last executing test programs: 1.463840315s ago: executing program 1 (id=127): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000000c0)={0x9909cb, 0x9}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) (async) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0x7) 1.461762486s ago: executing program 1 (id=128): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40082104, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540100001000010000000000fddbdf25ac14142a000000000000000000000000fe8000000000000000000000000000aa020000004e2300000000000000000000ef01c1fad7"], 0x154}}, 0x2004c840) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x4, 0x3, 0x1000, 0xffffffffffffffff, 0x0, '\x00', r3, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.386383094s ago: executing program 1 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x40, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="f2b4f04b60f5"}]}, 0x40}, 0x1, 0x0, 0x0, 0x44841}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f00000000c0)=0xffffff18, 0x3) 1.385489387s ago: executing program 1 (id=131): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x4}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_sctp(0x2, 0x7, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000004c0)="cc", 0x1}, {&(0x7f0000000c40)="4e9dd319954453cfb964069ecd1e9e57f63f624a199c52d0c71dee297e3cc62907abd41ca061e83e7700876b8f6e5101c3cfc57a91e526f1114f3a24deb15bdc1ae3a4997defba7e8f54671921ca19354ecf9ef4ac40241e6b64006b1384c61f16bf71c22442de77e258c3b4e207d23cc92e7e3dc2263f662c1ff3cb3a0c3c8bb55725268a5c2ab5e56a8c4dcabf68f9752d4e403cefc66d46b3102415fdd39b1b6986be0f8fbc84414f5bf88aa16e962fdbd7bfd639bad83a507096a6e33fa26c296e2a", 0xc4}, {&(0x7f00000009c0)="cbc0d4c6d51135e674dba57d6ed2ddc12056125b0ee224059bbf1f648d3fa32b8c0565f8cf4476f3709c4ed60544b2430349014358210c255a7d8096eb553abab27c0ac83dc82625d4fdb15e93956483c4", 0x51}, {&(0x7f0000000240)="dabd58f0f476e1ee724050b11a34fb50bd7acdf8986a1bae5a6171a631e4ee6ce1fceaf3265694fa6c47559712e4683ebe7eb22cafe9b4e7d4fd9aedc49b9270e7a28fc6c70ca89b44cf10d87455a1c34c9c3671d9cf3a62d0fa1c14e41337b865365d05cab609e6359cadf7f8cb428422e18608aa775f8672b75e064b7634da1e740901cb364157a07b5a46bd94e80e75fd8b4bf6d1f5ea80156c990474115f68c565c5dcd8247d071dea9036be90096250304c76b78f01", 0xb8}, {&(0x7f0000000a40)="aca011498c4ac0b7f827ead24cbde30a1c401d69bbf00e0d63a3490cc9754869c64486b720e5def9cb9affdde4ced0fe0776226ed8745b35977d4fcf442f291dd74e3467a653acd1cfb4efd432d01d610486781db3dcc332f9b252a5507c386aa6", 0x61}, {&(0x7f0000000b00)="a8881b4a98f50a234d9d8fbb5ed492ca94dded781eb4c44e84862c0aa48b0f06a53d4f74db01e8b7c8da032a1915704ce1c077b7b2a1c7e22786b38e44189f4e85b3f1073198a6ce8162d89cdce40891c4d362cc5ca5fbb8e660700a538d015988b6815b9d46ccda9e368c1fbc8a389adc0f421f38468a163ba8765e832115f61b042405278bdfba3a79cfda3c8453d2b483b9f874a3492e69e81a", 0x9b}, {&(0x7f00000008c0)="2e8dd0eee2a97f0dd0cbd80505ee0793e2b0aa874c8ffa76d69cbb088bd641c792047e589bd703a6befa1b46e1f895a6255b1d349a431005a1ef67cb6e1e7f5371b51ef8728c5a23f9d7346aa54ca30ffa29712f6463eefd1f2e2e0134c8a1ffca3ea413bb66c82ecbb114b125acf0144df3164d2653d5b616c3c97cc53453fe4cdcf954774147fed45ccbe9592c18848c7e454efed4eb32aaead3731cc9b0086a82133c6b7a4823d9ae42917f192cf0613c4194e4a1d5e3fd3eef855441d7298283f0b175b9af48a846944aa5f2dca16e5236a89f1c1306945bc4b895420b6bc64691cc86566f064f79cc", 0xeb}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="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", 0x38f}, {&(0x7f0000000200)="d8fe61cb28d9640d540c44cf98f32ab0975835f0e26ef8b3d434cb3d6fe6191cf7cb16c549", 0x25}], 0x2}}], 0x2, 0x4048884) 1.275994918s ago: executing program 1 (id=132): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf25250000000a0001007770616e3100000005002a00012000000500290001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20008001}, 0x20044004) (async) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001a"]) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYRES16], 0x6c}}, 0x0) 1.262330103s ago: executing program 1 (id=133): r0 = socket$alg(0x26, 0x5, 0x0) r1 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000340)='c:g\xc8\x00\xbb\xd8Yn\xab\x18\x02H\xc5W\x89n\xf0A\x9f2\xdc\xd4n\xf7\x7f\xb2\x10\xa4\x94\x81\x1evX\x9d&\x02v\xa6\vk\x02$\x80a?XH\x9d%.C\x12\xf6u\xd1\xdaQc\xbe\xad\xb0J\xa3:J\\e\x1f\x86#\xaa\xb8\x84\xf37\xcd\xcb\x8d\x82\xf0\xf7\xd0\xfb\x05k\x87\xfc\xbbd\'\xbav\xc3\xba\xe81\x96\xb6\x1f\xbe*\x86\xfe\xff\x86Xl\xca\x80\x12\xe9g/c\x14\x00}V\x17\xd9\x95T\xd2\xdf\x93\xe9\xd6\t\x1c6(\x95v\xe2\xce\x1c\x9a\xd4Y\xfd\x8ek\x9bGo\x1cpe{q(\xfe\x18\xf5P\xd5\x18\xef\xc7\xdd\xdd2\xe9\x84\x91\xb9D\f\xae\xb3\xa9\xfc\xc4\xff\x05=f\xaaZ\xbeXu\xe7\xff\xdf\x14\xce]\x90\x87\xef\xce\xdeL\\\xf1z\x94\x88\x1fr\xcd\x18\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0xffffffff]}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564d90c2000feacc7d17a615b2", 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) 656.210772ms ago: executing program 0 (id=144): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000280)) setregid(0xffffffffffffffff, r3) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000640)="b9a4139164b187d42b587197bd92", 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x6db6ec49e3ab5510}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xfff3}}]}}]}, 0x48}}, 0x400c084) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) 487.040345ms ago: executing program 0 (id=147): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000540)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async, rerun: 32) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000001c0)) (rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000400), 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="687367653d776974689656407b15132e696e5f73697a652c77c87e72448f00"]) (async) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) (async, rerun: 32) r7 = openat$cgroup_ro(r3, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) (async, rerun: 64) r8 = syz_io_uring_setup(0x540, &(0x7f00000004c0)={0x0, 0x4c84, 0x0, 0x1, 0x223}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000b9e9dbea64b5212a1685518bae3fc7d978bc2244f2229244cb47d682276ee351b5514ee8f517f385c4e32e8c9b4b358b40d823f48b21e9193cc4bd5610c42c94954113a5c11dc3bf5f58c0d449910dc06c4e130a0399ea4aa8a66ce60b91a545248da68194333e7d9aaffcc5cffc2aec97657baa86d5f6abe784fe974e65d2a45a5c0e07ca45d12aabca13ba799d3cab0d6533b19ebc6e4214300d1bbd7c4fd59bc8871188d6b3dcf919f31511503f767ab837a01d4a80914f09cf0295f6e0e7905f0df05c1fa6e5aae5b32da6c7741444ba45f538f5ef9ffa88329fedbf14b1e4aa14bb", @ANYRES16=0x0, @ANYBLOB="090428bd7000fedbdf250100000005002e00fc00000008002c000600000008003100030000000500290000000000"], 0x34}}, 0x8101) (async, rerun: 32) io_uring_enter(r8, 0xce1, 0xfeec, 0x0, 0x0, 0x0) (rerun: 32) io_uring_enter(r3, 0x80004ac8, 0x406d, 0x1800000000000024, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r7, 0x0) (async, rerun: 64) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) 426.177084ms ago: executing program 3 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) unshare(0x20020680) r2 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x1, 0x2000008}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x10000000) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x50, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)='v', 0x1}], 0x1) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000009c00058008000100756470001c000280080003000000000008000200000000000800020000000000080001006574680008000100756470000800030065746800140002800800030000000000080002000000000014000280080004"], 0xb0}}, 0x0) 335.79038ms ago: executing program 3 (id=152): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) (async) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000140)={0xa, 0xea0, 0x0, @mcast1}, 0x1c) (async, rerun: 64) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) (async, rerun: 64) sendto$inet6(r1, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff7487b4b43ce086388e5de7714fa228ee1f6848", 0x22, 0x0, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0xfffffce5, 0x2003, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0xfffffffffffffdaf) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 32) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 334.880426ms ago: executing program 3 (id=154): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x658, 0x208, 0x328, 0xffffffff, 0x328, 0x0, 0x588, 0x588, 0xffffffff, 0x588, 0x588, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000008) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7d) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0xfffffffe, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "e3ccd1c5b8fbe60833617f2f4a63b45b"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0xef}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x24000000) creat(&(0x7f00000006c0)='./file0\x00', 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 331.640373ms ago: executing program 0 (id=155): r0 = socket(0x1e, 0x5, 0x0) (async) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @null, @bcast, @null]}, 0x48) (async) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r6 = socket(0x10, 0x803, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x34, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR=']']}]}}]}]}]}}]}, 0x78}}, 0x200400d4) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r9, &(0x7f0000000480)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/41, 0x29}], 0x1, 0x0) (async) sendto$inet(r1, 0x0, 0x45, 0x4000010, &(0x7f0000000100)={0x2, 0xfffd, @private=0xa010101}, 0x10) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 255.112923ms ago: executing program 2 (id=156): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000f5030088f5ca7b00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001d0005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x8000, 0x40, 0x4ed, 0x1, {{0x35, 0x4, 0x3, 0x39, 0xd4, 0x65, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@end, @end, @noop, @generic={0x82, 0x7, "0466f1ec3c"}, @cipso={0x86, 0x14, 0x1, [{0x6, 0x4, "06d3"}, {0x2, 0x7, "63e9aa7cfd"}, {0x1, 0x3, "a4"}]}, @timestamp_prespec={0x44, 0x54, 0x36, 0x3, 0x7, [{@local, 0x3ff}, {@empty, 0x8000}, {@empty, 0x8}, {@multicast1, 0x60000}, {@rand_addr=0x64010101, 0x9b}, {@loopback, 0x8}, {@private=0xa010100, 0x2}, {@remote}, {@private=0xa010101, 0xfff}, {@local, 0x4}]}, @cipso={0x86, 0x47, 0x3, [{0x2, 0x5, "e5c7d3"}, {0x5, 0xc, "155b5a667c57eb87011b"}, {0x6, 0x10, "4e0bd3f550e967fddb6d4768d0ce"}, {0x1, 0xb, "9881cb8e4564e1d940"}, {0x7, 0x6, "d6d73f10"}, {0x881c1d32bad18dc7, 0xf, "fdeedb512fea014fbc3d9eda52"}]}, @ra={0x94, 0x4}, @noop]}}}}}) (async, rerun: 32) rmdir(&(0x7f0000000140)='./file0\x00') (rerun: 32) 252.864088ms ago: executing program 0 (id=157): r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000800)) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async, rerun: 64) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (rerun: 64) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) (async, rerun: 64) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xfb) (rerun: 64) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x200, 0x8, 0x1a, "fc12105588e633bbb1dfe72dace17a32d211ee"}) (async) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0xd) (async) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x6) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x2) (async, rerun: 32) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1010010, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xf08552edafe7e4ce}}, {@default_permissions}]}}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, &(0x7f0000000280)=0xc) (rerun: 64) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 252.394378ms ago: executing program 2 (id=158): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/warn_count', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000100)=""/169, 0xa9) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x1, 0x0) 250.288906ms ago: executing program 0 (id=159): r0 = syz_io_uring_complete(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000016, 0x20010, r0, 0x452e9000) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r2, &(0x7f0000001840)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff07000000fc5e15f4c3d3fbd80dad000057f2"], 0x125) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r4], 0x328}}, 0x84) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040a01010003000540000000000000000000000000000000e1a90249599a991260b7c5ed2c9669506fd976bf3297ae706bb52a57e95b28bbeea9fddb9910ef3a875df35df6126bc60647eb59ddcf42513e60422abe54f57458d93473c342ab6bca36f6dd0dac0dfdf44e694a57c791a4"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) 206.988714ms ago: executing program 3 (id=160): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3b000000010001", 0x178) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r2, 0x0, 0x5b, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc0505510, &(0x7f0000000480)={0x0, 0x2, 0x0, 0x0, 'syz1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES32=r6, @ANYBLOB="010000000000000000001a0000000c000180080001"], 0x20}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) ioctl$KVM_CAP_X86_GUEST_MODE(r3, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000000000207000000ffffffff"]) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000200)=0x2) close_range(r8, 0xffffffffffffffff, 0x0) 206.611911ms ago: executing program 2 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x9}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x4f0}]}}]}, 0x48}}, 0x4044880) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@deltclass={0x3c, 0x29, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1}, {0xe, 0xe}, {0x10, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0xa}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0xf}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000040) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xeb) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a801008100", 0x1c}, {&(0x7f0000000240)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0x4011) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) prctl$PR_SET_MM_MAP(0x17, 0x3, 0x0, 0xfffffffffffffdd7) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)=0x3) 206.190885ms ago: executing program 0 (id=162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private2, 0x3, 0x10, 0x9, 0x500, 0x4c, 0x3420103, r1}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000040)="65b0", 0x4000) close_range(r2, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) epoll_create1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x4, 0x4, 0x10, 0x0, 0x0, 0xbb, 0x2, 0x3, 0xa6, 0x2, 0x5, 0x0, 0xfffffffffffffdfc}, {0xfffffffc, 0x1ff, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x8, 0x4, 0xff, 0x2, 0x0, 0x800000000000000}, {0x2, 0x33, 0x8, 0x0, 0x1, 0x5, 0x4, 0xff, 0x5, 0x8c, 0xf7}], 0xfffff7e9}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x74}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000180)={{r9, r10+10000000}}, &(0x7f00000001c0)) r11 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) 76.792104ms ago: executing program 2 (id=163): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r0, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e6484c2e6e0d182500b05bda134648c70f2125d4fdf7c20f3aca9b49f1affd5020000000900010073fc9d60cc57ae55da797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r0, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e6484c2e6e0d182500b05bda134648c70f2125d4fdf7c20f3aca9b49f1affd5020000000900010073fc9d60cc57ae55da797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a"], 0x7c}}, 0x0) (async) 76.079144ms ago: executing program 2 (id=164): r0 = socket$inet(0x2, 0xa, 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x3, 0x372, [0x0, 0x200000000080, 0x2000000000b0, 0x2000000002ec], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0x8, 0x15, 'bridge_slave_1\x00', 'wg0\x00', 'nr0\x00', 'ip6tnl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0xff], 0x6e, 0xe6, 0x136, [], [@common=@nflog={'nflog\x00', 0x50, {{0x20e9b30e, 0x3ff, 0x6, 0x0, 0x0, "57a215abee20a77bec5c762dab0a428c90a2883dbe1c09949aae20d63107c2c6232f163868cdd206456e12ac520d5aa3d5c92616474fef30e096bb1f9736cdde"}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x29c, {0x8e0}}}}}, {0x9, 0x49, 0xa01, 'ip6gre0\x00', 'syz_tun\x00', 'bridge_slave_1\x00', 'syzkaller0\x00', @empty, [0x0, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0xa6, 0xa6, 0xd6, [@mac={{'mac\x00', 0x0, 0x10}, {{@random="4ff847223a5f"}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xfffffff9}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x3, 0x4, 0x18, 'ipvlan1\x00', 'sit0\x00', 'macvlan1\x00', 'team_slave_0\x00', @multicast, [0x1a4a25e0e5f2ffec, 0x0, 0x969385bf225eeea6, 0xff, 0x0, 0xff], @local, [0x0, 0x0, 0x0, 0xff], 0x9e, 0x9e, 0xd6, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x2, 0x1}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}}]}]}, 0x3ea) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000480)={0x1, 'wg2\x00', 0x1}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000001680)={&(0x7f00000004c0)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000500)="ed89ca0c287534360c968a891314f78e4c1f33f1129b03a5dfbb2d40c29d66cb850d4ab04debc8d1c3b3874727b709087f1128f60d1d363e57fd1025a4f8b376e1a91a46a07231e7a10cba2bf18527e853537ef993617c1195d75d73ec710a3862536dd4ca0455a48946c977650298276a11d1f71c1033b0bf45671aa40970c94eafa042c7b0f7a576d456024cc1d79e7d91f39f42c489a85f58ee8f93a80aa56a10147b6b1d11a8a80357a72226da036f7e1a0b64a6a28f3fea3fe6ba3e4e98eb43d2a92d90eeb28b6e3122ef24c2ddbf3bf8cd643e8fc9a6528fc68cd42f63533f28e5cf2588f43d092493bd7e8822068ca24cf1104fa8a31279b23151256916f60fcaf2e27f8b95933bd4861a7082d08123782cfea73bf9d3b9b99f4b7cc4605265a203beee10ff8390f667d8e4b6bbb6ede16c6d83fe9fa24fbece1b2574bdd793ca565ea503858d1466bc5ad8ad39398eab15348d3be56cade977172234346af8b1a7dcd9ffc8bbdc82cf2ef14a1623dbde5c5224493439182d0b6dba5447c887bd6b3a63b37adebcc3bc756e4746ee70447c928ebf668eefa3f3a91888dcae0fe6bca64a5e8790b4cf4b440f3ba828c31bbbc63ea1144c15de8fc994415368c63d45c3617d04b38cd1e01359b7c977d28623c6b370b94e768f6f71b0ecd69aae7cc619b21796e6469c243a783b17347b39fa3d2460b3a736aba1e902f7281294b1b8408a26e8666e4aae22f38bd48e6dc5b1278363889e2c2ca20c0963f175b82f2647a684c3ab80135f82f784d49233fd6fe999dbe098a606a5b4fdf1014c7819d3057d2021afbef5f5178aa0972b54489ed7b2acafb78bf2182220c6360345b6214a6a9ad26ff5c0fd6ea66f53685b0a4daa81b9baf5fb9f1f35fa765761d329ca2424e7fcbb8040e51476396670bf95daa179bab18b0461bc6fec50f1613511b6ae792fcb21b9e1281a916cdb5ba8a34839b8e035e504a141557c718f15fc8e1f106ac7e7ddc37ae128f1fe532560e34e797421c26ccd30db50dca76669b99a361a6c2a440f50c25147102d7dc93af0404fc1126f8476d9442ee0e34c2cafe6570ce6cc640a4f58d27bed7176431ef8575ad0c911274d2889fcbadecfa6379b56a0d90fd1bac01c5065eac89fe9421c6eb5114cd752720ce78fe64bc3fc770223f8ded6e4042b63852dd7037ea499692a23ae21339a61f0461b81a096a7f6462a1d624840ea8b120d89a4f0475a7b72b4c885636d8b29950b7a3306c2b80a5ec93cbb813d4bec637704ebb52d44423f974e23c3894c794f5b0b883311f93a16f47fa5ff48c5f1c0bb951c258a7f0c4a4544e95f9c790a30f94b4ec5d6d40d507f2138809b1267d3d032a093956af458e043599e01000bcfe89c7d39c7dae2cb1eb12deeff7f2f8aa54a982396d7ad352dc5dad2b834b3446b69d0ecdc8daff6978bae48a22454c21d546a880b0f486bac95adfb1879e9df2266bd40da3c8064bcb9d7d47d9df92d3ce2b48355a22d5b610a10935d4749308d0151c0634d65093521cca7331def96465fcbfd7f3e3671404759927e1ab0cc4c8725ff16125551aab5499688a2e5101339a7562e046da76dad80ebe66c172e1f16ec9666008aa2ba5b4d480fed9e891703fe0898f5b67a4862179b1ae352911775f5ed02a55e1545156f447248426f67e5ab205f6541d8eea72c54b6d4b80ae2dc5b5329cf362d94b0debcce9139079f9fbaa22e32df5afb01dbf37597b18709caa9f8f46994be7d042b56598240f0e45ed6e3a98770bd6c976bde7a03e1ebfa919a8a84cbe964e3a6f5a6f37216db5efdd6ab488530f7304f6be32ea7c595189ac5f99d079e677b165d95d8dcf3ca07136510653a1fcede30db9a404acdd57d198a1bed0e3c6476ce3455a3ae0a9a789e2fcf8a9d3da658f6343c2ba9f634c52643172a2f258e7d2713bd9cce7382483af99b43350badab7a7e5abed5cb6e0dce1776fc669fc34747bc52a5a788689309de8b7fa81cf958cba7249b81f98619fd4ec20510f8d9722639fc9f4546d8bfee7973919c0f8938f337a2dfd339898ae98641c855ac6cf650ef6c3e41e6c59487cca2aea442ebf61a144c48f8264581d2a67c5b3890a896b683183e62fa288cf580d63d37a92b0da0c8b5a3d3d19bfc6d92e8dde39e653d1296b3a46cc49d8017b7240a91162fa8cd05911ffda31026adc2ad8056d6b01968cf07f5967a95c8b82d5a6492607eabd5b45e95e4acdc67844c2deb48053d7f0b1fda1a70d5731f163c20f39b43692a50a1ed8956f27504488b0c5d3a94d432063fd660806b14882faf4e27729ad1242b222c3686ad95e9057ad4d8c399c767834ffbf8b7020751c1516d182ac201cd58db1a99efd81669e5ca41d8e5b2521b2572da428b1840e6e4fbcd013b823820cbb8b81750119360e4ee9086e7edba3e828abf45c4e34cc3323fb54635fc1a19763bd6d9557006db811d32a23947fc4644632339e6813e4980da3f7211b3d80bae519dfb91f3129e81e2837c9b4dee407ce43afee5423881a78df14d1fbc8c0c69664d875c76a779db6be0f440bfaae08789d423580542b0e14ff1df60b1d1b1f45b459ea71d835f71b022c3f851dd83d72c0ee0d5d5903a3d68f6b45b0572d5ebea9adefb5bcf05baa0c1ebdcff27101ff69460a0315173dbf4d3928e32c4239eea6e7d251583af4d284c56c5da16e781c0fb092a51b4a94e15e00ef89277f8421d9046c68c8020dbdc3f7b558e38d002ad7ec9a38a50b499b455df168b0b494f619e8439bfdd6729fb26fc26caff5f348855868bd25acd5a8032c591949934bddd48951032f11bdaa83c1be5f84462d6c9e17d62be0310ba0c9ddbbf329fc7ee68fea5336d9a3b9742df4f6aea25ff44abf1e24269b30117f5741f8c2585e1771fc40e376ecd2208e95647fa8bb2ddfbd5a58f6e210b2e467d1985362bb6c5f4d3d1cd499e8714565eaa2970094787350c9aa798d0aa78e048ed596d245e7d4b8ccfe2b271d1fdcd2545da53c043856c9e8e06a399dbe6bcdfaa52010ba8f416b1159203b158fe35887429683e4b2df3a5e004f8badd3cdca88cdfb64386ec9ce056dfb506b839f67b012914351283181d37001b39ac965dfbcfdabfbfb98971ef37d4bc198e993fa5118f74ebbe118925c11ef04d470d1678229897f8ee2b8161bfdb3320bc5f482e58f65f59fb1c83b9d500971884b26c48c166dee7c69c3df162d0567927e8dafce5828d124dc43ac9ab8abd74537f3765441bd1a20bf1b8fcc241f4d5c997efa77c5b0c4663086c376488f284310061bd2f8b4414a52919d1aefbff74fd8c4b782052cc3372fa28180db84f87e707ef95d0bbdd4914f6d9d2072b9aaa6e2c5b63c489a65b64da62858bb525ebf3788bbf736496dfccacebb926eb7c4a12b7519dd4eb11aceb2f7eebd56e9745613a4d2667d5da39f04088384487227c1a4fedff6c853094c75d18abc12bb54541f6a1ec305c2f870bfd6db2fc335ceb3f66371ee7acdae6d0d880054fd8050d8c6a8d13379fc1390e5cfcf7a3e63474fd953563cee773addf6feb7c6aea2de8ca0b75293c5088d6513d3914ff9b8d18385f8facc317f517b7c84abbba065aa72ec19d30dbfc0e985b9c25d84de4499bdb7d7a5d626ae5d1023f7a0d834d144fa32418216d0defa57a21e5b4cc75bbe39f0ca89dd9158488767bf2fa4f11b90284b799e854df846bfa606226bd4025e9c37e4acfe53ba6024859a1cab54a954dab8521d08250af2c3ddcf92694c323f20dfb62e1066def48bdc8829148940c887858356b220b17c771e0024fb81e0d1f5ab898f750d8de22c1254c22dfdc58ccf4fa97da58d9a98e1212eae88d739d86430e1be6c6831d720c779cfbb89fcc38d1fc46e270e9b882dae68a969853895e0bc2f2023da0de0d660201ddfb9ca112b0d93dc242852bf9997c50425c20f0e522c086765251869a5a6a5b71141bd539ae965b5f8782d6aea028b7818f7720e9406d67afbf50e7ccaae5c2e7f73e3291a8f1f59df6f962d4fc84a039e9b66ed0aeeb527118cc66ebc2fedabbb5648d3f960c546a04b7fd4a25b36d55caa68ae1eb5fb37e6be2f2d22f35290db07bb47969fae48febb6deb1f30056640caa1f5fe59b2d9d2b8e971334a9145eaf864855f36fb8916d4a819572d699318d47090914c4d155bdee3e89c199f80f0807a6f427494e69b32d21f2199af7544e7a87c6f8505e5b64ff350e687498759db35f90ffcece8f4b5d63ea1ef830c2e735e9dfef23991acd8296a4b159d25f053098ea9858e95ad718d9ce4dee3b46641e18bc619dd9aa487219f256b228116d116632dbc3adb7d381d89298c71c57a4700614a0e5b4420b6268a787212e07599584ad53cd819f4f8189f628a7dd66ce2bb22f26de54c48569a74243e8000b23169f39db24158fc2a0a3b829fb12da56427cc69e25b91781faceb4126f6f285c244db8a2898f8f7a797b4e6e550d77f2fa168ff7e45846fad087e0f06e0ed9b220f9c383febd9aab1b3411341a5ee0d36a6ae7619b0d91a7f1d3f71164d0e942464a8ec1adad2535425a38e924c0b6502ef16973711933a559306a4cbb65ac9ee3c8334c1a20e0ac132b72eb629b2c38c1a66c8c61b0d4fc3ba520b2a0897957f3bd6238248ebb25e44a0784b4a98b7e124ff3a331503a32b53b9bf39a111a22bcea0db6f8783183f2002b05419ab6850b98a941f7aa743bf1f3e50935c3d4f671a8d811e6c8242bc4e4438d12b7c75ae3f48f7046d0bf3f2d8ef0f82a84d9026f3d630964a19649b16341bf932a5d2b14fcc1fa629b67e0493bfd22846d27f52c7b2b5cf985409a58a96fddcaf1fe9f7d0e8d2609384fdf61452533313c05b6248bbe81ec814f405ca4836491a7f89021f1a8afd56fd5661206f6100ed5134561aa00f4b6061249a43cf8ab7eba9b8fcc2736ed742c180727148a6d1332713105a85a64570104e9830a246ba21f7156be43aece79b74c6f4326601cffc04ab3801699db44f31d1f7ed018f74cd216c061fdd126097a4caa636e0ca17dc3b1922406763df19a046854a85535ebee5f95aa83e35d1453dd30b80069a09db63769e49c97770f87f5d19edb12dd3af8aa0ae05098fbaa0195a7c268969c6072bcf7f3cd8ce85aa0a7d719fbdcdf3370e9f71a2b9e01e20ee90963a4baf3e7a5986e9146d885a71a6fe9b9dbd4c53fdb1198fc401c10103c91a203ff30900cd24b94232a615ba7a887d169586ecd10970a316853b29dd5b007b8e79fe86c659ccb0e2f5accccc46531760aca30f223e92c55c1274926aece880c17594f681aa716c0dc84cabf7d03a791837583df7b8b246c48959f3ebd9efbd57064fb92797bd2924f81c6ac8c146367a4555b7a7ae094b51d687835e9d69b0ff376e17cc735145d0befbe7fd42fb08e059c5831623314df848e79e856253f5e99bef4109a978d435dddcffd7ef500f05c2bebcb3bcaeff80f5128f927e4843077bf8db367b34f9ec74388bd8966277af1caed4a45ebf0ce46e671bd3994d35d13b4ef76f04e93a6e127e297791492db098ea9fb8e9d2aa4063a88d02f1c5560dd9ee4098814d28241d45203d935685587468d4347d32c2e88b39aa72b67e8b56059509851e99a7a6fcc5c163e6cfab81c295f7c96c2c7df0bf1542f682c457ab107edb45f4bde58d1ec8443abee68e1b586361a59194693ce6aaad4f7cde209d7a8a9b51b814149f707168bc00cde587af4c98d3a720bf383f8309c1b617b75", 0x1000}, {&(0x7f0000001500)="694f8e25f5601e5d2e3bfb1f3f4ceb225f3763c5e08541dc32abec37d7a38f0a6c63d4651987dff3d1e95a0ec369bd2996300cee4b870bac49b5ca644417bc48eb8c867d700fa82d6ded450302018fb6d9857e74b09c996a9237d5118be8fe6b6a0ef77e15d5", 0x66}, {&(0x7f0000001580)="583dfd280668eada6450e33d29c485f7eb56444bdc732e46b2c6060e409eb2975725eef43bef7b1f01331eb2d3d9cffc046edd2abd1de3edb504ca1ffc159bf548d33f01b13c3883093be0b4a60ecd3f2428755d5cd61d46222f315826e376fc49d8", 0x62}], 0x3, &(0x7f0000001640)=[@authinfo={0x18, 0x84, 0x6, {0x31}}], 0x18}, 0x4000014) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x9, 0x79, 0x9, 0xb, 0x20, 0x5, 0x4}, &(0x7f0000001780)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000017c0)={0x9, 0x0, 0x1, 0x8, r1}, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001800)={r1, 0xb, 0x4, 0x2, 0x1, 0xaa1041e3}, &(0x7f0000001840)=0x14) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001880)={r2, 0xc, 0x9, 0x3, 0x7, 0x80}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000019c0)={&(0x7f00000018c0), 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x40, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x401}, @void, @val={0xc, 0x99, {0x3, 0x50}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x3c, 0x1402, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20008004) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001b00)={r1, 0x7fffffff}, &(0x7f0000001b40)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001b80)={r5, 0x1}, &(0x7f0000001bc0)=0x8) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001c40)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x110, 0x240, 0x348, 0x348, 0x348, 0x4, &(0x7f0000001c00), {[{{@arp={@empty, @rand_addr=0x64010102, 0xff000000, 0xffffff00, 0x8, 0x1, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xe3, 0x1, 0x7, 0xd077, 0x2, 0x30a, 'ip6erspan0\x00', 'wg2\x00', {0xff}, {}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010100, @loopback, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x8, 0x3ff, 0x0, 0x0, "c417a9b30d2f14b9a41be2b2e98600488f7303168369a4b3a4ac30a00b6905009f8fff5acad195817fec2e2aeb569ba31b0d7476573901e9b3c23cc7a2ca999e"}}}, {{@arp={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff000000, 0xffffff00, 0xd, 0x2, {@mac=@local, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x1000, 0x5, 0x7, 0xff, 0x9, 0x5, 'veth1_to_team\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x26}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0x2}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480) r6 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000020c0)) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000002100)={0x0, 0x1, 0x6}, 0x10) add_key$user(&(0x7f0000002140), &(0x7f0000002180)={'syz', 0x0}, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) r7 = dup(r3) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000002200)=0x400, 0x4) setsockopt$netrom_NETROM_T2(r7, 0x103, 0x2, &(0x7f0000002240)=0x8, 0x4) r8 = add_key$fscrypt_v1(&(0x7f0000002280), &(0x7f00000022c0)={'fscrypt:', @desc4}, &(0x7f0000002300)={0x0, "5dc9a9779c3012bf8fd0b8d5573cf7160377ee20b3713bc3ddb64f472945bc46c133beac4497375cfd77ec37ffbf4854f53f41c57862b1e1ae5d75e4cbc66a12", 0x30}, 0x48, 0xfffffffffffffffe) r9 = add_key$keyring(&(0x7f0000002380), &(0x7f00000023c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r8, 0x8, r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002440), r7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000002500)={'erspan0\x00', &(0x7f0000002480)={'syztnl1\x00', 0x0, 0x40, 0x8000, 0x7f, 0x80, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x65, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xd0, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0xf}}, {@multicast2, 0xe}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(r10, &(0x7f0000002d80)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002d40)={&(0x7f0000002540)={0x7e4, r11, 0x8, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x28, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x22, 0x4, "6f077ddb8831caf93332a41c20587b608a17eeebabe489222567e2292d22"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x494, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x38, 0x5, "3ab6763b206d735e62acf5f2b9d1f42a9d20280af6d56f6fff4962684f606b240e15166c7ddd8d4a9d14920d48a2581cc59dfd67"}, @ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "2da4843381a4cbb4fc0f72e50ac2e7714fb33ef7f1f80a46cea2d715a576654376f95d4bc9810a2306f6fae772738ad9e48c4199cdd16d161b4582272890187945b82a2c38c65be524575f6fd31741c4498c4eed71fa46610fa0f0d8c810102da9651cad37c7a5eebdd26b933879cbd2ce667d86312397ea3783523002efe92118983e56b5fb103adb717c8e53f64df36d987a695a2dade0988303dbaf8df2d23f5757f661"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ipvlan1\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf7f}]}]}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'filter\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf1b}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4b}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x5d, 0x5, "d76120bb679034904eb7667c871e50743699ecdeaf946798056ff842239749e06085912dcaab4ef8b61482745c17d550ccff9cd4a818920519b93ba3dea2237813e7b9b3257b1c12d526e8ee984a90b3cfb7f3042e6a24819b"}, @ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@\\!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'syz'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$^*}%-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9960}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '.#7+-#)}+-}\\*)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'LED\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\x03\x03\x03\x03\x03'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe195}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0xb3, 0x5, "5d3f7301f56074c9135486bf1dca2ba099ceb2da563c92ba9d55bbcfd3a3d94a019ee4621d9f20900e50451f82d610dca4bbeca9e412bd6b869bf4eec5eae4a5747f7632a60956cfbc9898ddbd9914573e09e2fe97980424ac97a903cc5dfc6090f14c2bb6d2b71fa1eba40987f1224a87c0e8e3ef1f533cb6a12c780957d5e3efed4269b60fc1b6d371d6e29967365ae8509560d77803b9ab5a8fd0454bfdb0a903d36375a1ab61904f95ebf49f2e"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x28c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'keyring\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-^@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x8f, 0x4, "825e0ea8f36276542302a6f729e11c0ce67547b2a82e9c0e7546956df3bde559f2698875ae42f31ebe56363a1dcec132d178825b8cd1410c15afbedad3aa9b03e35fce21f24d17035a47366b092c2d74712a6507d389bb3678df52ddfe2bfaae4794d9362393c2fba0169fc0afbe64f40127c90e1fb5222d7c270a265f184d3ddcb1becb49d8e05d9235b7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x23dd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%\xaa\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\,^]+\'\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'keyring\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'NFLOG\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'mac\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'user\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x7e4}}, 0xc000004) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000003000)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002e00)={0x1b4, r11, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x168, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\,^]+\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x110f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x99a}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvlan1\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@\\!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'user\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-^@\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@\\!\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '$&}&\\@:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '85baa174f0cb1142'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x58}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000) 4.851492ms ago: executing program 2 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x38}}, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x3c793000) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x235000, 0x1000, 0x0, 0x4}, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 211.997µs ago: executing program 3 (id=166): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000000c0)={0x30, 0x0, 0x0, 0x0, 0x8, 0x3, 0x9, &(0x7f0000000040)=""/110}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000100)={0x18, 0x0, 0x3ff}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000000c0)={0x30, 0x0, 0x0, 0x0, 0x8, 0x3, 0x9, &(0x7f0000000040)=""/110}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000100)={0x18, 0x0, 0x3ff}) (async) 0s ago: executing program 3 (id=167): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000280)="96", 0x1, 0x1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x97, "693c2b26f9cb4457d37fdeb2359e96a1d7e50b8f3e88f312e4301b8e5b1872132c68f4aac8d065d6c7701365394a335d163f5871d8af2349c9a9b186f6d364ee37f9a0d273c582a25fd8c44edc604523e6dc166f16aedd9a7b8611243950b9f06e55764224e8b027c75ea430eefe2a1f58c7f75e5608f9d5cbfb1bdbb3f0d3cd1aa808a205ff2616d45158d88a319f6debc6dbe516a4f0"}, &(0x7f0000000100)=0x9f) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r2, 0x80000001}, 0x8) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) kernel console output (not intermixed with test programs): [ 38.119254][ T40] audit: type=1400 audit(1746039029.348:81): avc: denied { rlimitinh } for pid=5838 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.125732][ T40] audit: type=1400 audit(1746039029.348:82): avc: denied { siginh } for pid=5838 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.951581][ T40] audit: type=1400 audit(1746039030.198:83): avc: denied { read } for pid=5324 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.960818][ T40] audit: type=1400 audit(1746039030.198:84): avc: denied { append } for pid=5324 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.969925][ T40] audit: type=1400 audit(1746039030.198:85): avc: denied { open } for pid=5324 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.979544][ T40] audit: type=1400 audit(1746039030.198:86): avc: denied { getattr } for pid=5324 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:29752' (ED25519) to the list of known hosts. [ 39.765155][ T40] audit: type=1400 audit(1746039031.008:87): avc: denied { name_bind } for pid=5843 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.837579][ T5845] cgroup: Unknown subsys name 'net' [ 42.001238][ T5845] cgroup: Unknown subsys name 'cpuset' [ 42.005514][ T5845] cgroup: Unknown subsys name 'rlimit' [ 42.254325][ T5887] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.077250][ T5845] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.129287][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 46.129298][ T40] audit: type=1400 audit(1746039037.378:105): avc: denied { execmem } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.337133][ T40] audit: type=1400 audit(1746039037.578:106): avc: denied { create } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.347227][ T40] audit: type=1400 audit(1746039037.578:107): avc: denied { read write } for pid=5929 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.354960][ T40] audit: type=1400 audit(1746039037.578:108): avc: denied { open } for pid=5929 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.361401][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.365964][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.368448][ T40] audit: type=1400 audit(1746039037.588:109): avc: denied { ioctl } for pid=5929 comm="syz-executor" path="socket:[3816]" dev="sockfs" ino=3816 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.370928][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.388854][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.391797][ T5936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.394557][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.399755][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.402298][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.404808][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.407786][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.410148][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.413746][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.416157][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.421553][ T40] audit: type=1400 audit(1746039037.668:110): avc: denied { read } for pid=5929 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.425890][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.428189][ T40] audit: type=1400 audit(1746039037.668:111): avc: denied { open } for pid=5929 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.428695][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.431320][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.439246][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.439865][ T40] audit: type=1400 audit(1746039037.668:112): avc: denied { mounton } for pid=5929 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.440480][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.440849][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.441102][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.647139][ T40] audit: type=1400 audit(1746039037.888:113): avc: denied { module_request } for pid=5934 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.680762][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 46.726957][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 46.800102][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.802890][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.805275][ T5929] bridge_slave_0: entered allmulticast mode [ 46.807974][ T5929] bridge_slave_0: entered promiscuous mode [ 46.814953][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.817344][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.819968][ T5929] bridge_slave_1: entered allmulticast mode [ 46.822886][ T5929] bridge_slave_1: entered promiscuous mode [ 46.901308][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 46.911072][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 46.929261][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.934049][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.044848][ T5929] team0: Port device team_slave_0 added [ 47.047265][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.050377][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.053331][ T5934] bridge_slave_0: entered allmulticast mode [ 47.057236][ T5934] bridge_slave_0: entered promiscuous mode [ 47.069885][ T5929] team0: Port device team_slave_1 added [ 47.084317][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.086745][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.089501][ T5934] bridge_slave_1: entered allmulticast mode [ 47.092720][ T5934] bridge_slave_1: entered promiscuous mode [ 47.260460][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.262654][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.272155][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.277749][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.281628][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.283885][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.286129][ T5933] bridge_slave_0: entered allmulticast mode [ 47.289563][ T5933] bridge_slave_0: entered promiscuous mode [ 47.292986][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.295211][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.298237][ T5933] bridge_slave_1: entered allmulticast mode [ 47.301353][ T5933] bridge_slave_1: entered promiscuous mode [ 47.304040][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.307703][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.310421][ T5940] bridge_slave_0: entered allmulticast mode [ 47.312930][ T5940] bridge_slave_0: entered promiscuous mode [ 47.315780][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.318718][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.329052][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.336151][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.375125][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.378050][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.380780][ T5940] bridge_slave_1: entered allmulticast mode [ 47.383402][ T5940] bridge_slave_1: entered promiscuous mode [ 47.406069][ T5934] team0: Port device team_slave_0 added [ 47.450750][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.454886][ T5934] team0: Port device team_slave_1 added [ 47.458276][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.474978][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.495408][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.571493][ T5929] hsr_slave_0: entered promiscuous mode [ 47.573742][ T5929] hsr_slave_1: entered promiscuous mode [ 47.596231][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.599254][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.607263][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.630363][ T5933] team0: Port device team_slave_0 added [ 47.634102][ T5940] team0: Port device team_slave_0 added [ 47.636671][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.639159][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.648661][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.658706][ T5933] team0: Port device team_slave_1 added [ 47.662184][ T5940] team0: Port device team_slave_1 added [ 47.807592][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.809798][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.818686][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.822812][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.825799][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.835786][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.848438][ T5934] hsr_slave_0: entered promiscuous mode [ 47.851059][ T5934] hsr_slave_1: entered promiscuous mode [ 47.853518][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.856550][ T5934] Cannot create hsr debugfs directory [ 47.859823][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.862531][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.872537][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.877181][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.879880][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.889816][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.021028][ T5940] hsr_slave_0: entered promiscuous mode [ 48.024149][ T5940] hsr_slave_1: entered promiscuous mode [ 48.026970][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.030383][ T5940] Cannot create hsr debugfs directory [ 48.042604][ T5933] hsr_slave_0: entered promiscuous mode [ 48.044956][ T5933] hsr_slave_1: entered promiscuous mode [ 48.047265][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.049796][ T5933] Cannot create hsr debugfs directory [ 48.225451][ T5929] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.243366][ T5929] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.266484][ T5929] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.274633][ T5929] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.356278][ T5934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.360739][ T5934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.365577][ T5934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.378587][ T5934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.422339][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.436260][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.440358][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.445185][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.468367][ T67] Bluetooth: hci3: command tx timeout [ 48.468391][ T5939] Bluetooth: hci2: command tx timeout [ 48.469189][ T5932] Bluetooth: hci0: command tx timeout [ 48.503016][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.517285][ T5933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.521171][ T5933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.525318][ T5933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.537960][ T5939] Bluetooth: hci1: command tx timeout [ 48.538454][ T5933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.566391][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.574148][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.580459][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.582785][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.594275][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.597353][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.613064][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.625658][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.627993][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.642651][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.644927][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.661382][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.686623][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.709056][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.715981][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.719294][ T40] audit: type=1400 audit(1746039039.968:114): avc: denied { sys_module } for pid=5929 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.727707][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.730017][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.733132][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.735369][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.741616][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.744414][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.753038][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.756163][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.797353][ T5933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.815099][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.824084][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.853870][ T5934] veth0_vlan: entered promiscuous mode [ 48.862975][ T5934] veth1_vlan: entered promiscuous mode [ 48.865316][ T5929] veth0_vlan: entered promiscuous mode [ 48.879298][ T5929] veth1_vlan: entered promiscuous mode [ 48.896010][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.903095][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.906060][ T5934] veth0_macvtap: entered promiscuous mode [ 48.910888][ T5934] veth1_macvtap: entered promiscuous mode [ 48.921191][ T5929] veth0_macvtap: entered promiscuous mode [ 48.925070][ T5929] veth1_macvtap: entered promiscuous mode [ 48.935415][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.946801][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.952270][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.955660][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.960180][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.969277][ T5934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.972031][ T5934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.974727][ T5934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.977944][ T5934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.988521][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.991762][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.996281][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.006013][ T5933] veth0_vlan: entered promiscuous mode [ 49.012411][ T5929] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.015160][ T5929] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.018437][ T5929] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.021737][ T5929] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.035838][ T5933] veth1_vlan: entered promiscuous mode [ 49.039237][ T5940] veth0_vlan: entered promiscuous mode [ 49.050168][ T5940] veth1_vlan: entered promiscuous mode [ 49.090850][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.093459][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.094824][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.098283][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.106931][ T5933] veth0_macvtap: entered promiscuous mode [ 49.110557][ T5940] veth0_macvtap: entered promiscuous mode [ 49.119655][ T5933] veth1_macvtap: entered promiscuous mode [ 49.126544][ T5940] veth1_macvtap: entered promiscuous mode [ 49.137206][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.139675][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.154667][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.158184][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.161214][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.164391][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.168731][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.171298][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.172927][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.174336][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.177624][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.177632][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.177639][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.177644][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.177651][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.178309][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.202239][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.205541][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.208856][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.212091][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.216040][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.219956][ T5940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.221612][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.222696][ T5940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.230678][ T5940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.233400][ T5940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.239455][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.243782][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.248118][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.252720][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.255773][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.259416][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.263791][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.269119][ T5933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.272143][ T5933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.274826][ T5933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.277726][ T5933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.292748][ T5994] syz.1.2: attempt to access beyond end of device [ 49.292748][ T5994] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 49.296757][ T5994] (syz.1.2,5994,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 49.299554][ T5994] (syz.1.2,5994,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 49.301986][ T5994] (syz.1.2,5994,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 49.304671][ T5994] (syz.1.2,5994,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 49.352569][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.355832][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.402072][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.404706][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.411645][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.414528][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.419887][ T6009] tipc: Started in network mode [ 49.421560][ T6009] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 49.423821][ T6009] tipc: Enabled bearer , priority 27 [ 49.435974][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.438818][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.545550][ T6033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43792 sclass=netlink_route_socket pid=6033 comm=syz.3.11 [ 49.605413][ T6045] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 49.676175][ T6052] kvm: user requested TSC rate below hardware speed [ 49.683661][ T6052] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 49.686391][ T6052] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 49.691529][ T6066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22'. [ 49.699628][ T6052] gfs2: not a GFS2 filesystem [ 49.720243][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.722772][ T6071] ======================================================= [ 49.722772][ T6071] WARNING: The mand mount option has been deprecated and [ 49.722772][ T6071] and is ignored by this kernel. Remove the mand [ 49.722772][ T6071] option from the mount to silence this warning. [ 49.722772][ T6071] ======================================================= [ 49.734728][ T6071] devpts: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 49.787537][ T6080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6080 comm=syz.0.27 [ 49.843777][ T6087] ref_ctr_offset mismatch. inode: 0x33 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4000000 [ 49.847922][ T6087] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 49.851203][ T6087] ref_ctr decrement failed for inode: 0x33 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802a154600 [ 49.852377][ T6087] uprobe: syz.3.29:6087 failed to unregister, leaking uprobe [ 49.898516][ T6097] binder: 6096:6097 unknown command 0 [ 49.900254][ T6097] binder: 6096:6097 ioctl c0306201 200000000180 returned -22 [ 49.904642][ T6097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19812 sclass=netlink_route_socket pid=6097 comm=syz.1.32 [ 49.934577][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 50.041105][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 50.048392][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36'. [ 50.400536][ T6142] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.437688][ T5976] tipc: Node number set to 8432298 [ 50.537558][ T5939] Bluetooth: hci3: command tx timeout [ 50.537568][ T67] Bluetooth: hci0: command tx timeout [ 50.547459][ T67] Bluetooth: hci2: command tx timeout [ 50.563400][ T6146] mmap: syz.1.45 (6146) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.579786][ T6150] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.46'. [ 50.613770][ T6152] Cannot find add_set index 3 as target [ 50.617325][ T67] Bluetooth: hci1: command tx timeout [ 50.623612][ T6148] program syz.1.45 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.892781][ T6164] Zero length message leads to an empty skb [ 51.104685][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 51.183233][ T40] kauditd_printk_skb: 155 callbacks suppressed [ 51.183247][ T40] audit: type=1400 audit(1746039042.428:270): avc: denied { read } for pid=6189 comm="syz.3.56" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 51.184251][ T6190] autofs4:pid:6190:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294934528.1), cmd(0xc0189374) [ 51.185879][ T40] audit: type=1400 audit(1746039042.428:271): avc: denied { open } for pid=6189 comm="syz.3.56" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 51.207200][ T40] audit: type=1400 audit(1746039042.428:272): avc: denied { ioctl } for pid=6189 comm="syz.3.56" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 51.207724][ T6190] autofs4:pid:6190:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 51.226356][ T6192] autofs4:pid:6192:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294934528.1), cmd(0xc0189374) [ 51.230925][ T6192] autofs4:pid:6192:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 51.290399][ T40] audit: type=1400 audit(1746039042.538:273): avc: denied { read } for pid=6195 comm="syz.3.57" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.310125][ T40] audit: type=1400 audit(1746039042.538:274): avc: denied { open } for pid=6195 comm="syz.3.57" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.317597][ T40] audit: type=1400 audit(1746039042.548:275): avc: denied { ioctl } for pid=6195 comm="syz.3.57" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.384175][ T40] audit: type=1400 audit(1746039042.628:276): avc: denied { setopt } for pid=6197 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.385107][ T6198] trusted_key: syz.0.58 sent an empty control message without MSG_MORE. [ 51.390188][ T40] audit: type=1400 audit(1746039042.628:277): avc: denied { accept } for pid=6197 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.394305][ T6198] kAFS: unable to lookup cell '/,cL' [ 51.398504][ T40] audit: type=1400 audit(1746039042.628:278): avc: denied { write } for pid=6197 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.406382][ T40] audit: type=1400 audit(1746039042.638:279): avc: denied { read } for pid=6197 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.559401][ T6224] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.563457][ T6224] x_tables: duplicate underflow at hook 1 [ 51.792170][ T6240] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 51.793707][ T6248] openvswitch: netlink: Tunnel attr 2 has unexpected len 5 expected 4 [ 51.804350][ T6240] kvm: pic: level sensitive irq not supported [ 51.805096][ T6240] kvm: pic: non byte read [ 51.810932][ T6240] kvm: pic: level sensitive irq not supported [ 51.811253][ T6240] kvm: pic: non byte read [ 51.815899][ T6240] kvm: pic: level sensitive irq not supported [ 51.816185][ T6240] kvm: pic: non byte read [ 51.845261][ T6251] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=6251 comm=syz.2.74 [ 51.852808][ T6251] loop2: detected capacity change from 0 to 7 [ 51.858149][ T6251] Dev loop2: unable to read RDB block 7 [ 51.859807][ T6251] loop2: unable to read partition table [ 51.861568][ T6251] loop2: partition table beyond EOD, truncated [ 51.863453][ T6251] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 52.140558][ T6260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'. [ 52.143371][ T6260] netlink: 108 bytes leftover after parsing attributes in process `syz.3.77'. [ 52.146104][ T6260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'. [ 52.151527][ T6260] netlink: 108 bytes leftover after parsing attributes in process `syz.3.77'. [ 52.318093][ T6271] netdevsim netdevsim3: Direct firmware load for . [ 52.318093][ T6271] failed with error -2 [ 52.321911][ T6271] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 52.321911][ T6271] [ 52.618231][ T67] Bluetooth: hci3: command tx timeout [ 52.618273][ T5939] Bluetooth: hci2: command tx timeout [ 52.618421][ T5932] Bluetooth: hci0: command tx timeout [ 52.641203][ T6285] netlink: 'syz.0.86': attribute type 30 has an invalid length. [ 52.647818][ T6285] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.650815][ T6285] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.653516][ T6285] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.656216][ T6285] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.662312][ T6285] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.665279][ T6285] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.668153][ T6285] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.670968][ T6285] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.698156][ T5939] Bluetooth: hci1: command tx timeout [ 52.877479][ T5939] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 52.881578][ T5939] CPU: 3 UID: 0 PID: 5939 Comm: kworker/u33:5 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 52.881602][ T5939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.881614][ T5939] Workqueue: hci0 hci_rx_work [ 52.881663][ T5939] Call Trace: [ 52.881670][ T5939] [ 52.881677][ T5939] dump_stack_lvl+0x16c/0x1f0 [ 52.881703][ T5939] sysfs_warn_dup+0x7f/0xa0 [ 52.881730][ T5939] sysfs_create_dir_ns+0x24b/0x2b0 [ 52.881758][ T5939] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 52.881781][ T5939] ? find_held_lock+0x2b/0x80 [ 52.881805][ T5939] ? do_raw_spin_unlock+0x172/0x230 [ 52.881824][ T5939] kobject_add_internal+0x2c4/0x9b0 [ 52.881852][ T5939] kobject_add+0x16e/0x240 [ 52.881875][ T5939] ? __pfx_kobject_add+0x10/0x10 [ 52.881899][ T5939] ? do_raw_spin_unlock+0x172/0x230 [ 52.881915][ T5939] ? kobject_put+0xab/0x5a0 [ 52.881944][ T5939] device_add+0x288/0x1a70 [ 52.881971][ T5939] ? __pfx_dev_set_name+0x10/0x10 [ 52.881993][ T5939] ? __pfx_device_add+0x10/0x10 [ 52.882013][ T5939] ? mgmt_send_event_skb+0x2fb/0x460 [ 52.882043][ T5939] hci_conn_add_sysfs+0x17e/0x230 [ 52.882070][ T5939] le_conn_complete_evt+0x1075/0x1d70 [ 52.882100][ T5939] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 52.882123][ T5939] ? hci_event_packet+0x43c/0x1190 [ 52.882151][ T5939] hci_le_conn_complete_evt+0x23c/0x370 [ 52.882178][ T5939] hci_le_meta_evt+0x2f3/0x5e0 [ 52.882201][ T5939] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 52.882227][ T5939] hci_event_packet+0x669/0x1190 [ 52.882261][ T5939] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 52.882290][ T5939] ? __pfx_hci_event_packet+0x10/0x10 [ 52.882318][ T5939] ? kcov_remote_start+0x3c9/0x6d0 [ 52.882334][ T5939] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.882360][ T5939] hci_rx_work+0x2c5/0x16b0 [ 52.882385][ T5939] ? rcu_is_watching+0x12/0xc0 [ 52.882407][ T5939] process_one_work+0x9cc/0x1b70 [ 52.882435][ T5939] ? __pfx_process_one_work+0x10/0x10 [ 52.882480][ T5939] ? assign_work+0x1a0/0x250 [ 52.882502][ T5939] worker_thread+0x6c8/0xf10 [ 52.882533][ T5939] ? __pfx_worker_thread+0x10/0x10 [ 52.882550][ T5939] kthread+0x3c2/0x780 [ 52.882567][ T5939] ? __pfx_kthread+0x10/0x10 [ 52.882580][ T5939] ? __pfx_kthread+0x10/0x10 [ 52.882595][ T5939] ? __pfx_kthread+0x10/0x10 [ 52.882609][ T5939] ? __pfx_kthread+0x10/0x10 [ 52.882623][ T5939] ? rcu_is_watching+0x12/0xc0 [ 52.882643][ T5939] ? __pfx_kthread+0x10/0x10 [ 52.882659][ T5939] ret_from_fork+0x45/0x80 [ 52.882676][ T5939] ? __pfx_kthread+0x10/0x10 [ 52.882691][ T5939] ret_from_fork_asm+0x1a/0x30 [ 52.882727][ T5939] [ 52.882785][ T5939] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 52.989416][ T5939] Bluetooth: hci0: failed to register connection device [ 53.025021][ T6304] xt_hashlimit: size too large, truncated to 1048576 [ 53.382334][ T6322] xt_hashlimit: size too large, truncated to 1048576 [ 53.510000][ T6342] warning: `syz.1.102' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 53.522083][ T6349] macsec0: entered promiscuous mode [ 53.542612][ T6351] netlink: 'syz.1.105': attribute type 21 has an invalid length. [ 53.545111][ T6351] IPv6: NLM_F_CREATE should be specified when creating new route [ 53.726984][ T6378] vlan2: entered allmulticast mode [ 53.731904][ T6381] overlayfs: failed to resolve './file1': -2 [ 53.769263][ T6386] Bluetooth: MGMT ver 1.23 [ 53.838379][ T5939] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 53.842472][ T5939] CPU: 3 UID: 0 PID: 5939 Comm: kworker/u33:5 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 53.842489][ T5939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.842496][ T5939] Workqueue: hci1 hci_rx_work [ 53.842515][ T5939] Call Trace: [ 53.842525][ T5939] [ 53.842530][ T5939] dump_stack_lvl+0x16c/0x1f0 [ 53.842546][ T5939] sysfs_warn_dup+0x7f/0xa0 [ 53.842565][ T5939] sysfs_create_dir_ns+0x24b/0x2b0 [ 53.842582][ T5939] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 53.842599][ T5939] ? find_held_lock+0x2b/0x80 [ 53.842614][ T5939] ? do_raw_spin_unlock+0x172/0x230 [ 53.842627][ T5939] kobject_add_internal+0x2c4/0x9b0 [ 53.842645][ T5939] kobject_add+0x16e/0x240 [ 53.842661][ T5939] ? __pfx_kobject_add+0x10/0x10 [ 53.842677][ T5939] ? do_raw_spin_unlock+0x172/0x230 [ 53.842688][ T5939] ? kobject_put+0xab/0x5a0 [ 53.842706][ T5939] device_add+0x288/0x1a70 [ 53.842719][ T5939] ? __pfx_dev_set_name+0x10/0x10 [ 53.842732][ T5939] ? __pfx_device_add+0x10/0x10 [ 53.842745][ T5939] ? mgmt_send_event_skb+0x2fb/0x460 [ 53.842763][ T5939] hci_conn_add_sysfs+0x17e/0x230 [ 53.842780][ T5939] le_conn_complete_evt+0x1075/0x1d70 [ 53.842798][ T5939] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 53.842812][ T5939] ? hci_event_packet+0x43c/0x1190 [ 53.842830][ T5939] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 53.842845][ T5939] ? skb_pull_data+0x166/0x210 [ 53.842862][ T5939] hci_le_meta_evt+0x2f3/0x5e0 [ 53.842877][ T5939] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 53.842894][ T5939] hci_event_packet+0x669/0x1190 [ 53.842908][ T5939] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 53.842939][ T5939] ? __pfx_hci_event_packet+0x10/0x10 [ 53.842956][ T5939] ? kcov_remote_start+0x3c9/0x6d0 [ 53.842965][ T5939] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.842982][ T5939] hci_rx_work+0x2c5/0x16b0 [ 53.842999][ T5939] ? rcu_is_watching+0x12/0xc0 [ 53.843014][ T5939] process_one_work+0x9cc/0x1b70 [ 53.843033][ T5939] ? __pfx_process_one_work+0x10/0x10 [ 53.843048][ T5939] ? assign_work+0x1a0/0x250 [ 53.843060][ T5939] worker_thread+0x6c8/0xf10 [ 53.843077][ T5939] ? __pfx_worker_thread+0x10/0x10 [ 53.843088][ T5939] kthread+0x3c2/0x780 [ 53.843098][ T5939] ? __pfx_kthread+0x10/0x10 [ 53.843106][ T5939] ? __pfx_kthread+0x10/0x10 [ 53.843114][ T5939] ? __pfx_kthread+0x10/0x10 [ 53.843123][ T5939] ? __pfx_kthread+0x10/0x10 [ 53.843132][ T5939] ? rcu_is_watching+0x12/0xc0 [ 53.843143][ T5939] ? __pfx_kthread+0x10/0x10 [ 53.843153][ T5939] ret_from_fork+0x45/0x80 [ 53.843163][ T5939] ? __pfx_kthread+0x10/0x10 [ 53.843172][ T5939] ret_from_fork_asm+0x1a/0x30 [ 53.843194][ T5939] [ 53.843239][ T5939] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 53.936021][ T5939] Bluetooth: hci1: failed to register connection device [ 54.002842][ T2296] IPVS: starting estimator thread 0... [ 54.107384][ T6395] IPVS: using max 44 ests per chain, 105600 per kthread [ 54.149299][ T6400] kvm: kvm [6399]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1f00000007 [ 54.295232][ T6405] syz.2.121 (6405): drop_caches: 2 [ 54.557024][ T6435] binder_alloc: 6432: binder_alloc_buf, no vma [ 54.628544][ T6440] program syz.1.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.667260][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 54.697447][ T67] Bluetooth: hci3: command tx timeout [ 54.707149][ T67] Bluetooth: hci0: command tx timeout [ 54.707269][ T5932] Bluetooth: hci2: command tx timeout [ 54.777321][ T5932] Bluetooth: hci1: command tx timeout [ 54.918380][ T6454] 8021q: VLANs not supported on tunl0 [ 55.222790][ T6474] hub 9-0:1.0: USB hub found [ 55.224853][ T6474] hub 9-0:1.0: 1 port detected [ 55.259526][ T6478] @: renamed from vlan0 (while UP) [ 55.290409][ T6480] Illegal XDP return value 4294967262 on prog (id 30) dev N/A, expect packet loss! [ 55.528375][ T6499] __nla_validate_parse: 12 callbacks suppressed [ 55.528386][ T6499] netlink: 52 bytes leftover after parsing attributes in process `syz.3.150'. [ 55.533202][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 55.535901][ T6499] tipc: MTU too low for tipc bearer [ 55.614587][ T6507] ipt_REJECT: TCP_RESET invalid for non-tcp [ 55.629728][ T6514] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 55.655229][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 55.655247][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 55.721392][ T6529] sch_fq: defrate 9 ignored. [ 55.732145][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'. [ 55.828851][ T6536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.163'. [ 55.833289][ T6536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.163'. usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 55.857937][ T6540] syz.2.164 uses obsolete (PF_INET,SOCK_PACKET) [ 55.868756][ T6531] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 55.911266][ T6544] page: refcount:9 mapcount:0 mapping:ffff88802660aaf8 index:0x3d220 pfn:0x58e20 [ 55.914127][ T6544] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 55.916754][ T6544] memcg:ffff888028dc2000 [ 55.918944][ T6544] aops:def_blk_aops ino:fa00000 [ 55.920534][ T6544] flags: 0xfff60000000079(locked|uptodate|dirty|lru|head|node=0|zone=1|lastcpupid=0x7ff) [ 55.923573][ T6544] raw: 00fff60000000079 ffffea0001638b08 ffffea0001638c08 ffff88802660aaf8 [ 55.926440][ T6544] raw: 000000000003d220 0000000000000000 00000009ffffffff ffff888028dc2000 [ 55.930488][ T6544] head: 00fff60000000079 ffffea0001638b08 ffffea0001638c08 ffff88802660aaf8 [ 55.933246][ T6544] head: 000000000003d220 0000000000000000 00000009ffffffff ffff888028dc2000 [ 55.936525][ T6544] head: 00fff00000000203 ffffea0001638801 00000000ffffffff 00000000ffffffff [ 55.939608][ T6544] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 55.942389][ T6544] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 55.944970][ T6544] page_owner tracks the page as allocated [ 55.946792][ T6544] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6543, tgid 6543 (syz.2.165), ts 55905170388, free_ts 55380443961 [ 55.953395][ T6544] post_alloc_hook+0x181/0x1b0 [ 55.954947][ T6544] get_page_from_freelist+0x135c/0x3920 [ 55.956724][ T6544] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 55.958916][ T6544] alloc_pages_mpol+0x1fb/0x550 [ 55.960514][ T6544] folio_alloc_noprof+0x20/0x2d0 [ 55.962108][ T6544] filemap_alloc_folio_noprof+0x3a1/0x470 [ 55.963989][ T6544] page_cache_ra_order+0x4c0/0xd00 [ 55.965643][ T6544] filemap_fault+0x1a5e/0x2740 [ 55.967493][ T6544] __do_fault+0x10a/0x490 [ 55.968910][ T6544] do_pte_missing+0x1a6/0x3fb0 [ 55.970449][ T6544] __handle_mm_fault+0x103d/0x2a40 [ 55.972070][ T6544] handle_mm_fault+0x3fe/0xad0 [ 55.973643][ T6544] do_user_addr_fault+0x60c/0x1370 [ 55.975347][ T6544] exc_page_fault+0x5c/0xc0 [ 55.976834][ T6544] asm_exc_page_fault+0x26/0x30 [ 55.979062][ T6544] page last free pid 6479 tgid 6479 stack trace: [ 55.981085][ T6544] free_unref_folios+0x999/0x1630 [ 55.982718][ T6544] folios_put_refs+0x56f/0x740 [ 55.984236][ T6544] free_pages_and_swap_cache+0x3f0/0x4a0 [ 55.986115][ T6544] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 55.988390][ T6544] tlb_flush_mmu+0xe9/0x590 [ 55.989875][ T6544] unmap_page_range+0x1ed6/0x4390 [ 55.991482][ T6544] unmap_single_vma+0x194/0x2a0 [ 55.993084][ T6544] unmap_vmas+0x22c/0x490 [ 55.994487][ T6544] exit_mmap+0x1b9/0xb90 [ 55.995859][ T6544] __mmput+0x12a/0x410 [ 55.997870][ T6544] mmput+0x62/0x70 [ 55.999119][ T6544] do_exit+0x9d1/0x2c30 [ 55.999546][ T6553] netlink: 'syz.3.167': attribute type 4 has an invalid length. [ 56.000442][ T6544] do_group_exit+0xd3/0x2a0 [ 56.000461][ T6544] __x64_sys_exit_group+0x3e/0x50 [ 56.000476][ T6544] x64_sys_call+0x1530/0x1730 [ 56.007527][ T6544] do_syscall_64+0xcd/0x260 [ 56.009164][ T6544] ------------[ cut here ]------------ [ 56.011031][ T6544] kernel BUG at mm/filemap.c:3433! [ 56.012726][ T6544] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 56.015489][ T6544] CPU: 3 UID: 0 PID: 6544 Comm: syz.2.165 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 56.015664][ T6553] netlink: 'syz.3.167': attribute type 4 has an invalid length. [ 56.020305][ T6544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.020316][ T6544] RIP: 0010:filemap_fault+0x1862/0x2740 [ 56.020332][ T6544] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 98 48 2d 00 e9 66 f3 ff ff e8 4e cd c7 ff 48 c7 c6 c0 ee 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 37 cd c7 ff 48 c7 c6 20 e5 98 8b 48 89 df e8 18 94 10 00 [ 56.020342][ T6544] RSP: 0018:ffffc900061cf1b0 EFLAGS: 00010293 [ 56.020351][ T6544] RAX: 0000000000000000 RBX: ffffea0001638800 RCX: 0000000000000000 [ 56.020358][ T6544] RDX: ffff888021f20000 RSI: ffffffff81f363c1 RDI: ffff888021f20444 [ 56.020365][ T6544] RBP: ffffc900061cf480 R08: 0000000000000001 R09: 0000000000000001 [ 56.020371][ T6544] R10: ffffffff9084fd17 R11: 0000000000000001 R12: ffff88802660aaf8 [ 56.020377][ T6544] R13: 0000000000000008 R14: 0000000000000009 R15: 0000000000000000 [ 56.020383][ T6544] FS: 00007fc6aaff66c0(0000) GS:ffff8880d6ce2000(0000) knlGS:0000000000000000 [ 56.020405][ T6544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.020413][ T6544] CR2: 000055558db6e808 CR3: 000000002f35c000 CR4: 0000000000352ef0 [ 56.020420][ T6544] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.020426][ T6544] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.061119][ T6544] Call Trace: [ 56.062204][ T6544] [ 56.063154][ T6544] ? __pfx_filemap_fault+0x10/0x10 [ 56.064812][ T6544] ? __pfx_filemap_map_pages+0x10/0x10 [ 56.066600][ T6544] __do_fault+0x10a/0x490 [ 56.068100][ T6544] ? __pfx_filemap_map_pages+0x10/0x10 [ 56.069878][ T6544] do_pte_missing+0x1a6/0x3fb0 [ 56.071432][ T6544] ? __handle_mm_fault+0x1010/0x2a40 [ 56.073142][ T6544] __handle_mm_fault+0x103d/0x2a40 [ 56.074778][ T6544] ? __pfx___handle_mm_fault+0x10/0x10 [ 56.076519][ T6544] ? find_vma+0xbf/0x140 [ 56.077915][ T6544] ? __pfx_find_vma+0x10/0x10 [ 56.079443][ T6544] ? kasan_save_stack+0x42/0x60 [ 56.080996][ T6544] handle_mm_fault+0x3fe/0xad0 [ 56.082548][ T6544] do_user_addr_fault+0x7a6/0x1370 [ 56.084168][ T6544] ? rcu_is_watching+0x12/0xc0 [ 56.085724][ T6544] exc_page_fault+0x5c/0xc0 [ 56.087165][ T6544] asm_exc_page_fault+0x26/0x30 [ 56.088719][ T6544] RIP: 0010:_copy_to_user+0xb6/0xd0 [ 56.090385][ T6544] Code: 89 ee 48 89 ef e8 ea 6d ea fc 4d 85 ff 75 a8 e8 30 73 ea fc 89 de 4c 89 e7 e8 16 f6 4f fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 80 66 2e 0f 1f 84 00 00 00 00 [ 56.096417][ T6544] RSP: 0018:ffffc900061cf718 EFLAGS: 00050297 [ 56.098366][ T6544] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 0000000000000004 [ 56.100856][ T6544] RDX: fffff52000c39f24 RSI: ffffc900061cf920 RDI: 000020000000088c [ 56.103397][ T6544] RBP: 000020000000088c R08: 0000000000000000 R09: fffff52000c39f24 [ 56.106055][ T6544] R10: 0000000000000003 R11: 0000000000000000 R12: ffffc900061cf920 [ 56.108567][ T6544] R13: 0000200000000890 R14: 00007ffffffff000 R15: 0000000000000000 [ 56.111140][ T6544] ? _copy_to_user+0xaa/0xd0 [ 56.112637][ T6544] copy_to_sockptr_offset.constprop.0+0x12f/0x150 [ 56.114762][ T6544] ? __pfx_copy_to_sockptr_offset.constprop.0+0x10/0x10 [ 56.117082][ T6544] ? bpf_vlog_finalize+0x1ba/0x360 [ 56.118761][ T6544] bpf_check+0x22c2/0xbbc0 [ 56.120251][ T6544] ? __pfx_bpf_check+0x10/0x10 [ 56.121804][ T6544] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 56.123519][ T6544] bpf_prog_load+0xe41/0x2490 [ 56.125005][ T6544] ? __pfx_bpf_prog_load+0x10/0x10 [ 56.126654][ T6544] ? avc_has_perm_noaudit+0x149/0x3b0 [ 56.128357][ T6544] ? selinux_bpf+0xde/0x130 [ 56.129810][ T6544] ? bpf_lsm_bpf+0x9/0x10 [ 56.131186][ T6544] __sys_bpf+0x433c/0x4d80 [ 56.132611][ T6544] ? __pfx___sys_bpf+0x10/0x10 [ 56.134146][ T6544] ? kfree+0x252/0x4d0 [ 56.135469][ T6544] ? selinux_socket_setsockopt+0x6a/0x80 [ 56.137246][ T6544] ? do_futex+0x122/0x350 [ 56.138728][ T6544] ? __pfx_do_futex+0x10/0x10 [ 56.140230][ T6544] ? xfd_validate_state+0x5d/0x180 [ 56.141867][ T6544] ? rcu_is_watching+0x12/0xc0 [ 56.143394][ T6544] __x64_sys_bpf+0x78/0xc0 [ 56.144823][ T6544] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.146508][ T6544] do_syscall_64+0xcd/0x260 [ 56.147969][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.149840][ T6544] RIP: 0033:0x7fc6ad18e969 [ 56.151260][ T6544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.157347][ T6544] RSP: 002b:00007fc6aaff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.160040][ T6544] RAX: ffffffffffffffda RBX: 00007fc6ad3b5fa0 RCX: 00007fc6ad18e969 [ 56.162534][ T6544] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 56.165001][ T6544] RBP: 00007fc6ad210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 56.167501][ T6544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.170015][ T6544] R13: 0000000000000000 R14: 00007fc6ad3b5fa0 R15: 00007ffff9853868 [ 56.172500][ T6544] [ 56.173661][ T6544] Modules linked in: [ 56.175292][ C3] vkms_vblank_simulate: vblank timer overrun [ 56.178022][ T6544] ---[ end trace 0000000000000000 ]--- [ 56.179932][ T6544] RIP: 0010:filemap_fault+0x1862/0x2740 [ 56.181694][ T6544] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 98 48 2d 00 e9 66 f3 ff ff e8 4e cd c7 ff 48 c7 c6 c0 ee 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 37 cd c7 ff 48 c7 c6 20 e5 98 8b 48 89 df e8 18 94 10 00 [ 56.187710][ T6544] RSP: 0018:ffffc900061cf1b0 EFLAGS: 00010293 [ 56.189660][ T6544] RAX: 0000000000000000 RBX: ffffea0001638800 RCX: 0000000000000000 [ 56.192124][ T6544] RDX: ffff888021f20000 RSI: ffffffff81f363c1 RDI: ffff888021f20444 [ 56.194624][ T6544] RBP: ffffc900061cf480 R08: 0000000000000001 R09: 0000000000000001 [ 56.197142][ T6544] R10: ffffffff9084fd17 R11: 0000000000000001 R12: ffff88802660aaf8 [ 56.199682][ T6544] R13: 0000000000000008 R14: 0000000000000009 R15: 0000000000000000 [ 56.202164][ T6544] FS: 00007fc6aaff66c0(0000) GS:ffff8880d6ce2000(0000) knlGS:0000000000000000 [ 56.204944][ T6544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.207029][ T6544] CR2: 000055558db6e808 CR3: 000000002f35c000 CR4: 0000000000352ef0 [ 56.209586][ T6544] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.212059][ T6544] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.214544][ T6544] Kernel panic - not syncing: Fatal exception [ 56.217201][ T6544] Kernel Offset: disabled [ 56.218660][ T6544] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:50:47 Registers: info registers vcpu 0 CPU#0 RAX=0000000000044a54 RBX=0000000000000000 RCX=ffffffff8b6c8419 RDX=ffffed100d4865be RSI=ffffffff8bf47da0 RDI=ffffffff81919711 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff9084fd10 R15=0000000000000000 RIP=ffffffff8b6c6caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6b7ee6ff98 CR3=00000000122b7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b7e011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b7e011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b7e011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b7e011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b7e011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b7e011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b7e183488 00007f6b7e183480 00007f6b7e183478 00007f6b7e183450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b7eced100 00007f6b7e183440 00007f6b7e183458 00007f6b7e1834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b7e183498 00007f6b7e183490 00007f6b7e183488 00007f6b7e183480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000031d44 RBX=0000000000000001 RCX=ffffffff8b6c8419 RDX=ffffed100d4a65be RSI=ffffffff8bf47da0 RDI=ffffffff81919711 RBP=ffffed1003ad2488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d692440 R14=ffffffff9084fd10 R15=0000000000000000 RIP=ffffffff8b6c6caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ae2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6b7ee90f98 CR3=000000004b915000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ca4811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ca4811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ca4811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ca4811aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ca4811b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ca4811c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000040070008 0000000000010005 8002000c01000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000880010014 8002002400000000 000100058002000c 010000e000020008 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000bc ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000025d6c RBX=0000000000000002 RCX=ffffffff8b6c8419 RDX=ffffed100d4c65be RSI=ffffffff8bf47da0 RDI=ffffffff81919711 RBP=ffffed1003ad2910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d694880 R14=ffffffff9084fd10 R15=0000000000000000 RIP=ffffffff8b6c6caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6be2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c24e508 CR3=00000000237bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555aabc294 000055555aabc010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555aab69b6 000055555aab66a0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0405048004018004 01d8080002880800 0108000a010cc602 be0800048003f0a4 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000008060a01 6cba108080808208 0005880300000004 0806058003080180 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300130000003972 080780030780040c 8003101000058004 01ec080002880800 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ad00040004001900 0000250000004500 00000100000006ff fee4c3e15bbb0047 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010210000c800401 000002080606017c ae7210000c900332 31f9000000000004 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060000000000000d 00ad000400040019 0000002500000045 0000000100000006 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffee4c3e15bbb00 4703001300000039 7208078003078004 0c80031010000580 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0401ec0800028808 000100000008060a 016cba1080808082 0800058803000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f2535 RDI=ffffffff9adf64e0 RBP=ffffffff9adf64a0 RSP=ffffc900061cead8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9adf64a0 R15=ffffffff854f24d0 RIP=ffffffff854f255f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc6aaff66c0 ffffffff 00c00000 GS =0000 ffff8880d6ce2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558db6e808 CR3=000000002f35c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff9853bf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6ad211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6ad211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6ad211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6ad211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6ad211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6ad211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000