095000000"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x7ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c050}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r0, 0x800, 0xe, 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 0s ago: executing program 0 (id=180): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) close(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x0) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xdb) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r8}, 0x40) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="2d000000010001", 0x7) syz_emit_ethernet(0xd81, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe01}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:35451' (ED25519) to the list of known hosts. [ 45.321559][ T40] audit: type=1400 audit(1757674813.618:62): avc: denied { name_bind } for pid=5883 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.345789][ T40] audit: type=1400 audit(1757674813.638:63): avc: denied { write } for pid=5884 comm="sh" path="pipe:[3831]" dev="pipefs" ino=3831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.367782][ T40] audit: type=1400 audit(1757674813.658:64): avc: denied { execute } for pid=5884 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.375279][ T40] audit: type=1400 audit(1757674813.658:65): avc: denied { execute_no_trans } for pid=5884 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.621322][ T40] audit: type=1400 audit(1757674815.918:66): avc: denied { mounton } for pid=5884 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.624316][ T5884] cgroup: Unknown subsys name 'net' [ 47.783377][ T5884] cgroup: Unknown subsys name 'cpuset' [ 47.789913][ T5884] cgroup: Unknown subsys name 'rlimit' [ 47.974772][ T5952] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.754727][ T5884] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.278884][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 52.278896][ T40] audit: type=1400 audit(1757674820.568:80): avc: denied { execmem } for pid=5961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.526310][ T40] audit: type=1400 audit(1757674820.818:81): avc: denied { create } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.535063][ T40] audit: type=1400 audit(1757674820.818:82): avc: denied { read write } for pid=5967 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.545172][ T40] audit: type=1400 audit(1757674820.818:83): avc: denied { open } for pid=5967 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.554440][ T40] audit: type=1400 audit(1757674820.828:84): avc: denied { ioctl } for pid=5967 comm="syz-executor" path="socket:[6532]" dev="sockfs" ino=6532 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.576008][ T5970] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.579458][ T5970] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.583119][ T5970] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.586345][ T5970] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.590651][ T5970] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.594545][ T5970] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.595876][ T5974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.597727][ T5970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.601327][ T5974] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.603726][ T5970] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.606751][ T5974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.609922][ T5983] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.615064][ T40] audit: type=1400 audit(1757674820.908:85): avc: denied { read } for pid=5980 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.615520][ T5970] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.619933][ T5982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.620068][ T5982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.622255][ T5978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.625136][ T40] audit: type=1400 audit(1757674820.908:86): avc: denied { open } for pid=5980 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.625605][ T5970] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.627721][ T5978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.629262][ T40] audit: type=1400 audit(1757674820.908:87): avc: denied { mounton } for pid=5980 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.633552][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.653418][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.847519][ T40] audit: type=1400 audit(1757674821.138:88): avc: denied { module_request } for pid=5980 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.893858][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 52.995630][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 53.063092][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.066716][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.070094][ T5980] bridge_slave_0: entered allmulticast mode [ 53.073952][ T5980] bridge_slave_0: entered promiscuous mode [ 53.079421][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 53.092491][ T5977] chnl_net:caif_netlink_parms(): no params data found [ 53.104723][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.107699][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.110867][ T5980] bridge_slave_1: entered allmulticast mode [ 53.114479][ T5980] bridge_slave_1: entered promiscuous mode [ 53.260376][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.317104][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.409479][ T5980] team0: Port device team_slave_0 added [ 53.426656][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.429214][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.431624][ T5968] bridge_slave_0: entered allmulticast mode [ 53.434262][ T5968] bridge_slave_0: entered promiscuous mode [ 53.468765][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.471101][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.473355][ T5967] bridge_slave_0: entered allmulticast mode [ 53.475945][ T5967] bridge_slave_0: entered promiscuous mode [ 53.480079][ T5980] team0: Port device team_slave_1 added [ 53.499238][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.501895][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.504175][ T5968] bridge_slave_1: entered allmulticast mode [ 53.507793][ T5968] bridge_slave_1: entered promiscuous mode [ 53.524084][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.526335][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.528552][ T5977] bridge_slave_0: entered allmulticast mode [ 53.532119][ T5977] bridge_slave_0: entered promiscuous mode [ 53.535832][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.538369][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.541289][ T5967] bridge_slave_1: entered allmulticast mode [ 53.543855][ T5967] bridge_slave_1: entered promiscuous mode [ 53.577842][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.581434][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.584274][ T5977] bridge_slave_1: entered allmulticast mode [ 53.587199][ T5977] bridge_slave_1: entered promiscuous mode [ 53.624870][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.627068][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.635477][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.641461][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.643546][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.651931][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.657274][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.676787][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.687204][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.692833][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.711608][ T5977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.771526][ T5977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.845856][ T5968] team0: Port device team_slave_0 added [ 53.868320][ T5967] team0: Port device team_slave_0 added [ 53.873242][ T5980] hsr_slave_0: entered promiscuous mode [ 53.875506][ T5980] hsr_slave_1: entered promiscuous mode [ 53.878576][ T5968] team0: Port device team_slave_1 added [ 53.897418][ T5967] team0: Port device team_slave_1 added [ 53.925230][ T5977] team0: Port device team_slave_0 added [ 53.972912][ T5977] team0: Port device team_slave_1 added [ 53.997248][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.999594][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.009003][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.014771][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.017404][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.025808][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.030047][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.032811][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.043594][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.105260][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.108220][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.119042][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.123673][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.125895][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.134467][ T5977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.143828][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.146800][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.157150][ T5977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.218172][ T5967] hsr_slave_0: entered promiscuous mode [ 54.221149][ T5967] hsr_slave_1: entered promiscuous mode [ 54.223259][ T5967] debugfs: 'hsr0' already exists in 'hsr' [ 54.225111][ T5967] Cannot create hsr debugfs directory [ 54.272975][ T5968] hsr_slave_0: entered promiscuous mode [ 54.275507][ T5968] hsr_slave_1: entered promiscuous mode [ 54.277500][ T5968] debugfs: 'hsr0' already exists in 'hsr' [ 54.279396][ T5968] Cannot create hsr debugfs directory [ 54.368483][ T5977] hsr_slave_0: entered promiscuous mode [ 54.372033][ T5977] hsr_slave_1: entered promiscuous mode [ 54.374523][ T5977] debugfs: 'hsr0' already exists in 'hsr' [ 54.376868][ T5977] Cannot create hsr debugfs directory [ 54.689583][ T5978] Bluetooth: hci1: command tx timeout [ 54.691281][ T5980] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.699982][ T5978] Bluetooth: hci0: command tx timeout [ 54.700002][ T5976] Bluetooth: hci2: command tx timeout [ 54.700023][ T5332] Bluetooth: hci3: command tx timeout [ 54.704190][ T5980] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.711816][ T5980] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.722613][ T5980] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.751822][ T5967] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.757469][ T5967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.762863][ T5967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.767421][ T5967] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.811355][ T5977] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.818634][ T5977] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.822834][ T5977] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.826957][ T5977] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.879679][ T5968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.887230][ T5968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.895654][ T5968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.908509][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.913243][ T5968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.956164][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.976339][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.978506][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.996993][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.999998][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.035513][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.042976][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.060357][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.074750][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.088508][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.091340][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.105709][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.113320][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.116353][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.123921][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.126703][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.134021][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.136947][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.167033][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.193792][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.196821][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.197111][ T40] audit: type=1400 audit(1757674823.488:89): avc: denied { sys_module } for pid=5980 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.218413][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.221476][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.294251][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.321163][ T5980] veth0_vlan: entered promiscuous mode [ 55.326271][ T5980] veth1_vlan: entered promiscuous mode [ 55.341374][ T5980] veth0_macvtap: entered promiscuous mode [ 55.345420][ T5980] veth1_macvtap: entered promiscuous mode [ 55.365174][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.373821][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.385914][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.392724][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.396516][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.401027][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.408427][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.418120][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.457124][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.479660][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.482271][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.503694][ T5967] veth0_vlan: entered promiscuous mode [ 55.515866][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.519330][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.522042][ T5967] veth1_vlan: entered promiscuous mode [ 55.532917][ T5968] veth0_vlan: entered promiscuous mode [ 55.537164][ T5977] veth0_vlan: entered promiscuous mode [ 55.545029][ T5968] veth1_vlan: entered promiscuous mode [ 55.548823][ T5977] veth1_vlan: entered promiscuous mode [ 55.562933][ T5967] veth0_macvtap: entered promiscuous mode [ 55.570703][ T5980] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.572493][ T5967] veth1_macvtap: entered promiscuous mode [ 55.593313][ T5977] veth0_macvtap: entered promiscuous mode [ 55.596857][ T5977] veth1_macvtap: entered promiscuous mode [ 55.601718][ T5968] veth0_macvtap: entered promiscuous mode [ 55.606557][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.606997][ T6056] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 55.613111][ T5968] veth1_macvtap: entered promiscuous mode [ 55.627344][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.641272][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.645608][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.651017][ T101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.660180][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.663143][ T101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.667055][ T101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.680346][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.685557][ T101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.697410][ T1148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.711317][ T1148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.715144][ T1148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.725514][ T1148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.728512][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.743764][ T1148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.747305][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.752001][ T1148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.752433][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.758345][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.803616][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.806186][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.813803][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.816356][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.830400][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.833688][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.857263][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.860462][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.873456][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.876100][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.951709][ T6076] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 56.479348][ T6037] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 56.641857][ T6037] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 56.644489][ T6037] usb 7-1: config 0 has no interface number 0 [ 56.646406][ T6037] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 56.650058][ T6037] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 56.653393][ T6037] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 56.656954][ T6037] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 56.660751][ T6037] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 56.664151][ T6037] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 56.668141][ T6037] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 56.671276][ T6037] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.679838][ T6037] usb 7-1: config 0 descriptor?? [ 56.681484][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 56.682646][ T6097] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.686747][ T6097] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.704070][ T6037] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 56.722570][ T6118] binfmt_misc: register: failed to install interpreter file ./file1 [ 56.769254][ T5978] Bluetooth: hci2: command tx timeout [ 56.769424][ T5976] Bluetooth: hci3: command tx timeout [ 56.780530][ T5978] Bluetooth: hci1: command tx timeout [ 56.782329][ T5976] Bluetooth: hci0: command tx timeout [ 56.787213][ T6125] netlink: 256 bytes leftover after parsing attributes in process `syz.0.22'. [ 56.901733][ T1025] usb 7-1: USB disconnect, device number 2 [ 56.910706][ T1025] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 56.999241][ T6017] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.160519][ T6017] usb 8-1: Using ep0 maxpacket: 32 [ 57.163569][ T6017] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 57.166727][ T6017] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 57.178074][ T6017] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 57.184784][ T6017] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 57.190297][ T6017] usb 8-1: config 0 interface 0 has no altsetting 0 [ 57.193944][ T6017] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 57.196773][ T6017] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 57.200864][ T6017] usb 8-1: Product: syz [ 57.202187][ T6017] usb 8-1: Manufacturer: syz [ 57.203671][ T6017] usb 8-1: SerialNumber: syz [ 57.206781][ T6017] usb 8-1: config 0 descriptor?? [ 57.216682][ T6017] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 57.225580][ T6017] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 57.279249][ T40] kauditd_printk_skb: 3697 callbacks suppressed [ 57.279260][ T40] audit: type=1326 audit(2000000001.279:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae91d8eba9 code=0x50000 [ 57.288338][ T40] audit: type=1326 audit(2000000001.289:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae91d8eba9 code=0x50000 [ 57.295318][ T40] audit: type=1326 audit(2000000001.289:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae91d8eba9 code=0x50000 [ 57.302441][ T40] audit: type=1326 audit(2000000001.289:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae91d8eba9 code=0x50000 [ 57.309580][ T40] audit: type=1326 audit(2000000001.289:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae91d8eba9 code=0x50000 [ 57.318670][ T40] audit: type=1326 audit(2000000001.289:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae91d8eba9 code=0x50000 [ 57.328400][ T40] audit: type=1326 audit(2000000001.289:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae91d8eba9 code=0x50000 [ 57.337811][ T40] audit: type=1326 audit(2000000001.289:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae91d8eba9 code=0x50000 [ 57.347230][ T40] audit: type=1326 audit(2000000001.289:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae91d8eba9 code=0x50000 [ 57.356834][ T40] audit: type=1326 audit(2000000001.289:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae91d8eba9 code=0x50000 [ 57.426085][ T5971] usb 8-1: USB disconnect, device number 2 [ 57.428636][ C0] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 57.436046][ T5971] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 57.657181][ T6137] netlink: 'syz.2.25': attribute type 1 has an invalid length. [ 57.665850][ T6137] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 57.947003][ T6146] netlink: 'syz.1.28': attribute type 2 has an invalid length. [ 58.175627][ T6153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.31'. [ 58.178896][ T6153] openvswitch: netlink: Missing key (keys=40, expected=100) [ 58.322102][ T6165] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 58.501842][ T6163] sg_write: data in/out 331/251 bytes for SCSI command 0x0-- guessing data in; [ 58.501842][ T6163] program syz.1.34 not setting count and/or reply_len properly [ 58.571561][ T6174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.38'. [ 58.634596][ T6178] overlay: filesystem on ./bus is read-only [ 58.694651][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 58.703993][ T6182] bridge0: entered promiscuous mode [ 58.708544][ T6180] overlayfs: workdir and upperdir must be separate subtrees [ 58.708721][ T6182] bridge0: port 3(macvlan2) entered blocking state [ 58.716871][ T6182] bridge0: port 3(macvlan2) entered disabled state [ 58.720849][ T6180] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 58.721336][ T6182] macvlan2: entered allmulticast mode [ 58.730793][ T6182] bridge0: entered allmulticast mode [ 58.737837][ T6182] macvlan2: left allmulticast mode [ 58.740568][ T6182] bridge0: left allmulticast mode [ 58.743625][ T6182] bridge0: left promiscuous mode [ 58.849793][ T5976] Bluetooth: hci3: command 0x040f tx timeout [ 58.859633][ T5332] Bluetooth: hci1: command tx timeout [ 58.861495][ T5332] Bluetooth: hci2: command tx timeout [ 58.863415][ T5976] Bluetooth: hci0: command tx timeout [ 58.953223][ T6191] netlink: 'syz.3.45': attribute type 10 has an invalid length. [ 58.963872][ T6191] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 59.306878][ T6210] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.399874][ T6210] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.479887][ T6210] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.556242][ T6210] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.579151][ T5971] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.655484][ T101] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.664027][ T101] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.680463][ T101] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.692777][ T1178] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.729567][ T5971] usb 8-1: Using ep0 maxpacket: 8 [ 59.735818][ T5971] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 59.739003][ T5971] usb 8-1: config 179 has no interface number 0 [ 59.745412][ T5971] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 59.749865][ T5971] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 59.754312][ T5971] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 101, changing to 10 [ 59.758707][ T5971] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24697, setting to 1024 [ 59.762681][ T5971] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 59.766902][ T5971] usb 8-1: config 179 interface 65 has no altsetting 0 [ 59.769190][ T5971] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 59.772159][ T5971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.786301][ T5971] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input5 [ 59.880486][ T5366] input input5: unable to receive magic message: -110 [ 59.889874][ T5366] input input5: unable to receive magic message: -32 [ 59.896703][ T5366] input input5: unable to receive magic message: -32 [ 59.910203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.923213][ T5366] input input5: unable to receive magic message: -32 [ 59.949638][ T5366] input input5: unable to receive magic message: -32 [ 59.961884][ T6226] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 59.971235][ T6228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6228 comm=syz.0.59 [ 59.978125][ T6226] netlink: 'syz.2.58': attribute type 1 has an invalid length. [ 59.983820][ T6211] input input5: unable to receive magic message: -32 [ 59.991850][ T1025] usb 8-1: USB disconnect, device number 3 [ 59.991999][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 59.993383][ T6211] 9pnet_fd: Insufficient options for proto=fd [ 60.027454][ T6231] tipc: Started in network mode [ 60.029863][ T6231] tipc: Node identity c6048606fad8, cluster identity 4711 [ 60.032934][ T6231] tipc: Enabled bearer , priority 0 [ 60.040443][ T6230] tipc: Disabling bearer [ 60.111297][ T6239] netlink: 'syz.0.62': attribute type 30 has an invalid length. [ 60.212260][ T6239] Zero length message leads to an empty skb [ 60.228426][ T6247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6247 comm=syz.1.65 [ 60.233872][ T6247] netlink: 'syz.1.65': attribute type 22 has an invalid length. [ 60.236885][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 60.248235][ T1178] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.250759][ T6247] netlink: 'syz.1.65': attribute type 22 has an invalid length. [ 60.251726][ T1178] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.254471][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 60.257150][ T1178] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.263690][ T1178] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.399240][ T6257] netlink: 201424 bytes leftover after parsing attributes in process `syz.3.68'. [ 60.402150][ T6257] openvswitch: netlink: Message has 5 unknown bytes. [ 60.408529][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 60.426477][ T6259] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 60.448904][ T6260] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 60.666573][ T6267] netlink: 68 bytes leftover after parsing attributes in process `syz.1.72'. [ 60.766296][ T6269] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 60.930579][ T5332] Bluetooth: hci2: command tx timeout [ 60.933345][ T5332] Bluetooth: hci0: command tx timeout [ 60.935631][ T5976] Bluetooth: hci1: command tx timeout [ 60.935653][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 60.941039][ T6283] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.197355][ T6311] netlink: zone id is out of range [ 61.200281][ T6311] netlink: zone id is out of range [ 61.201958][ T6311] netlink: zone id is out of range [ 61.203930][ T6311] netlink: zone id is out of range [ 61.205706][ T6311] netlink: zone id is out of range [ 61.206368][ T6313] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 61.207315][ T6311] netlink: zone id is out of range [ 61.207322][ T6311] netlink: zone id is out of range [ 61.280812][ T6325] autofs: Bad value for 'fd' [ 61.581584][ T6363] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.655776][ T6375] netlink: 'syz.1.109': attribute type 4 has an invalid length. [ 61.737904][ T63] Bluetooth: hci0: hcon ffff88802a8cc000 sent 1 < count 127 [ 61.740776][ T63] Bluetooth: hci0: hcon ffff88802a8cc000 sent 0 < count 4 [ 61.742999][ T63] Bluetooth: hci0: hcon ffff88802a8c8000 sent 0 < count 3 [ 61.745296][ T63] Bluetooth: hci0: hcon ffff88802a8c8000 sent 0 < count 13 [ 61.747596][ T63] Bluetooth: hci0: hcon ffff88802a8c8000 sent 0 < count 10 [ 62.080741][ T6429] wg1: entered promiscuous mode [ 62.082748][ T6429] wg1: entered allmulticast mode [ 62.180536][ T6446] __nla_validate_parse: 5 callbacks suppressed [ 62.180547][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'. [ 62.309836][ T6466] [U]  [ 62.314763][ T40] kauditd_printk_skb: 22598 callbacks suppressed [ 62.314776][ T40] audit: type=1400 audit(2000000006.319:26392): avc: denied { map } for pid=6465 comm="syz.1.125" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 62.355833][ T40] audit: type=1400 audit(2000000006.359:26393): avc: denied { append } for pid=6468 comm="syz.1.126" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.462354][ T40] audit: type=1400 audit(2000000006.469:26394): avc: denied { create } for pid=6479 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 62.467976][ T40] audit: type=1400 audit(2000000006.469:26395): avc: denied { ioctl } for pid=6479 comm="syz.1.127" path="socket:[11588]" dev="sockfs" ino=11588 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 62.477406][ T40] audit: type=1400 audit(2000000006.469:26396): avc: denied { accept } for pid=6479 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.483268][ T40] audit: type=1400 audit(2000000006.469:26397): avc: denied { bind } for pid=6479 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.490107][ T40] audit: type=1400 audit(2000000006.469:26398): avc: denied { listen } for pid=6479 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.496565][ T40] audit: type=1400 audit(2000000006.469:26399): avc: denied { write } for pid=6479 comm="syz.1.127" path="socket:[12604]" dev="sockfs" ino=12604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.505587][ T40] audit: type=1400 audit(2000000006.469:26400): avc: denied { accept } for pid=6479 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.505628][ T40] audit: type=1400 audit(2000000006.499:26401): avc: denied { setattr } for pid=6483 comm="syz.0.128" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.557491][ T6493] netlink: 1 bytes leftover after parsing attributes in process `syz.0.131'. [ 62.604420][ T6499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.133'. [ 62.630180][ T6504] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 62.645362][ T6504] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 62.747380][ T6515] hpfs: hpfs_map_sector(): read error [ 62.801651][ T6523] netlink: 'syz.1.140': attribute type 3 has an invalid length. [ 62.804426][ T6523] netlink: 'syz.1.140': attribute type 1 has an invalid length. [ 62.807178][ T6523] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.140'. [ 62.998643][ T6537] netlink: 44 bytes leftover after parsing attributes in process `syz.2.145'. [ 63.009192][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 63.035834][ T6540] usb 2-1: USB disconnect, device number 2 [ 63.087586][ T6540] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 63.173006][ T6551] Invalid logical block size (-5) [ 63.224095][ T6560] PM: Enabling pm_trace changes system date and time during resume. [ 63.224095][ T6560] PM: Correct system time has to be restored manually after resume. [ 63.254535][ T6564] afs: Unknown parameter 'dynrypt:0000111122223333' [ 63.402609][ T6572] overlayfs: failed to resolve '/ûñƒ’¨ÂË®°´“¸ñ™ÂyY+ÙyŠÕbè"q0)Ìm¬zÁ­d›6aóÝs»ˆÿ…³s': -2 [ 63.403401][ T6573] overlayfs: failed to resolve '/ûñƒ’¨ÂË®°´“¸ñ™ÂyY+ÙyŠÕbè"q0)Ìm¬zÁ­d›6aóÝs»ˆÿ…³s': -2 [ 63.419739][ T63] Bluetooth: hci0: command tx timeout [ 63.559554][ T6580] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 63.598085][ T6585] netlink: 32 bytes leftover after parsing attributes in process `syz.2.160'. [ 63.849582][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.999155][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 64.001942][ T24] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 64.004526][ T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 64.008241][ T24] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 64.011827][ T24] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 64.015923][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 64.022351][ T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 64.025259][ T24] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 64.027903][ T24] usb 8-1: Product: syz [ 64.029348][ T24] usb 8-1: Manufacturer: syz [ 64.030811][ T24] usb 8-1: SerialNumber: syz [ 64.034019][ T24] usb 8-1: config 0 descriptor?? [ 64.037318][ T24] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 64.041380][ T24] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 64.385239][ T6609] overlayfs: failed to resolve './file1': -2 [ 64.693173][ T6622] pim6reg13: entered allmulticast mode [ 65.062412][ T6631] comedi comedi0: Minor 254 is invalid! [ 65.089157][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 65.296791][ T6646] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 65.417888][ T6653] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 65.421639][ T6653] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 65.425204][ T6653] CPU: 1 UID: 0 PID: 6653 Comm: syz.0.180 Not tainted syzkaller #0 PREEMPT(full) [ 65.428259][ T6653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.431606][ T6653] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 65.433173][ T6653] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 aa db 40 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 65.439078][ T6653] RSP: 0018:ffffc90005a7fbf0 EFLAGS: 00010293 [ 65.440967][ T6653] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887ac2da [ 65.443431][ T6653] RDX: ffff888029df8000 RSI: ffffffff887ac326 RDI: 0000000000000005 [ 65.445895][ T6653] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 65.448347][ T6653] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc90005a7fd88 [ 65.450788][ T6653] R13: ffffc90005a7fd88 R14: 0000000000000001 R15: ffff8880454d9400 [ 65.453235][ T6653] FS: 00007fae92b666c0(0000) GS:ffff8880d67b3000(0000) knlGS:0000000000000000 [ 65.456025][ T6653] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.458080][ T6653] CR2: 00007fae92b65f98 CR3: 000000005938b000 CR4: 0000000000352ef0 [ 65.460568][ T6653] Call Trace: [ 65.461627][ T6653] [ 65.462562][ T6653] ? __pfx_bcsp_recv+0x10/0x10 [ 65.464084][ T6653] hci_uart_tty_receive+0x254/0x7e0 [ 65.465708][ T6653] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 65.467483][ T6653] tty_ioctl+0x580/0x1680 [ 65.468839][ T6653] ? __pfx_tty_ioctl+0x10/0x10 [ 65.470316][ T6653] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 65.472457][ T6653] ? hook_file_ioctl_common+0x145/0x410 [ 65.474176][ T6653] ? selinux_file_ioctl+0x180/0x270 [ 65.475810][ T6653] ? selinux_file_ioctl+0xb4/0x270 [ 65.477415][ T6653] ? __pfx_tty_ioctl+0x10/0x10 [ 65.478904][ T6653] __x64_sys_ioctl+0x18e/0x210 [ 65.480404][ T6653] do_syscall_64+0xcd/0x4e0 [ 65.481854][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.483696][ T6653] RIP: 0033:0x7fae91d8eba9 [ 65.485100][ T6653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.490974][ T6653] RSP: 002b:00007fae92b66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.493484][ T6653] RAX: ffffffffffffffda RBX: 00007fae91fd6180 RCX: 00007fae91d8eba9 [ 65.495904][ T6653] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000005 [ 65.498299][ T6653] RBP: 00007fae91e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 65.500686][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.503067][ T6653] R13: 00007fae91fd6218 R14: 00007fae91fd6180 R15: 00007ffe15f2fa48 [ 65.505471][ T6653] [ 65.506446][ T6653] Modules linked in: [ 65.508029][ T6653] ---[ end trace 0000000000000000 ]--- [ 65.510500][ T6653] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 65.513212][ T6653] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 aa db 40 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 65.520492][ T6653] RSP: 0018:ffffc90005a7fbf0 EFLAGS: 00010293 [ 65.522349][ T6653] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887ac2da [ 65.524880][ T6653] RDX: ffff888029df8000 RSI: ffffffff887ac326 RDI: 0000000000000005 [ 65.527648][ T6653] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 65.530261][ T6653] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc90005a7fd88 [ 65.532807][ T6653] R13: ffffc90005a7fd88 R14: 0000000000000001 R15: ffff8880454d9400 [ 65.535264][ T6653] FS: 00007fae92b666c0(0000) GS:ffff8880d66b3000(0000) knlGS:0000000000000000 [ 65.538014][ T6653] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.540132][ T6653] CR2: 00002000000190c0 CR3: 000000005938b000 CR4: 0000000000352ef0 [ 65.542608][ T6653] Kernel panic - not syncing: Fatal exception [ 65.545251][ T6653] Kernel Offset: disabled [ 65.546609][ T6653] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:00:33 Registers: info registers vcpu 0 CPU#0 RAX=00000000000550dc RBX=0000000000000000 RCX=ffffffff8b949b49 RDX=ffffed100d486656 RSI=ffffffff8c163000 RDI=ffffffff81914111 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7390 R15=0000000000000000 RIP=ffffffff8b94868f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000190c0 CR3=000000005956e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=0000000000000007 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe214612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe214612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000386f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000001b4c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85649435 RDI=ffffffff9b1170a0 RBP=ffffffff9b117060 RSP=ffffc90005a7f5f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b117060 R15=ffffffff856493d0 RIP=ffffffff8564945f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fae92b666c0 ffffffff 00c00000 GS =0000 ffff8880d67b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fae92b65f98 CR3=000000005938b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4a7e03c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4a7e0546 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4a7e0546 00007ffe4a7e054c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe214612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe214612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe214612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe214612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe214612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe214612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000028e3c RBX=0000000000000002 RCX=ffffffff8b949b49 RDX=ffffed100d4c6656 RSI=ffffffff8c163000 RDI=ffffffff81914111 RBP=ffffed1003bd1910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801de8c880 R14=ffffffff90ab7390 R15=0000000000000000 RIP=ffffffff8b94868f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe15f2eec0 CR3=000000004f501000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe15f2fdd0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe15f2ff56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe15f2ff56 00007ffe15f2ff5c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae91e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae91e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae91e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae91e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae91e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae91e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000032cf4 RBX=0000000000000003 RCX=ffffffff8b949b49 RDX=ffffed100d4e6656 RSI=ffffffff8c163000 RDI=ffffffff81914111 RBP=ffffed1003c5c000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2e0000 R14=ffffffff90ab7390 R15=0000000000000000 RIP=ffffffff8b94868f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fae91d74940 CR3=000000005956e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=0000000000000007 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe214612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe214612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000386f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000001b4c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000