last executing test programs: 18.325865758s ago: executing program 0 (id=2646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) mremap(&(0x7f000054c000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000590000/0x4000)=nil) (async) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b000000000000008c"]) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11}, &(0x7f00000001c0)) (async) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r5) r6 = socket(0x25, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1}}}}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000100)) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) (async) socket(0x0, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f00000000c0), 0x12) (async) write$cgroup_int(r10, &(0x7f0000001500)=0x1, 0x12) socket$inet6_sctp(0xa, 0x5, 0x84) 17.958181933s ago: executing program 0 (id=2648): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0xc8, 0x8, 0x138, 0x5803, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x118, 0x138, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev}}}, @common=@eui64={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@unspec=@connbytes={{0x38}, {[], 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) io_uring_setup(0x30d5, &(0x7f00000001c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f0000000040)=""/154, &(0x7f00000002c0)=0x9a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x44, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d94", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x41100}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r6, 0xff, 0x0, &(0x7f0000000900)="7c73c6e9", 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r8 = syz_open_dev$usbmon(&(0x7f0000007040), 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='selinux_audited\x00', r10}, 0x10) set_robust_list(0x0, 0x0) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f00000070c0)={0x0, 0x0, 0x80}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xdac) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) creat(0x0, 0x0) 17.783721639s ago: executing program 1 (id=2649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup(r5) r7 = dup(r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0x0, 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, r6) 16.864019837s ago: executing program 0 (id=2652): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000955606a091cb5332dd51e87ee0e3a17d2c85467b65120bd9e62672c64b6ecf00b17466b266d7c21aa3847993746a8cf915a6ab4c1364330677109fb710bfc8910d3dc5d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000002c0)={0x9, 0xa, {0xffffffffffffffff}, {}, 0x5, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES16, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x6}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x68}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="e80200002900000004000000005a000000000000c2040000000000dfaac7f65dde66007550d861b7b537fd49b44ed35b0b7c2ed243f39735881ba7309715165c3b9edec92e7dadb7a5bb76e68b4ce5350b4f2671dd45a5fd4320d89ed45cf375461e38967ad0f0891dc4bbba54a2c4b99498353dcc9f0233d55a6e0fbf78c3ba94983f48b6f65060c96fd75c4a82e937f62c958445a04c99c7646db75133bf141405b7db695b0de9a482a9dc8dc3c15f15db0153211c3604213a2baf4222bf165fdfa2ca3fddc94be49ac220c6fec65b5f419d364efc16072c068df6df4ff736f92d14e2d5c87eb699c31f1755ba93bf935b06fb93bdb863bb796b4fa365b5b80e7eacb78b04010007180000000004000000000000000000000000000000000000000774000000000a00000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000002229d40aeab2ece2763e7895cbddd3bcef323f53499b24b0bc57e8e417e20893cedcc8e4f10efdeb88f5e0c3de3fe3ca7d3e9d153f8829a9ace483ea348411f9c44740bfb23125dd1a1609525b9042df61031991b12c271afeb2aadd8f85a0d4677fadd"], 0x2e8}}], 0x2, 0x800) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) read$proc_mixer(r4, &(0x7f0000000080)=""/51, 0x33) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r6, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000006380)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)}}], 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000024000900000020000000000006000000"], 0x14}}, 0x0) 16.597025878s ago: executing program 3 (id=2653): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000955606a091cb5332dd51e87ee0e3a17d2c85467b65120bd9e62672c64b6ecf00b17466b266d7c21aa3847993746a8cf915a6ab4c1364330677109fb710bfc8910d3dc5d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000002c0)={0x9, 0xa, {0xffffffffffffffff}, {}, 0x5, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES16, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x6}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x68}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x2e8}}], 0x2, 0x800) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) read$proc_mixer(r4, &(0x7f0000000080)=""/51, 0x33) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r6, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000006380)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)}}], 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000024000900000020000000000006000000"], 0x14}}, 0x0) 5.178768091s ago: executing program 2 (id=2678): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r3}, 0x10) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001}, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa9b00000000000086dd60fca33f00007300fe80000000"], 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x80fe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="000100001a00010000fe5e7dffeb871576e888eb9ac34bfdab538eaf0b5f9302e7000000000000000000000001ffffffff00000000000000000000000000000000000000002b2b949e57fae84c149f8bf4d12dec19acf087b681aa1717fd49cbd538769d8a9a60617789ea56d261e3f868ed1a2b98776083edebb3f53abbfe7e1b4139c80a303e2bb79d1405785ba04c4c9d9897c37835a52b9c72abf5fdcca365209c3688b993181e210beafdb88c64f7cf872bc26940033adc880d89f989b4bc1868747b5f64c8967e863cf6a42d9db97d92aaca9c65b990c645fb91cf448ce57580b0556690", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000662b0000002001000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000014000e00ff010000000000000000000000000001"], 0x100}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) clock_getres(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcd7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2f9, 0x289, &(0x7f0000000040)="b90103600840f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(r6, 0x0, r1, 0x0, 0x1, 0x0) 4.151741375s ago: executing program 2 (id=2679): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x60, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) setrlimit(0xb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x9, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0xa01, 0x0) fcntl$setlease(r5, 0x400, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xprtrdma_post_recvs_err\x00', r5}, 0xffffffffffffffad) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000023c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380), 0xce4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setregid(0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010003000000000002000400", @ANYRES32=0x0, @ANYRESDEC=r6, @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="0206000084ec11b4d83cf52e2a40c8a7092ee7df44d630fb1526840000000020"], 0x3c, 0x1) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000300)=0xee, &(0x7f0000000340)=0x2) ioctl$TUNSETOFFLOAD(r0, 0x40087447, 0x0) 3.525216286s ago: executing program 1 (id=2669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r2, 0xffff8000) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r3, 0x10d, 0xe, &(0x7f00000002c0), &(0x7f0000000080)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x3, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r5) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="b90f0300000f3266450f08650f0766440ff324f9c403d579141e0066450fc7b00080000066baf80cb8c4119e8bef66bafc0cb8cd000000eff3450fc774f57f3e3e660f3830df0f01c2", 0x49}], 0x1, 0x42, &(0x7f0000000440), 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000001c0)="0f35f30f09c7442400cd000000c7442402bf770000ff1c240f01f87f2fc7442400bf000000c7442402fd7f0000ff2c2466baa10066ed6540e07ef30fb8f5642e3e262e640f01c2", 0x47}], 0xaaaaab6, 0x3c, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.113346004s ago: executing program 2 (id=2680): syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x81}, @l2cap_cid_signaling={{0x7d}, [@l2cap_conf_req={{0x4, 0x7, 0x4}, {0xffff, 0xd}}, @l2cap_disconn_rsp={{0x7, 0xff, 0x4}, {0x7fff, 0x8}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x6}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5a}, {0xcd, 0x3, 0x1, [@l2cap_conf_mtu={0x1, 0x2, 0x80}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0xc, 0x8, 0xf3, 0x400, 0x6c9f}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x3, 0x5, 0x4, 0x4, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x2, 0x9, 0x1, 0x1, 0x80008}}, @l2cap_conf_mtu={0x1, 0x2, 0x1b}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x2, 0x16a5, 0x83ab, 0xc, 0x12f}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0xfff8, 0x677e3c5b, 0x0, 0x2}}]}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x10, 0x6, 0x3}}]}}, 0x86) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x10}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x8, 0x5, 0x220, r4, 0x7fffffff, '\x00', 0x0, r4, 0x0, 0x2, 0x0, 0xe}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_emit_vhci(0x0, 0x8a) socket(0x0, 0xa, 0xaed) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x4004084, 0x0, 0x0) io_destroy(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2.76799146s ago: executing program 1 (id=2681): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r3}, 0x10) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001}, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa9b00000000000086dd60fca33f00007300fe80000000"], 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x80fe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="000100001a00010000fe5e7dffeb871576e888eb9ac34bfdab538eaf0b5f9302e7000000000000000000000001ffffffff00000000000000000000000000000000000000002b2b949e57fae84c149f8bf4d12dec19acf087b681aa1717fd49cbd538769d8a9a60617789ea56d261e3f868ed1a2b98776083edebb3f53abbfe7e1b4139c80a303e2bb79d1405785ba04c4c9d9897c37835a52b9c72abf5fdcca365209c3688b993181e210beafdb88c64f7cf872bc26940033adc880d89f989b4bc1868747b5f64c8967e863cf6a42d9db97d92aaca9c65b990c645fb91cf448ce57580b0556690", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000662b0000002001000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000014000e00ff010000000000000000000000000001"], 0x100}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) clock_getres(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcd7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2f9, 0x289, &(0x7f0000000040)="b90103600840f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(r6, 0x0, r1, 0x0, 0x1, 0x0) 2.026475201s ago: executing program 2 (id=2682): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="8c000000000101ffffffff000000000002000000"], 0x8c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0xd) mkdir(0x0, 0x0) creat(0x0, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) lsetxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x1, 0x0, &(0x7f00000000c0)=[{0x0, 0xfffffffffffffffa}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r6, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x0, &(0x7f0000000100)=""/222, 0x0) chdir(0x0) socket(0x10, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0105b08, &(0x7f0000000040)) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x2f) 1.94948557s ago: executing program 0 (id=2672): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) unshare(0x2000400) socket$rxrpc(0x21, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') msgrcv(0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES32], 0x8, 0x0) 1.84482252s ago: executing program 0 (id=2683): syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x81}, @l2cap_cid_signaling={{0x7d}, [@l2cap_conf_req={{0x4, 0x7, 0x4}, {0xffff, 0xd}}, @l2cap_disconn_rsp={{0x7, 0xff, 0x4}, {0x7fff, 0x8}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x6}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5a}, {0xcd, 0x3, 0x1, [@l2cap_conf_mtu={0x1, 0x2, 0x80}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0xc, 0x8, 0xf3, 0x400, 0x6c9f}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x3, 0x5, 0x4, 0x4, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x2, 0x9, 0x1, 0x1, 0x80008}}, @l2cap_conf_mtu={0x1, 0x2, 0x1b}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x2, 0x16a5, 0x83ab, 0xc, 0x12f}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0xfff8, 0x677e3c5b, 0x0, 0x2}}]}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x10, 0x6, 0x3}}]}}, 0x86) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x10}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r2 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x8, 0x5, 0x220, r3, 0x7fffffff, '\x00', 0x0, r3, 0x0, 0x2, 0x0, 0xe}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_emit_vhci(0x0, 0x8a) socket(0x0, 0xa, 0xaed) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x4004084, 0x0, 0x0) io_destroy(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.844528331s ago: executing program 3 (id=2674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000300000000000000ffffffff18250000", @ANYRES32=0x1, @ANYBLOB="000000000400000035b4100008000000bd9101000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c00000900"/40], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000c80)=[{0x5, 0x3, 0xb, 0x6}, {0x3, 0x2, 0xd, 0x6}], 0x10, 0x5}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x1, 0x0, 0xfffffdfc, 0x80000001}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x24}, 0x90) r5 = dup(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004a0000440000000000019078ac1e0001ac1414aa070b76ac1414aaac1414bb940401009404010000030e907800000000450000000000000000000000ac141401ac1414bb4a1b1907ebbc1c5ffd09df1025ef39c348bf96387c22bdef3e58d3dc393164631cfb6b6f5da60d5f0399a5f5fae775af"], 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x201700, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000002180)=""/102390, 0x18ff6}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r6, 0xd532b000) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000002140)={0x0, 0x2, 0x0, 0x0, 0x0, 0x40000000}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x22, 0x2, 0x0) socket(0x15, 0x5, 0x0) ioperm(0x0, 0xfffc, 0x8005) rseq(&(0x7f0000000040), 0x20, 0x40000, 0x0) r9 = mq_open(&(0x7f0000000700)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x40, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r10 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r10, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x100, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/191, 0xbf}], 0x1, 0x0, 0xfffffffd) 1.743142227s ago: executing program 1 (id=2684): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) socket(0x0, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000640)="3e3e662e660f6c7f3836360fc7350f22580f3066b9f20a00000f323e0fc76e000f01cff00fc1a300000ff9f265650f01c5", 0x31}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0xff}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240), 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000008900000000000300", @ANYRES32, @ANYBLOB="20001d801c000080060005006b00000005000a000000000005000b0000000000"], 0x3c}}, 0x0) 1.718530781s ago: executing program 3 (id=2685): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffff09}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00'}) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ppoll(&(0x7f0000000b80)=[{r3}], 0x1, &(0x7f0000000bc0), 0x0, 0x0) r4 = getpid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRESOCT=r7], 0x14}, 0x1, 0x0, 0x0, 0x20040881}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x4}) 1.643093248s ago: executing program 0 (id=2686): syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4a202) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0, r2}) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r4) process_vm_readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/237, 0xed}], 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/177, 0xb1}], 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f00000088c0)={0x0, &(0x7f00000087c0)=[{}], 0x0, 0x0, '\x00', 0x0, 0x1}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x1d7, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a8a5008100050008004b0001c100000000000690780000000000000000831ba1e00000020a0101020000000064010100ffffffffac14144144048ba0441c5781ac141436000000017f00000100000002000000000000ffff8611ffffffff060bc2e1dd252aa92545908609f1a0824fc74b8f00000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) shutdown(0xffffffffffffffff, 0x2) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000080)=0x6) socket(0x2c, 0x1, 0xffffffff) setresuid(0x0, 0x0, 0x0) 1.616348s ago: executing program 1 (id=2687): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r3}, 0x10) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001}, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa9b00000000000086dd60fca33f00007300fe80000000"], 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x80fe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="000100001a00010000fe5e7dffeb871576e888eb9ac34bfdab538eaf0b5f9302e7000000000000000000000001ffffffff00000000000000000000000000000000000000002b2b949e57fae84c149f8bf4d12dec19acf087b681aa1717fd49cbd538769d8a9a60617789ea56d261e3f868ed1a2b98776083edebb3f53abbfe7e1b4139c80a303e2bb79d1405785ba04c4c9d9897c37835a52b9c72abf5fdcca365209c3688b993181e210beafdb88c64f7cf872bc26940033adc880d89f989b4bc1868747b5f64c8967e863cf6a42d9db97d92aaca9c65b990c645fb91cf448ce57580b0556690", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000662b0000002001000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000014000e00ff010000000000000000000000000001"], 0x100}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) clock_getres(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcd7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2f9, 0x289, &(0x7f0000000040)="b90103600840f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d1203bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ffec8636fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f5617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1eee055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012c4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca9098ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955adad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41613d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000457f164d24108b9950ebb31ba3c6d1cb3c7502f732654b880c8a22a0126f9cb86e151f69496fb2609de91b22ae191fe7447d039b3c146adccf22145ee6c83800000000000000000000f02b28562133fc6356402f1f7bb9d9e2a8e61b81c11283467a9f233f21b07f97b9f85c3819"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(r6, 0x0, r1, 0x0, 0x1, 0x0) 1.22029905s ago: executing program 2 (id=2688): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'wlan1\x00', 0x100}) syz_usb_connect(0x0, 0x89, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000363cb11003041460b206010203010902770001000000000604000003f8ecd2000a24010000000201020b240600000200000000000a24010000"], 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r2, 0x29, 0x38, 0x0, &(0x7f00000000c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)="e64131c4ecdb77746ef62db3b363089b29d2101828880e88793cb3b1ef88f75a8012b90bbffe951b850a2343a1b6b7607f7c237508dd25ba1a0e0ee78e1260c2b5ca52c2a250a91336ef710c368b9350", 0x50}, {&(0x7f00000005c0)="96f87b2d7ce050437a0c884a70e8eca1f51df91a2d710b", 0x17}, {0x0}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="90003ad8000000000d01000005000000fd2b8c19089db5c32d50656561bc0ca029742c7056801b788674f6696c6e201bd428529bfb5adb785c93789912d5fe6c5c07bcda32f43f2cda173b98cee5946902fccb399855130fd34fd44fe8d4b9e1baf1dfd5b4c1a751a73a5d1ad4907a9034199f9cc7601177e6773e4dd9a797c470c7ec4f1a06f650a05fd06090ad240a1989089f71ce7ccae5000068000000000000001901000001000000bd344177527a7506d9ee2302e53b79edc6be6e51f4c6dccb0a63fa2f96bbb62a46d549a750b500eb52c2f005265c313b214f7b2133b620f265f08f84b4e58f2a189e2641b82b0cb6b7f387b38d00000000777c26f90b63ac3a77cdf16c3280b88fa1ad4d8c12e2481d6c90145eb0187797"], 0xf8}}, {{&(0x7f00000008c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x5, 0xff, 0x2, "c396850fbe675159101638ce43800d066cfdf5d47b25b46bff93f256558cb484c3c569ab628557fbc2d59fb5eb0d6e0775438d2f615eca689d5e82f4893abd", 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000cc0)="222f2fd8747b4b8b08963e09393be16385ed30a1719b1a1d0fd25da6965335fb78ab8ddda6bd379ece5ca482348fd2bcb141d16f9b53a75a9e9cf5e2cc44c647416a221ef028d4bdef916dacaa73c269515b412c248690eea645f5b78299e0d0988869af9684d124c39c37b91d5ba3", 0x6f}], 0x1, &(0x7f00000022c0)=[{0x10, 0x0, 0x1}, {0x40, 0x29, 0x101, "cff3aa24caa394f394c31ad709c6d3ae64dfbbd888910401228a3c4f4aafb175ca2a334ff3a81f813051"}, {0xb0, 0x10d, 0x0, "a6e4bcdecb9a94c0ce7ce6597631a197d0c2274eff5ceee351532da8fd5a3b4e0076f5f44cf28137ccd4943bd2af08b2cae5f84dcff72a90b97b64ca8da9507344178235a5bc1029a0f1e860cb9d02bd895813d37a0cda1e415b4b59e077e7ae309658897b4f9fa91e38be711da62e0d1c2c605721572389543697201e4e36351b2a6aedb2c171f731c52ed3b4c2990c6e0f3d82c4db432afd67"}, {0x10, 0x3a, 0x3}], 0x110}}, {{0x0, 0x0, &(0x7f0000002240), 0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="e0000000000000000000000000f8ffffbcaffc8a592d19e6ff57c059d4fe7799dc6e70cce25f22572df9eb8f3377a391ee66bab97a9bdb88d77fda9bc1c85af5aa74f132e3df49dbe1e7e7e3132583d5d9d8452a5ad05153900c5c4a6e03e259d4ce95aab7a17aef12bcf96012c6435398918c1ccf1e53719e8414a7a8e52e2a53ec2c1404a91174685e878f71ea618845a5a6df7046e33a17b1dd53e0e75d44945631794f4d5a04b22fa99d4a7fc8b7d21c8810dbae4d67795f6dca5b3e26d6460fb424f2493969cfe69548901c2535e87eccc55c77ecdc550000000000000078000000000000000e01000000000000feb83041aa55d1cb0e3dd1877d90f6bf487ffb37994152107ba1c03588d32087f73af23f88d80e6e6d4d3f773fb0ada74115292423022b7471f8d69e09245069c3781bcb1b11d8a015e6fac12794273f1eff9dc1a5e01ff52e2467cd68c08cec77806079e817a7477800000000000000180100000000000058dcf4cb697b0737564cd0110b20b142864d5577615c290dcdfa75b5749aff33b30aabfd13cc960daad6894fe901297da10ca06e38cc115ff697f82891a82d5ba27ad0e8f9002d0305bf22c31122ad93d843a89b1ec4fad1f2490a94ead702eb963be2f041020000b00000000000000011000000001000004ec4d0151a9502bab2dc738b6589d9a0c43cbccbc56b78050b341e1868ad7f8eaf7f1d0b1d09c56e40ae4fa25af234746be43c1b48a8c999f389886440451b5ac571d248dc60e5057a31b957856815302d2b012864400db5cae5495b8d35d39a35c8b4b6a28f90497e3bb638865a48ea7fdd837671f92eff0100000d1a5e4c53fdcda855dbbcc1b3556808c78489a7e5ee2e585e3b3c3bb86b7528c5db00000098000000000000006282bb718000000065b71162e10b1684c5cf53cfcdf5ef2d1dcde26d858f662aae3dec7986508846b1122669dbc53e69669618acbe4343d6e0d30a7890106fc8fea6c2d245585ed61175541d7ef701dc25016fed5aa58993c3f9a6a7d062fe5d7e3689d28fef49c0996f0b750021fbaccb7818bd412f9aabcc2744d112f4fac3024c816271a4dcbfe8464bd0000000005c7a707b717f310cab5b248688a833785b5c30d0ccbd04acd2f7917181b71b33"], 0x318}}], 0x4, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000005700)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/234, 0xea}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x4) 726.332919ms ago: executing program 3 (id=2689): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010ffffffff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001e"], 0x3c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x9c) 623.564744ms ago: executing program 3 (id=2690): syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000280)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 606.09705ms ago: executing program 1 (id=2691): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$KDENABIO(r0, 0x4b36) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540)='binfmt_misc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r4, 0x4, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, @info_request={0xf, 0x0, 0x0, 0x2}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='virtiofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x16800, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'vlan1\x00', &(0x7f0000000f80)=@ethtool_drvinfo={0x3, "ccf3d6ec5844f831e8b93519bae2865ad350d677d05c20de7e0ea4bf0f5cce50", "0ce2a5943b958788a90d10a10580426b5eea8a25875d66e0210b3680e8ff40fe", "2badb84fdd97cbddef7823d808753d3ebb9d187abd48ba8c74b8e9e8d014ea96", "ebb358f4ba9acb5d9ed4e9b160ed8a3071e7c98c2c1235e33f7917b446d9f63c", "7afdd320e5f1f1627b05ce225ce0f8ccd3d29d6c28fefa211e61c196913be29a", "faf6d9e8d937be995fdd8845"}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_usbip_server_init(0x4) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r6, 0x708, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x0, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 503.886761ms ago: executing program 3 (id=2692): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa87ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09002100000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf4ece4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c7f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f921860c6e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61fe2010000294800323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e824f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5cd628ab84875f2deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c49a0189da9173c62f0ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d8935a9c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e46d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a034b0dfb318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d39a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353026bdc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340103fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d7346b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb3b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4050000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a2002e5f2f7f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78123a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4537b2ccc5f9602da15f184f239098bf32551c7cf454e2faa2b9e17965b71104f8e311e1e936ce0cf783eb978fcd56f225f782d00e7008c664e34a3cc563e5fc4fa6aeced4bf805f71fc74472c0386aee070339af9fee8b32efad7fd0a0c7b3045d74bcb568a888fc9aa4599b71adad2135acbb600000fd2fd1755764ebfdf13f8633fe6358c8e05a792f0b9f133687041254cdf6cadeadcaa557de5fd2d3da5a75168fc36847cfa9b7c1a51f05bdb9bd36e9b17a75000000000000000000060000000000000074f3f5c25cb1d09b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffff09}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00'}) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ppoll(&(0x7f0000000b80)=[{r3}], 0x1, &(0x7f0000000bc0), 0x0, 0x0) r4 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRESOCT=r6], 0x14}, 0x1, 0x0, 0x0, 0x20040881}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x4}) 0s ago: executing program 2 (id=2693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x73bff6cb3caa3650) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC, @ANYRES64, @ANYBLOB="1deb0b2f4ebd68f416a97715a6a0aa488d2cac1908146ca9e2d6454136f06cef28990d0aa6f2cddf37cf6b2c1abf2a091e740a158dc5be3bf766a4eec4b901c13f9687d1b691426867d516c9ff36f291a12213aae14048ed0ba48215a140c3b1b665c2", @ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x4c083}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRESDEC, @ANYRESDEC, @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200a000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="007b2dbf7004fcdbdf254400c2fed2b79a93", @ANYRES32=0x0, @ANYBLOB="0c0099002effffff7e00000086ff18000303030303030000"], 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYBLOB="4fd7119892047fa011f47144c97cceebca2ff4ffcfffd4b515e45976bb8d54f60f9c25f185f01ef7dca970320d872cc1cd593a1587e7fb85ca13735485c4999921f6008f8df86c0c1bd993eb", @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040027bd7000fcdbdf250b0000001800018014000400fc0000000000000000000000000000001c0001800600010002000000060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB="0c00068008000355ae2784b8755900ac1e95a9ec27e6dd08000200030000"], 0x5c}}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000c00)={'ip_vti0\x00', 0x0, 0x40, 0x7, 0x400, 0xef7ffc01, {{0x21, 0x4, 0x2, 0x4, 0x84, 0x64, 0x0, 0x0, 0x2b, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1e}, {[@noop, @generic={0x83, 0x12, "cca96f2bcffe73f9e0774bcc20e33dff"}, @rr={0x7, 0x17, 0x24, [@broadcast, @rand_addr=0x64010101, @multicast2, @multicast2, @broadcast]}, @cipso={0x86, 0x39, 0x3, [{0x5, 0x12, "62cd289f2c181f26d77baf27958975b5"}, {0x7, 0x8, "0ccb531ed17d"}, {0x7, 0x6, "99c1448c"}, {0x6, 0xb, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x7, 0x8, "4cf6860a5ff6"}]}, @timestamp_prespec={0x44, 0xc, 0x2b, 0x3, 0x5, [{@empty, 0x6}]}]}}}}}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000640), 0x400000, 0x0) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = syz_io_uring_complete(0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r10, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000080)=@req={0xfffeffff, 0x5, 0x6, 0x200000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1f, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000020000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000890000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085200000040000004d650001ffffffff8500000007000000fc19c105080000e0436400001000000000000000080000000005040003000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0xae, &(0x7f0000000400)=""/174, 0x41100, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x45}, 0x8, 0x10, &(0x7f0000000600)={0x6, 0x6, 0xffffb62a, 0x4053}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r5, r6, r7, r8, r9, r10, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x4, 0x3, 0x5}, {0x4, 0x2, 0x7, 0x3}], 0x10, 0x9}, 0x90) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r11}, 0x10) r12 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x80400) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 000000000000000 [ 409.690158][T13317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.690168][T13317] R13: 0000000000000000 R14: 00007fbd1e905f80 R15: 00007fff6aacf5b8 [ 409.690182][T13317] [ 409.690250][ C2] vkms_vblank_simulate: vblank timer overrun [ 409.846354][ T39] audit: type=1400 audit(1723048381.462:3437): avc: denied { write } for pid=13321 comm="syz.2.2328" name="btrfs-control" dev="devtmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 410.029326][T13330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2329'. [ 410.678987][T13340] FAULT_INJECTION: forcing a failure. [ 410.678987][T13340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.685275][T13340] CPU: 0 UID: 0 PID: 13340 Comm: syz.3.2332 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 410.689814][T13340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 410.694583][T13340] Call Trace: [ 410.696101][T13340] [ 410.697549][T13340] dump_stack_lvl+0x16c/0x1f0 [ 410.699658][T13340] should_fail_ex+0x497/0x5b0 [ 410.701764][T13340] _copy_from_iter+0x2a1/0x1150 [ 410.704196][T13340] ? __alloc_skb+0x1fe/0x380 [ 410.706255][T13340] ? __pfx__copy_from_iter+0x10/0x10 [ 410.708705][T13340] ? __virt_addr_valid+0x5e/0x590 [ 410.710947][T13340] ? __phys_addr_symbol+0x30/0x80 [ 410.713191][T13340] ? __check_object_size+0x497/0x720 [ 410.715552][T13340] netlink_sendmsg+0x813/0xd70 [ 410.717533][T13340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.719844][T13340] ? __import_iovec+0x1fd/0x6e0 [ 410.721996][T13340] ____sys_sendmsg+0xab5/0xc90 [ 410.724492][T13340] ? copy_msghdr_from_user+0x10b/0x160 [ 410.727050][T13340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.729451][T13340] ? find_held_lock+0x2d/0x110 [ 410.731489][T13340] ? __pfx___lock_acquire+0x10/0x10 [ 410.735898][T13340] ___sys_sendmsg+0x135/0x1e0 [ 410.738012][T13340] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.740246][T13340] ? ksys_write+0x21c/0x260 [ 410.742119][T13340] ? __fget_light+0x173/0x210 [ 410.744205][T13340] __sys_sendmsg+0x117/0x1f0 [ 410.746079][T13340] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.748089][T13340] do_syscall_64+0xcd/0x250 [ 410.749820][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.752219][T13340] RIP: 0033:0x7f913df779f9 [ 410.754068][T13340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.762027][T13340] RSP: 002b:00007f913ecb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.765362][T13340] RAX: ffffffffffffffda RBX: 00007f913e105f80 RCX: 00007f913df779f9 [ 410.768258][T13340] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 410.771383][T13340] RBP: 00007f913ecb8090 R08: 0000000000000000 R09: 0000000000000000 [ 410.774648][T13340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.777562][T13340] R13: 0000000000000000 R14: 00007f913e105f80 R15: 00007fff299a6408 [ 410.780763][T13340] [ 410.996531][ T39] audit: type=1400 audit(1723048382.612:3438): avc: denied { write } for pid=13351 comm="syz.3.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 411.098416][T13354] fuse: Bad value for 'fd' [ 411.240520][T13358] CIFS mount error: No usable UNC path provided in device string! [ 411.240520][T13358] [ 411.244796][T13358] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 411.825123][ T25] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 411.919983][T13373] mmap: syz.2.2342 (13373) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 412.022885][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 412.048367][ T25] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 412.051941][ T25] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 412.062885][ T25] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 412.073255][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 412.083113][ T25] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 412.093051][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 412.103260][ T25] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 412.107976][ T4761] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 412.112419][ T4761] Bluetooth: hci2: Injecting HCI hardware error event [ 412.118044][ T4761] Bluetooth: hci2: hardware error 0x00 [ 412.124394][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.135057][ T25] usb 8-1: config 0 descriptor?? [ 412.343815][ T25] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 412.351456][ T25] usb 8-1: USB disconnect, device number 15 [ 412.359029][ T25] usblp0: removed [ 412.601240][T13381] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2344'. [ 412.773253][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.777428][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.781126][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.786689][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.790372][ T66] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 412.793720][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.946372][T13383] chnl_net:caif_netlink_parms(): no params data found [ 412.962797][ T25] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 413.040953][T13383] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.043856][T13383] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.046867][T13383] bridge_slave_0: entered allmulticast mode [ 413.049716][T13383] bridge_slave_0: entered promiscuous mode [ 413.053960][T13383] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.056950][T13383] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.059639][T13383] bridge_slave_1: entered allmulticast mode [ 413.064519][T13383] bridge_slave_1: entered promiscuous mode [ 413.130531][T13383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.138587][T13383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.162788][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 413.166817][ T25] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 413.170261][ T25] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 413.173985][ T25] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 413.177711][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 413.181765][ T25] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 413.185961][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 413.191456][ T25] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 413.195451][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.201244][ T25] usb 8-1: config 0 descriptor?? [ 413.201346][T13383] team0: Port device team_slave_0 added [ 413.212328][T13383] team0: Port device team_slave_1 added [ 413.266865][T13383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.269541][T13383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.280343][T13383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.287092][T13383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.289894][T13383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.300889][T13383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.360599][T13383] hsr_slave_0: entered promiscuous mode [ 413.367424][T13383] hsr_slave_1: entered promiscuous mode [ 413.370762][T13383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.374826][T13383] Cannot create hsr debugfs directory [ 413.406984][ T25] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 413.549686][T13383] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.576792][T13396] CIFS mount error: No usable UNC path provided in device string! [ 413.576792][T13396] [ 413.580675][T13396] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 413.605738][ T39] audit: type=1400 audit(1723048385.222:3439): avc: denied { read write } for pid=13365 comm="syz.3.2340" name="lp0" dev="devtmpfs" ino=2769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 413.611626][T13366] FAULT_INJECTION: forcing a failure. [ 413.611626][T13366] name failslab, interval 1, probability 0, space 0, times 0 [ 413.616733][ T39] audit: type=1400 audit(1723048385.222:3440): avc: denied { open } for pid=13365 comm="syz.3.2340" path="/dev/usb/lp0" dev="devtmpfs" ino=2769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 413.627307][T13366] CPU: 2 UID: 0 PID: 13366 Comm: syz.3.2340 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 413.635439][T13366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 413.640051][T13366] Call Trace: [ 413.641502][T13366] [ 413.642791][T13366] dump_stack_lvl+0x16c/0x1f0 [ 413.644804][T13366] should_fail_ex+0x497/0x5b0 [ 413.646842][T13366] ? fs_reclaim_acquire+0xae/0x160 [ 413.649054][T13366] should_failslab+0xc2/0x120 [ 413.651158][T13366] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 413.653572][T13366] ? security_file_alloc+0x41/0x260 [ 413.655931][T13366] security_file_alloc+0x41/0x260 [ 413.657865][T13366] init_file+0x99/0x260 [ 413.659324][T13366] alloc_empty_file+0x91/0x1e0 [ 413.660957][T13366] path_openat+0xe0/0x2d20 [ 413.662512][T13366] ? hlock_class+0x4e/0x130 [ 413.664219][T13366] ? __lock_acquire+0x1620/0x3cb0 [ 413.666055][T13366] ? __pfx_path_openat+0x10/0x10 [ 413.667982][T13366] ? __pfx___lock_acquire+0x10/0x10 [ 413.669962][T13366] ? find_held_lock+0x2d/0x110 [ 413.671614][T13366] do_filp_open+0x1dc/0x430 [ 413.673436][T13366] ? __pfx_do_filp_open+0x10/0x10 [ 413.675451][T13366] ? find_held_lock+0x2d/0x110 [ 413.677354][T13366] ? _raw_spin_unlock+0x28/0x50 [ 413.679452][T13366] ? alloc_fd+0x2d7/0x6c0 [ 413.681495][T13366] do_sys_openat2+0x17a/0x1e0 [ 413.683582][T13366] ? __pfx_do_sys_openat2+0x10/0x10 [ 413.685785][T13366] __x64_sys_openat+0x175/0x210 [ 413.687912][T13366] ? __pfx___x64_sys_openat+0x10/0x10 [ 413.690311][T13366] ? ksys_write+0x1ab/0x260 [ 413.691994][T13366] do_syscall_64+0xcd/0x250 [ 413.693548][T13366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.695675][T13366] RIP: 0033:0x7f913df76390 [ 413.697587][T13366] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8e 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8e 02 00 8b 44 [ 413.704614][T13366] RSP: 002b:00007f913ecb7b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 413.707845][T13366] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f913df76390 [ 413.710403][T13366] RDX: 0000000000000002 RSI: 00007f913ecb7c10 RDI: 00000000ffffff9c [ 413.713371][T13366] RBP: 00007f913ecb7c10 R08: 0000000000000000 R09: 00007f913ecb7987 [ 413.716298][T13366] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 413.719474][T13366] R13: 0000000000000000 R14: 00007f913e105f80 R15: 00007fff299a6408 [ 413.722837][T13366] [ 413.724092][ C2] vkms_vblank_simulate: vblank timer overrun [ 413.731208][ T5371] usb 8-1: USB disconnect, device number 16 [ 413.735984][ T5371] usblp0: removed [ 413.745170][T13383] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.850253][T13383] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.912800][T13383] bond0: (slave netdevsim0): Releasing backup interface [ 413.917724][T13383] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.050154][T13383] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 414.056230][T13383] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 414.063892][T13383] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 414.074118][T13383] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 414.144070][T13412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=13412 comm=syz.1.2352 [ 414.162247][T13383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.182932][ T4761] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 414.186555][T13383] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.228033][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.230355][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.255586][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.258535][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.297310][T13416] xt_l2tp: wrong L2TP version: 0 [ 414.312037][T13383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 414.316706][T13383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.348319][T12811] bridge_slave_1: left allmulticast mode [ 414.352463][T12811] bridge_slave_1: left promiscuous mode [ 414.356444][T12811] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.378779][T12811] bridge_slave_0: left allmulticast mode [ 414.381332][T12811] bridge_slave_0: left promiscuous mode [ 414.385961][T12811] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.803835][T12811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.811855][T12811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.818779][T12811] bond0 (unregistering): Released all slaves [ 414.822856][ T4761] Bluetooth: hci4: command tx timeout [ 414.927426][T13383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.991647][T13383] veth0_vlan: entered promiscuous mode [ 415.003953][T13383] veth1_vlan: entered promiscuous mode [ 415.079418][ T39] audit: type=1326 audit(1723048386.692:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13428 comm="syz.2.2356" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6628b779f9 code=0x0 [ 415.109102][T13383] veth0_macvtap: entered promiscuous mode [ 415.126477][T13383] veth1_macvtap: entered promiscuous mode [ 415.289990][T13435] 9pnet: Could not find request transport: fu/Šš„ðg0xffffffffffffffff [ 415.301256][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.306548][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.312228][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.317023][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.323106][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.328841][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.336594][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.341496][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.348149][T13383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.381078][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.392077][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.397129][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.401818][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.407630][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.412152][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.416373][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.420735][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.426895][T13383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.438660][T12811] hsr_slave_0: left promiscuous mode [ 415.441913][T12811] hsr_slave_1: left promiscuous mode [ 415.447156][T12811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.450390][T12811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.464217][T12811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.467835][T12811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.571654][T12811] veth1_macvtap: left promiscuous mode [ 415.575187][T12811] veth0_macvtap: left promiscuous mode [ 415.578929][T12811] veth1_vlan: left promiscuous mode [ 415.581820][T12811] veth0_vlan: left promiscuous mode [ 416.183850][T13450] FAULT_INJECTION: forcing a failure. [ 416.183850][T13450] name failslab, interval 1, probability 0, space 0, times 0 [ 416.189332][T13450] CPU: 2 UID: 0 PID: 13450 Comm: syz.3.2361 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 416.193804][T13450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 416.198566][T13450] Call Trace: [ 416.200019][T13450] [ 416.201355][T13450] dump_stack_lvl+0x16c/0x1f0 [ 416.203428][T13450] should_fail_ex+0x497/0x5b0 [ 416.205586][T13450] ? fs_reclaim_acquire+0xae/0x160 [ 416.207909][T13450] should_failslab+0xc2/0x120 [ 416.210035][T13450] __kmalloc_noprof+0xcb/0x400 [ 416.212262][T13450] ? __pfx_lock_acquire+0x10/0x10 [ 416.214537][T13450] tomoyo_realpath_from_path+0xb9/0x720 [ 416.216980][T13450] ? tomoyo_profile+0x47/0x60 [ 416.219117][T13450] tomoyo_path_number_perm+0x245/0x590 [ 416.221562][T13450] ? tomoyo_path_number_perm+0x232/0x590 [ 416.224095][T13450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 416.226766][T13450] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 416.229501][T13450] ? __fget_files+0x256/0x400 [ 416.231601][T13450] security_file_ioctl+0x75/0xc0 [ 416.233850][T13450] __x64_sys_ioctl+0xbb/0x220 [ 416.235991][T13450] do_syscall_64+0xcd/0x250 [ 416.238111][T13450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.240582][T13450] RIP: 0033:0x7f913df779f9 [ 416.242548][T13450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.250043][T13450] RSP: 002b:00007f913ecb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.253646][T13450] RAX: ffffffffffffffda RBX: 00007f913e105f80 RCX: 00007f913df779f9 [ 416.256463][T13450] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 416.259371][T13450] RBP: 00007f913ecb8090 R08: 0000000000000000 R09: 0000000000000000 [ 416.262373][T13450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.267404][T13450] R13: 0000000000000000 R14: 00007f913e105f80 R15: 00007fff299a6408 [ 416.270820][T13450] [ 416.272395][ C2] vkms_vblank_simulate: vblank timer overrun [ 416.284716][T13450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 416.637896][T13456] input: syz1 as /devices/virtual/input/input13 [ 416.904566][ T4761] Bluetooth: hci4: command tx timeout [ 417.021838][T12811] team0 (unregistering): Port device team_slave_1 removed [ 417.144323][T12811] team0 (unregistering): Port device team_slave_0 removed [ 417.897442][T13383] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.901242][T13383] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.905340][T13383] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.909722][T13383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.945082][T13454] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 418.067080][T12802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.070427][T12802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.116327][T12815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.124148][T12815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.992885][ T4761] Bluetooth: hci4: command tx timeout [ 419.490817][ C2] vkms_vblank_simulate: vblank timer overrun [ 419.619357][T13494] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 49 (only 8 groups) [ 419.714722][ T39] audit: type=1400 audit(1723048391.332:3442): avc: denied { getopt } for pid=13493 comm="syz.0.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 419.909904][ T39] audit: type=1400 audit(1723048391.522:3443): avc: denied { map } for pid=13507 comm="syz.0.2373" path="/dev/video0" dev="devtmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 420.069653][T13513] FAULT_INJECTION: forcing a failure. [ 420.069653][T13513] name failslab, interval 1, probability 0, space 0, times 0 [ 420.077529][T13513] CPU: 0 UID: 0 PID: 13513 Comm: syz.3.2375 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 420.082269][T13513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 420.087064][T13513] Call Trace: [ 420.088597][T13513] [ 420.089929][T13513] dump_stack_lvl+0x16c/0x1f0 [ 420.092051][T13513] should_fail_ex+0x497/0x5b0 [ 420.094162][T13513] ? fs_reclaim_acquire+0xae/0x160 [ 420.096452][T13513] should_failslab+0xc2/0x120 [ 420.098581][T13513] __kmalloc_node_track_caller_noprof+0xcf/0x430 [ 420.101267][T13513] ? kstrdup_const+0x63/0x80 [ 420.103485][T13513] kstrdup+0x3c/0x70 [ 420.105217][T13513] kstrdup_const+0x63/0x80 [ 420.107230][T13513] wakeup_source_create+0x61/0x160 [ 420.109501][T13513] wakeup_source_register+0x1b/0x140 [ 420.111895][T13513] ep_create_wakeup_source+0x13a/0x2e0 [ 420.114323][T13513] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 420.116624][T13513] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 420.119070][T13513] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 420.121071][T13513] ? kmem_cache_alloc_noprof+0x174/0x2f0 [ 420.123203][T13513] do_epoll_ctl+0x1deb/0x3570 [ 420.124814][T13513] ? __pfx_do_epoll_ctl+0x10/0x10 [ 420.126463][T13513] ? __pfx___might_resched+0x10/0x10 [ 420.128409][T13513] ? __might_fault+0xe3/0x190 [ 420.130113][T13513] ? __x64_sys_epoll_ctl+0x15d/0x1e0 [ 420.132086][T13513] __x64_sys_epoll_ctl+0x15d/0x1e0 [ 420.134108][T13513] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 420.136350][T13513] do_syscall_64+0xcd/0x250 [ 420.142774][T13513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.145192][T13513] RIP: 0033:0x7f913df779f9 [ 420.147043][T13513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.155001][T13513] RSP: 002b:00007f913ecb8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 420.158594][T13513] RAX: ffffffffffffffda RBX: 00007f913e105f80 RCX: 00007f913df779f9 [ 420.161946][T13513] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 420.165354][T13513] RBP: 00007f913ecb8090 R08: 0000000000000000 R09: 0000000000000000 [ 420.168767][T13513] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 420.171980][T13513] R13: 0000000000000000 R14: 00007f913e105f80 R15: 00007fff299a6408 [ 420.174935][T13513] [ 420.524908][ T39] audit: type=1400 audit(1723048392.142:3444): avc: denied { write } for pid=13521 comm="syz.2.2378" path="socket:[52037]" dev="sockfs" ino=52037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 420.770767][T13526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=13526 comm=syz.3.2379 [ 420.787573][T13526] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 420.861692][T13530] FAULT_INJECTION: forcing a failure. [ 420.861692][T13530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.868882][T13530] CPU: 2 UID: 0 PID: 13530 Comm: syz.2.2381 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 420.873353][T13530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 420.877949][T13530] Call Trace: [ 420.879246][T13530] [ 420.880383][T13530] dump_stack_lvl+0x16c/0x1f0 [ 420.882003][T13530] should_fail_ex+0x497/0x5b0 [ 420.884083][T13530] _copy_from_user+0x30/0xf0 [ 420.886002][T13530] memdup_user+0x71/0xd0 [ 420.887769][T13530] strndup_user+0x78/0xe0 [ 420.889575][T13530] __x64_sys_mount+0x138/0x320 [ 420.891675][T13530] ? __pfx___x64_sys_mount+0x10/0x10 [ 420.894027][T13530] do_syscall_64+0xcd/0x250 [ 420.895987][T13530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.898397][T13530] RIP: 0033:0x7f6628b779f9 [ 420.900320][T13530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.908789][T13530] RSP: 002b:00007f66299b3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 420.912346][T13530] RAX: ffffffffffffffda RBX: 00007f6628d05f80 RCX: 00007f6628b779f9 [ 420.915698][T13530] RDX: 00000000200004c0 RSI: 0000000020000480 RDI: 00000000200001c0 [ 420.919438][T13530] RBP: 00007f66299b3090 R08: 0000000020000840 R09: 0000000000000000 [ 420.922566][T13530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.926058][T13530] R13: 0000000000000000 R14: 00007f6628d05f80 R15: 00007ffd8ed7a8c8 [ 420.929279][T13530] [ 420.930567][ C2] vkms_vblank_simulate: vblank timer overrun [ 420.975189][ T39] audit: type=1400 audit(1723048392.592:3445): avc: denied { create } for pid=13531 comm="syz.0.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 420.994403][ T39] audit: type=1400 audit(1723048392.602:3446): avc: denied { setattr } for pid=13534 comm="syz.2.2383" name="/" dev="9p" ino=36701589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.033893][T13538] syz_tun: entered allmulticast mode [ 421.047852][T13539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.056847][T13538] syz_tun: left allmulticast mode [ 421.073033][ T4761] Bluetooth: hci4: command tx timeout [ 421.108067][T13542] random: crng reseeded on system resumption [ 421.922553][ T4761] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 421.925534][ T4761] Bluetooth: Wrong link type (-22) [ 422.427689][T13559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.431150][T13559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.662798][ T986] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 422.852794][ T986] usb 5-1: Using ep0 maxpacket: 16 [ 422.856880][ T986] usb 5-1: config 0 has an invalid interface descriptor of length 6, skipping [ 422.859872][ T986] usb 5-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config [ 422.863560][ T986] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 422.868450][ T986] usb 5-1: New USB device found, idVendor=0403, idProduct=6014, bcdDevice= 6.b2 [ 422.872101][ T986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.876352][ T986] usb 5-1: Product: syz [ 422.878032][ T986] usb 5-1: Manufacturer: syz [ 422.879682][ T986] usb 5-1: SerialNumber: syz [ 422.883302][ T986] usb 5-1: config 0 descriptor?? [ 423.309985][ T5371] usb 5-1: USB disconnect, device number 18 [ 424.273869][T13589] xt_l2tp: wrong L2TP version: 0 [ 424.304910][T13592] xt_l2tp: wrong L2TP version: 0 [ 425.099782][T13608] CIFS mount error: No usable UNC path provided in device string! [ 425.099782][T13608] [ 425.110706][T13608] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 425.264601][T13615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=13615 comm=syz.2.2406 [ 425.728510][ T4761] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 425.731427][ T4761] Bluetooth: Wrong link type (-22) [ 426.140624][T13632] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2412'. [ 426.531393][T13645] ptrace attach of "/syz-executor exec"[13383] was attempted by "/syz-executor exec"[13645] [ 426.531701][T13641] FAULT_INJECTION: forcing a failure. [ 426.531701][T13641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.540580][T13641] CPU: 3 UID: 0 PID: 13641 Comm: syz.1.2416 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 426.544744][T13641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 426.549229][T13641] Call Trace: [ 426.550712][T13641] [ 426.552007][T13641] dump_stack_lvl+0x16c/0x1f0 [ 426.554114][T13641] should_fail_ex+0x497/0x5b0 [ 426.556291][T13641] _copy_from_user+0x30/0xf0 [ 426.558198][T13641] copy_msghdr_from_user+0x99/0x160 [ 426.560107][T13641] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 426.562749][T13641] ? rcu_is_watching+0x12/0xc0 [ 426.564888][T13641] ? __pfx___lock_acquire+0x10/0x10 [ 426.567096][T13641] ___sys_recvmsg+0xdc/0x1a0 [ 426.569028][T13641] ? __pfx____sys_recvmsg+0x10/0x10 [ 426.571190][T13641] ? find_held_lock+0x2d/0x110 [ 426.573193][T13641] ? __pfx___might_resched+0x10/0x10 [ 426.575359][T13641] ? __might_fault+0xe3/0x190 [ 426.576928][T13641] do_recvmmsg+0x2ba/0x750 [ 426.578740][T13641] ? __pfx_do_recvmmsg+0x10/0x10 [ 426.580960][T13641] ? vfs_write+0x14d/0x1140 [ 426.582646][T13641] ? __mutex_unlock_slowpath+0x164/0x650 [ 426.584980][T13641] __x64_sys_recvmmsg+0x239/0x290 [ 426.587137][T13641] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 426.589431][T13641] do_syscall_64+0xcd/0x250 [ 426.591368][T13641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.593960][T13641] RIP: 0033:0x7f2bd27779f9 [ 426.595909][T13641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.604003][T13641] RSP: 002b:00007f2bd21ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 426.608017][T13641] RAX: ffffffffffffffda RBX: 00007f2bd2905f80 RCX: 00007f2bd27779f9 [ 426.611571][T13641] RDX: 0000000000001003 RSI: 00000000200048c0 RDI: 0000000000000003 [ 426.615167][T13641] RBP: 00007f2bd21ff090 R08: 0000000000000000 R09: 0000000000000000 [ 426.618810][T13641] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 426.621844][T13641] R13: 0000000000000000 R14: 00007f2bd2905f80 R15: 00007ffdc63cf3c8 [ 426.624844][T13641] [ 426.899375][T13652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=13652 comm=syz.3.2419 [ 426.921420][T13652] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 428.188145][T13679] syz.1.2427[13679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.188359][T13679] syz.1.2427[13679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.309285][ T5332] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 428.316637][ T5332] Bluetooth: Wrong link type (-22) [ 428.322851][T13679] nbd1: detected capacity change from 0 to 22 [ 428.347424][T13683] FAULT_INJECTION: forcing a failure. [ 428.347424][T13683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.354378][T13683] CPU: 1 UID: 0 PID: 13683 Comm: syz.1.2427 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 428.359303][T13683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 428.363751][T13683] Call Trace: [ 428.365054][T13683] [ 428.366128][T13683] dump_stack_lvl+0x16c/0x1f0 [ 428.368016][T13683] should_fail_ex+0x497/0x5b0 [ 428.370006][T13683] strncpy_from_user+0x38/0x320 [ 428.372093][T13683] getname_flags.part.0+0x8f/0x550 [ 428.374017][T13683] getname+0x8d/0xe0 [ 428.375416][T13683] do_sys_openat2+0x104/0x1e0 [ 428.377525][T13683] ? __pfx_do_sys_openat2+0x10/0x10 [ 428.379709][T13683] __x64_sys_openat+0x175/0x210 [ 428.381762][T13683] ? __pfx___x64_sys_openat+0x10/0x10 [ 428.384068][T13683] ? ksys_write+0x1ab/0x260 [ 428.385752][T13683] do_syscall_64+0xcd/0x250 [ 428.387614][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.389753][T13683] RIP: 0033:0x7f2bd2776390 [ 428.391498][T13683] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8e 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8e 02 00 8b 44 [ 428.399419][T13683] RSP: 002b:00007f2bd21ddb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 428.403388][T13683] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2bd2776390 [ 428.406825][T13683] RDX: 0000000000000000 RSI: 00007f2bd21ddc10 RDI: 00000000ffffff9c [ 428.410370][T13683] RBP: 00007f2bd21ddc10 R08: 0000000000000000 R09: 002364626e2f7665 [ 428.413927][T13683] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 428.417480][T13683] R13: 0000000000000001 R14: 00007f2bd2906058 R15: 00007ffdc63cf3c8 [ 428.420907][T13683] [ 428.422429][ C1] hpet: Lost 3 RTC interrupts [ 428.682587][T13689] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 428.687195][T13689] cramfs: wrong magic [ 428.719943][ T39] audit: type=1400 audit(1723048400.332:3447): avc: denied { accept } for pid=13688 comm="syz.2.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 428.989653][ T4761] block nbd1: Receive control failed (result -104) [ 429.072039][T13700] x_tables: duplicate underflow at hook 1 [ 429.079442][ T39] audit: type=1400 audit(1723048400.692:3448): avc: denied { setopt } for pid=13699 comm="syz.0.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 429.170109][T13706] FAULT_INJECTION: forcing a failure. [ 429.170109][T13706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.175783][T13706] CPU: 2 UID: 0 PID: 13706 Comm: syz.3.2435 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 429.180250][T13706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 429.184716][T13706] Call Trace: [ 429.186122][T13706] [ 429.187391][T13706] dump_stack_lvl+0x16c/0x1f0 [ 429.189401][T13706] should_fail_ex+0x497/0x5b0 [ 429.191347][T13706] _copy_to_user+0x30/0xc0 [ 429.193237][T13706] simple_read_from_buffer+0xd0/0x160 [ 429.195500][T13706] proc_fail_nth_read+0x1b0/0x290 [ 429.197701][T13706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 429.199585][T13706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 429.201798][T13706] vfs_read+0x1d4/0xbd0 [ 429.203222][T13706] ? __fdget_pos+0xeb/0x180 [ 429.204929][T13706] ? __pfx_vfs_read+0x10/0x10 [ 429.206941][T13706] ? __pfx___mutex_lock+0x10/0x10 [ 429.208811][T13706] ? __fget_files+0x256/0x400 [ 429.210842][T13706] ksys_read+0x12f/0x260 [ 429.212685][T13706] ? __pfx_ksys_read+0x10/0x10 [ 429.214737][T13706] do_syscall_64+0xcd/0x250 [ 429.216275][T13706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.218449][T13706] RIP: 0033:0x7f913df7643c [ 429.220198][T13706] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 429.227652][T13706] RSP: 002b:00007f913ecb8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 429.230552][T13706] RAX: ffffffffffffffda RBX: 00007f913e105f80 RCX: 00007f913df7643c [ 429.233195][T13706] RDX: 000000000000000f RSI: 00007f913ecb80a0 RDI: 000000000000000a [ 429.235966][T13706] RBP: 00007f913ecb8090 R08: 0000000000000000 R09: 0000000000000000 [ 429.238841][T13706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.241803][T13706] R13: 0000000000000000 R14: 00007f913e105f80 R15: 00007fff299a6408 [ 429.244755][T13706] [ 429.249531][T13709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=13709 comm=syz.0.2433 [ 429.481875][ T5332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.495904][ T5332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.500091][ T5332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.504731][ T5332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.509709][ T5332] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 429.513846][ T5332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.651186][T13711] chnl_net:caif_netlink_parms(): no params data found [ 429.770239][T13711] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.773859][T13711] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.777609][T13711] bridge_slave_0: entered allmulticast mode [ 429.781181][T13711] bridge_slave_0: entered promiscuous mode [ 429.786722][T13711] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.791610][T13711] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.794984][T13711] bridge_slave_1: entered allmulticast mode [ 429.798596][T13711] bridge_slave_1: entered promiscuous mode [ 429.848772][T13711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.858133][T13711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.906195][T13711] team0: Port device team_slave_0 added [ 429.912652][T13711] team0: Port device team_slave_1 added [ 429.965795][T13711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.968203][T13711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.992755][T13711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.998722][T13711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.001368][T13711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.015185][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 430.016177][T13711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.085578][T13711] hsr_slave_0: entered promiscuous mode [ 430.089230][T13711] hsr_slave_1: entered promiscuous mode [ 430.092614][T13711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.098918][T13711] Cannot create hsr debugfs directory [ 430.297291][T13711] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.409156][T13711] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.475396][T13711] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.531883][T13711] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.692312][T13711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 430.699852][T13711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 430.706873][T13711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 430.714467][T13711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 430.800071][T13711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.820535][T13711] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.831097][ T831] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.834466][ T831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.854726][ T831] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.857955][ T831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.891615][T13711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.025707][T13711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.046991][T13745] CIFS mount error: No usable UNC path provided in device string! [ 431.046991][T13745] [ 431.051287][T13745] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 431.067440][T13711] veth0_vlan: entered promiscuous mode [ 431.077338][T13711] veth1_vlan: entered promiscuous mode [ 431.107983][T13711] veth0_macvtap: entered promiscuous mode [ 431.114637][T13711] veth1_macvtap: entered promiscuous mode [ 431.132605][T13711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.137198][T13711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.140445][T13711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.145644][T13711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.149762][T13711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.154392][T13711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.158487][T13711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.163148][T13711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.168532][T13711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.175427][T13711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.179658][T13711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.183572][T13711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.187624][T13711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.191674][T13711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.196133][T13711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.200239][T13711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.207483][T13711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.215475][T13711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.226316][T13711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.229351][T13711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.232278][T13711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.235775][T13711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.294328][T12811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.297435][T12811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.319756][T12811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.324431][T12811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.544068][ T4761] Bluetooth: hci0: command tx timeout [ 432.275217][T13771] xt_l2tp: wrong L2TP version: 0 [ 432.837501][ T4761] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 432.841113][ T4761] Bluetooth: Wrong link type (-22) [ 433.122548][ T4761] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 433.126852][ T4761] Bluetooth: Wrong link type (-22) [ 433.623096][ T4761] Bluetooth: hci0: command tx timeout [ 433.659071][T13798] xt_l2tp: wrong L2TP version: 0 [ 433.663953][ T4761] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 433.666772][T13797] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2456'. [ 434.386963][ T39] audit: type=1400 audit(1723048406.002:3449): avc: denied { write } for pid=13818 comm="syz.2.2463" path="socket:[55541]" dev="sockfs" ino=55541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 435.073426][T13826] CIFS mount error: No usable UNC path provided in device string! [ 435.073426][T13826] [ 435.078063][T13826] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 435.545056][T13841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.549187][T13841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.702874][ T4761] Bluetooth: hci0: command tx timeout [ 436.187157][T13846] FAULT_INJECTION: forcing a failure. [ 436.187157][T13846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.191657][T13846] CPU: 2 UID: 0 PID: 13846 Comm: syz.2.2470 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 436.195299][T13846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 436.199422][T13846] Call Trace: [ 436.200939][T13846] [ 436.202284][T13846] dump_stack_lvl+0x16c/0x1f0 [ 436.204407][T13846] should_fail_ex+0x497/0x5b0 [ 436.206558][T13846] _copy_from_iter+0x2a1/0x1150 [ 436.208789][T13846] ? __alloc_skb+0x1fe/0x380 [ 436.210858][T13846] ? __pfx__copy_from_iter+0x10/0x10 [ 436.213265][T13846] ? __virt_addr_valid+0x5e/0x590 [ 436.215574][T13846] ? __phys_addr_symbol+0x30/0x80 [ 436.217867][T13846] ? __check_object_size+0x497/0x720 [ 436.220256][T13846] netlink_sendmsg+0x813/0xd70 [ 436.222389][T13846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.224478][T13846] ? __import_iovec+0x1fd/0x6e0 [ 436.226234][T13846] ____sys_sendmsg+0xab5/0xc90 [ 436.227902][T13846] ? copy_msghdr_from_user+0x10b/0x160 [ 436.229772][T13846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.231583][T13846] ? find_held_lock+0x2d/0x110 [ 436.233214][T13846] ? __pfx___lock_acquire+0x10/0x10 [ 436.235025][T13846] ___sys_sendmsg+0x135/0x1e0 [ 436.236645][T13846] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.238523][T13846] ? ksys_write+0x21c/0x260 [ 436.240334][T13846] ? __fget_light+0x173/0x210 [ 436.242129][T13846] __sys_sendmsg+0x117/0x1f0 [ 436.243881][T13846] ? __pfx___sys_sendmsg+0x10/0x10 [ 436.245626][T13846] do_syscall_64+0xcd/0x250 [ 436.247199][T13846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.249480][T13846] RIP: 0033:0x7f6628b779f9 [ 436.251035][T13846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.258686][T13846] RSP: 002b:00007f66299b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.261610][T13846] RAX: ffffffffffffffda RBX: 00007f6628d05f80 RCX: 00007f6628b779f9 [ 436.264600][T13846] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 436.267493][T13846] RBP: 00007f66299b3090 R08: 0000000000000000 R09: 0000000000000000 [ 436.270346][T13846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.273203][T13846] R13: 0000000000000000 R14: 00007f6628d05f80 R15: 00007ffd8ed7a8c8 [ 436.276344][T13846] [ 436.312796][ T39] audit: type=1400 audit(1723048407.922:3450): avc: denied { read } for pid=13847 comm="syz.2.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 437.412574][T13872] binder: 13868:13872 unknown command 0 [ 437.417120][T13872] binder: 13868:13872 ioctl c0306201 20000480 returned -22 [ 437.421805][T13872] binder: 13868:13872 ioctl c0306201 0 returned -14 [ 437.643427][ T5377] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 437.713945][ T4761] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 437.716936][ T4761] Bluetooth: hci4: Injecting HCI hardware error event [ 437.724657][ T4761] Bluetooth: hci4: hardware error 0x00 [ 437.782820][ T5332] Bluetooth: hci0: command tx timeout [ 437.823074][ T5377] usb 8-1: Using ep0 maxpacket: 16 [ 437.828852][ T5377] usb 8-1: config 0 has an invalid interface descriptor of length 6, skipping [ 437.836024][ T5377] usb 8-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config [ 437.844702][ T5377] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 437.856028][ T5377] usb 8-1: New USB device found, idVendor=0403, idProduct=6014, bcdDevice= 6.b2 [ 437.863465][ T5377] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.870536][ T5377] usb 8-1: Product: syz [ 437.873306][ T5377] usb 8-1: Manufacturer: syz [ 437.877459][ T5377] usb 8-1: SerialNumber: syz [ 437.894662][ T5377] usb 8-1: config 0 descriptor?? [ 438.250578][ T39] audit: type=1326 audit(1723048409.862:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.0.2480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f6d779f9 code=0x7ffc0000 [ 438.262337][ T39] audit: type=1326 audit(1723048409.862:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.0.2480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f6d779f9 code=0x7ffc0000 [ 438.273338][ T39] audit: type=1326 audit(1723048409.862:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.0.2480" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8f6d779f9 code=0x7ffc0000 [ 438.286249][ T39] audit: type=1326 audit(1723048409.862:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.0.2480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f6d779f9 code=0x7ffc0000 [ 438.286265][ T25] usb 8-1: USB disconnect, device number 17 [ 438.299302][ T39] audit: type=1326 audit(1723048409.862:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.0.2480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f6d779f9 code=0x7ffc0000 [ 438.309828][ T39] audit: type=1326 audit(1723048409.862:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.0.2480" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8f6d779f9 code=0x7ffc0000 [ 438.320617][ T39] audit: type=1326 audit(1723048409.862:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.0.2480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f6d779f9 code=0x7ffc0000 [ 438.331169][ T39] audit: type=1326 audit(1723048409.862:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.0.2480" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8f6d779f9 code=0x7ffc0000 [ 438.421738][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.426684][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.430925][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.436694][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.439846][ T66] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 438.443452][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 438.552440][T13893] chnl_net:caif_netlink_parms(): no params data found [ 438.637230][T13893] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.640057][T13893] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.642623][T13893] bridge_slave_0: entered allmulticast mode [ 438.645706][T13893] bridge_slave_0: entered promiscuous mode [ 438.649633][T13893] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.652170][T13893] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.655436][T13893] bridge_slave_1: entered allmulticast mode [ 438.658518][T13893] bridge_slave_1: entered promiscuous mode [ 438.715808][T13893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.733875][T13893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.838587][T13893] team0: Port device team_slave_0 added [ 438.845080][T13893] team0: Port device team_slave_1 added [ 438.847531][T13903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2483'. [ 438.890710][T13907] xt_l2tp: wrong L2TP version: 0 [ 438.926213][T13893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.929415][T13893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.940445][T13893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.948268][T13893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.950928][T13893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.963142][T13893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.026642][T13893] hsr_slave_0: entered promiscuous mode [ 439.029911][T13893] hsr_slave_1: entered promiscuous mode [ 439.032390][T13893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.036896][T13893] Cannot create hsr debugfs directory [ 439.174595][T13893] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.263046][T13893] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.336437][T13893] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.367926][ T5332] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 439.370341][ T5332] Bluetooth: Wrong link type (-22) [ 439.438427][T13893] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.614721][T13893] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 439.621517][T13893] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 439.631143][T13893] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 439.639457][T13893] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 439.699517][T13893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.711054][T13893] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.717421][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.719901][ T5377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.736264][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.740809][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.784501][ T4761] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 439.979867][T13893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.036491][T13893] veth0_vlan: entered promiscuous mode [ 440.048550][T13893] veth1_vlan: entered promiscuous mode [ 440.075231][T13893] veth0_macvtap: entered promiscuous mode [ 440.080947][T13893] veth1_macvtap: entered promiscuous mode [ 440.097563][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.101774][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.108655][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.114196][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.118387][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.128233][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.132356][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.136697][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.140724][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.145096][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.154961][T13893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.166272][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.171203][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.175804][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.179978][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.193046][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.193684][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 440.193698][ T39] audit: type=1400 audit(1723048411.812:3469): avc: denied { setopt } for pid=13935 comm="syz.0.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 440.197021][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.197042][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.197055][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.197072][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.227138][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.234539][T13893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.244214][T13893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.249163][T13893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.253358][T13893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.257166][T13893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.360190][T12815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.369068][T12815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.398620][T12812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.403361][T12812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.513305][ T4761] Bluetooth: hci2: command tx timeout [ 440.569301][T13945] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 440.572503][T13945] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 440.579707][T13945] vhci_hcd vhci_hcd.0: Device attached [ 440.774419][T13752] vhci_hcd: vhci_device speed not set [ 440.843351][T13752] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 440.992627][T13946] vhci_hcd: connection reset by peer [ 440.995702][T12813] vhci_hcd: stop threads [ 440.997588][T12813] vhci_hcd: release socket [ 441.001725][T12813] vhci_hcd: disconnect device [ 441.838798][T13986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=13986 comm=syz.2.2497 [ 442.503582][T13992] nbd0: detected capacity change from 0 to 22 [ 442.507724][T13996] block nbd0: shutting down sockets [ 442.507726][ T9084] blk_print_req_error: 40 callbacks suppressed [ 442.507739][ T9084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 442.517059][ T9084] buffer_io_error: 40 callbacks suppressed [ 442.517071][ T9084] Buffer I/O error on dev nbd0, logical block 0, async page read [ 442.543417][ T1167] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 442.547371][ T1167] Buffer I/O error on dev nbd0, logical block 0, async page read [ 442.551223][ T9084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 442.557103][ T9084] Buffer I/O error on dev nbd0, logical block 0, async page read [ 442.560595][ T9084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 442.565400][ T9084] Buffer I/O error on dev nbd0, logical block 0, async page read [ 442.568906][ T9084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 442.573814][ T9084] Buffer I/O error on dev nbd0, logical block 0, async page read [ 442.577412][ T9084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 442.581461][ T9084] Buffer I/O error on dev nbd0, logical block 0, async page read [ 442.585015][ T4761] Bluetooth: hci2: command tx timeout [ 442.590090][ T9084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 442.594762][ T9084] Buffer I/O error on dev nbd0, logical block 0, async page read [ 442.598141][ T9084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 442.602030][ T9084] Buffer I/O error on dev nbd0, logical block 0, async page read [ 442.607626][ T9084] ldm_validate_partition_table(): Disk read failed. [ 442.610644][ T9084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 442.615032][ T9084] Buffer I/O error on dev nbd0, logical block 0, async page read [ 442.618678][ T9084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 442.624583][ T9084] Buffer I/O error on dev nbd0, logical block 0, async page read [ 442.628011][ T9084] Dev nbd0: unable to read RDB block 0 [ 442.630498][ T9084] nbd0: unable to read partition table [ 442.634155][ T9084] nbd0: partition table beyond EOD, truncated [ 442.639208][ T9084] ldm_validate_partition_table(): Disk read failed. [ 442.646506][ T9084] Dev nbd0: unable to read RDB block 0 [ 442.649286][ T9084] nbd0: unable to read partition table [ 442.652076][ T9084] nbd0: partition table beyond EOD, truncated [ 442.899633][T14010] ptrace attach of "/syz-executor exec"[13893] was attempted by "/syz-executor exec"[14010] [ 443.486097][ T4761] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 443.490245][ T4761] Bluetooth: Wrong link type (-22) [ 444.413141][T14027] CIFS mount error: No usable UNC path provided in device string! [ 444.413141][T14027] [ 444.417243][T14027] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 444.518820][T14033] xt_l2tp: wrong L2TP version: 0 [ 444.550889][T14031] CIFS mount error: No usable UNC path provided in device string! [ 444.550889][T14031] [ 444.555679][T14031] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 444.663013][ T4761] Bluetooth: hci2: command tx timeout [ 444.825732][T14043] CIFS mount error: No usable UNC path provided in device string! [ 444.825732][T14043] [ 444.829839][T14043] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 445.372597][T14058] ptrace attach of "/syz-executor exec"[13711] was attempted by "/syz-executor exec"[14058] [ 445.625161][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.631202][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.962905][T13752] vhci_hcd: vhci_device speed not set [ 446.330877][T14074] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2524'. [ 446.720402][T14083] FAULT_INJECTION: forcing a failure. [ 446.720402][T14083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.725373][T14083] CPU: 3 UID: 60928 PID: 14083 Comm: syz.2.2527 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 446.729613][T14083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 446.732989][T14083] Call Trace: [ 446.734043][T14083] [ 446.734964][T14083] dump_stack_lvl+0x16c/0x1f0 [ 446.736466][T14083] should_fail_ex+0x497/0x5b0 [ 446.738093][T14083] _copy_to_user+0x30/0xc0 [ 446.739497][T14083] snd_rawmidi_ioctl_status64+0x12d/0x1f0 [ 446.741328][T14083] ? __pfx_snd_rawmidi_ioctl_status64+0x10/0x10 [ 446.743300][T14083] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 446.745314][T14083] snd_rawmidi_ioctl+0x2eb/0x950 [ 446.747570][T14083] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 446.749860][T14083] ? selinux_file_ioctl+0x180/0x270 [ 446.752180][T14083] ? selinux_file_ioctl+0xb4/0x270 [ 446.754918][T14083] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 446.757430][T14083] __x64_sys_ioctl+0x193/0x220 [ 446.759847][T14083] do_syscall_64+0xcd/0x250 [ 446.761903][T14083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.765666][T14083] RIP: 0033:0x7f6628b779f9 [ 446.767560][T14083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.775099][T14083] RSP: 002b:00007f6629992038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.778383][T14083] RAX: ffffffffffffffda RBX: 00007f6628d06058 RCX: 00007f6628b779f9 [ 446.781482][T14083] RDX: 0000000020000100 RSI: 00000000c0385720 RDI: 000000000000000b [ 446.784575][T14083] RBP: 00007f6629992090 R08: 0000000000000000 R09: 0000000000000000 [ 446.787474][T14083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.790648][T14083] R13: 0000000000000000 R14: 00007f6628d06058 R15: 00007ffd8ed7a8c8 [ 446.793837][T14083] [ 446.796318][ T4761] Bluetooth: hci2: command tx timeout [ 446.806506][ T39] audit: type=1400 audit(1723048418.422:3470): avc: denied { write } for pid=14081 comm="syz.2.2527" name="nvram" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 447.358825][T14100] xt_l2tp: wrong L2TP version: 0 [ 447.870506][T14105] xt_l2tp: wrong L2TP version: 0 [ 447.959606][T14107] CIFS mount error: No usable UNC path provided in device string! [ 447.959606][T14107] [ 447.972971][T14107] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 448.884998][T14129] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2541'. [ 449.212283][T14138] xt_l2tp: wrong L2TP version: 0 [ 449.722306][T14146] CIFS mount error: No usable UNC path provided in device string! [ 449.722306][T14146] [ 449.726914][T14146] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 449.776721][T14150] ptrace attach of "/syz-executor exec"[13383] was attempted by "/syz-executor exec"[14150] [ 451.247519][T14182] ptrace attach of "/syz-executor exec"[13711] was attempted by "/syz-executor exec"[14182] [ 451.645204][T14186] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 454.118749][ T4761] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 454.121600][ T4761] Bluetooth: Wrong link type (-22) [ 454.269793][T14229] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2567'. [ 454.400104][T14236] FAULT_INJECTION: forcing a failure. [ 454.400104][T14236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.406407][T14236] CPU: 1 UID: 0 PID: 14236 Comm: syz.0.2569 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 454.410734][T14236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 454.414855][T14236] Call Trace: [ 454.416267][T14236] [ 454.417556][T14236] dump_stack_lvl+0x16c/0x1f0 [ 454.419468][T14236] should_fail_ex+0x497/0x5b0 [ 454.421338][T14236] _copy_from_user+0x30/0xf0 [ 454.422910][T14236] __sys_bpf+0x21c/0x4a20 [ 454.424489][T14236] ? ksys_write+0x21c/0x260 [ 454.426220][T14236] ? reacquire_held_locks+0x440/0x4c0 [ 454.428481][T14236] ? __pfx___sys_bpf+0x10/0x10 [ 454.430501][T14236] ? vfs_write+0x14d/0x1140 [ 454.432376][T14236] ? __mutex_unlock_slowpath+0x164/0x650 [ 454.434687][T14236] ? lockdep_hardirqs_on+0x7c/0x110 [ 454.436998][T14236] ? fput+0x32/0x390 [ 454.438803][T14236] ? ksys_write+0x1ab/0x260 [ 454.440858][T14236] ? __pfx_ksys_write+0x10/0x10 [ 454.443065][T14236] __x64_sys_bpf+0x78/0xc0 [ 454.445076][T14236] ? lockdep_hardirqs_on+0x7c/0x110 [ 454.447423][T14236] do_syscall_64+0xcd/0x250 [ 454.449464][T14236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.452105][T14236] RIP: 0033:0x7fc8f6d779f9 [ 454.454130][T14236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.461633][T14236] RSP: 002b:00007fc8f7baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 454.464575][T14236] RAX: ffffffffffffffda RBX: 00007fc8f6f06058 RCX: 00007fc8f6d779f9 [ 454.467286][T14236] RDX: 000000000000003c RSI: 00000000200002c0 RDI: 000000000000001c [ 454.469944][T14236] RBP: 00007fc8f7baf090 R08: 0000000000000000 R09: 0000000000000000 [ 454.472628][T14236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.475764][T14236] R13: 0000000000000000 R14: 00007fc8f6f06058 R15: 00007ffd839f0848 [ 454.479122][T14236] [ 454.481081][ C1] hpet: Lost 4 RTC interrupts [ 455.338685][T14256] xt_l2tp: wrong L2TP version: 0 [ 455.748628][T14259] CIFS mount error: No usable UNC path provided in device string! [ 455.748628][T14259] [ 455.755525][T14259] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 455.906284][T14268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.984539][ T39] audit: type=1400 audit(1723048427.602:3471): avc: denied { setopt } for pid=14267 comm="syz.3.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 456.807206][ T39] audit: type=1400 audit(1723048428.422:3472): avc: denied { connect } for pid=14284 comm="syz.2.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 457.105445][ T39] audit: type=1326 audit(1723048428.722:3473): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.2584" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6628b779f9 code=0x0 [ 457.623320][T12109] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 457.678102][T14302] xt_l2tp: wrong L2TP version: 0 [ 457.802781][T12109] usb 8-1: Using ep0 maxpacket: 32 [ 457.810479][T12109] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 457.818633][T12109] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 457.822267][T12109] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 457.826659][T12109] usb 8-1: Product: syz [ 457.828284][T12109] usb 8-1: Manufacturer: syz [ 457.829898][T12109] usb 8-1: SerialNumber: syz [ 457.844197][T12109] usb 8-1: config 0 descriptor?? [ 457.856202][T14300] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 458.126210][T14300] FAULT_INJECTION: forcing a failure. [ 458.126210][T14300] name failslab, interval 1, probability 0, space 0, times 0 [ 458.130775][T14300] CPU: 0 UID: 0 PID: 14300 Comm: syz.3.2586 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 458.134541][T14300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 458.138342][T14300] Call Trace: [ 458.139551][T14300] [ 458.140616][T14300] dump_stack_lvl+0x16c/0x1f0 [ 458.142387][T14300] should_fail_ex+0x497/0x5b0 [ 458.144065][T14300] ? fs_reclaim_acquire+0xae/0x160 [ 458.145836][T14300] should_failslab+0xc2/0x120 [ 458.147536][T14300] __kmalloc_noprof+0xcb/0x400 [ 458.149276][T14300] ? d_absolute_path+0x137/0x1b0 [ 458.151039][T14300] tomoyo_encode2+0x100/0x3e0 [ 458.152725][T14300] tomoyo_encode+0x29/0x50 [ 458.154310][T14300] tomoyo_realpath_from_path+0x19d/0x720 [ 458.156225][T14300] tomoyo_path_number_perm+0x245/0x590 [ 458.158104][T14300] ? tomoyo_path_number_perm+0x232/0x590 [ 458.160069][T14300] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 458.162202][T14300] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 458.164264][T14300] ? __fget_files+0x256/0x400 [ 458.165971][T14300] security_file_ioctl+0x75/0xc0 [ 458.167778][T14300] __x64_sys_ioctl+0xbb/0x220 [ 458.169387][T14300] do_syscall_64+0xcd/0x250 [ 458.170998][T14300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.173042][T14300] RIP: 0033:0x7f7bb07779f9 [ 458.174573][T14300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.181268][T14300] RSP: 002b:00007f7bb146b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.184158][T14300] RAX: ffffffffffffffda RBX: 00007f7bb0906058 RCX: 00007f7bb07779f9 [ 458.186867][T14300] RDX: 0000000020000700 RSI: 00000000c0487c04 RDI: 000000000000000a [ 458.189821][T14300] RBP: 00007f7bb146b090 R08: 0000000000000000 R09: 0000000000000000 [ 458.192496][T14300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.195823][T14300] R13: 0000000000000000 R14: 00007f7bb0906058 R15: 00007fffe4096958 [ 458.199177][T14300] [ 458.200659][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.203495][T14300] ERROR: Out of memory at tomoyo_realpath_from_path. [ 458.441746][ T53] block nbd1: Possible stuck request ffff8880220b8000: control (read@0,4096B). Runtime 30 seconds [ 459.678441][ T39] audit: type=1400 audit(1723048431.292:3474): avc: denied { ioctl } for pid=14315 comm="syz.0.2591" path="socket:[59438]" dev="sockfs" ino=59438 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 459.686809][T14317] IPVS: sync thread started: state = BACKUP, mcast_ifn = gretap0, syncid = 4, id = 0 [ 460.031910][T14327] netlink: 'syz.0.2595': attribute type 12 has an invalid length. [ 460.406135][ T830] usb 8-1: USB disconnect, device number 18 [ 460.477243][ T5332] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 460.482030][ T5332] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 460.486649][ T5332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 460.490212][ T5332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 460.494150][ T5332] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 460.496886][ T5332] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 460.670714][T14332] chnl_net:caif_netlink_parms(): no params data found [ 460.897040][T14332] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.900371][T14332] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.906198][T14332] bridge_slave_0: entered allmulticast mode [ 460.909231][T14332] bridge_slave_0: entered promiscuous mode [ 460.913262][T14332] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.917243][T14332] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.919712][T14332] bridge_slave_1: entered allmulticast mode [ 460.922480][T14332] bridge_slave_1: entered promiscuous mode [ 460.969726][T14332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.975118][T14332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.035458][T14332] team0: Port device team_slave_0 added [ 461.042326][T14332] team0: Port device team_slave_1 added [ 461.092065][T14332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.096366][T14332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.105908][T14332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.110489][T14332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.113880][T14332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.123626][T14332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.174982][T14332] hsr_slave_0: entered promiscuous mode [ 461.179033][T14332] hsr_slave_1: entered promiscuous mode [ 461.181614][T14332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.185368][T14332] Cannot create hsr debugfs directory [ 461.342289][T14357] FAULT_INJECTION: forcing a failure. [ 461.342289][T14357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.344728][T14332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.348668][T14357] CPU: 2 UID: 0 PID: 14357 Comm: syz.3.2601 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 461.355773][T14357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 461.359415][T14357] Call Trace: [ 461.360547][T14357] [ 461.361803][T14357] dump_stack_lvl+0x16c/0x1f0 [ 461.363664][T14357] should_fail_ex+0x497/0x5b0 [ 461.365578][T14357] _copy_from_iter+0x2a1/0x1150 [ 461.367532][T14357] ? __alloc_skb+0x1fe/0x380 [ 461.369186][T14357] ? __pfx__copy_from_iter+0x10/0x10 [ 461.371185][T14357] ? __virt_addr_valid+0x5e/0x590 [ 461.373021][T14357] ? __phys_addr_symbol+0x30/0x80 [ 461.375034][T14357] ? __check_object_size+0x497/0x720 [ 461.377045][T14357] netlink_sendmsg+0x813/0xd70 [ 461.378743][T14357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.380617][T14357] ? __import_iovec+0x1fd/0x6e0 [ 461.382455][T14357] ____sys_sendmsg+0xab5/0xc90 [ 461.384211][T14357] ? copy_msghdr_from_user+0x10b/0x160 [ 461.386224][T14357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.388490][T14357] ? find_held_lock+0x2d/0x110 [ 461.390326][T14357] ? __pfx___lock_acquire+0x10/0x10 [ 461.392485][T14357] ___sys_sendmsg+0x135/0x1e0 [ 461.394142][T14357] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.396080][T14357] ? ksys_write+0x21c/0x260 [ 461.397673][T14357] ? __fget_light+0x173/0x210 [ 461.399399][T14357] __sys_sendmsg+0x117/0x1f0 [ 461.401018][T14357] ? __pfx___sys_sendmsg+0x10/0x10 [ 461.402885][T14357] do_syscall_64+0xcd/0x250 [ 461.404593][T14357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.406750][T14357] RIP: 0033:0x7f7bb07779f9 [ 461.408594][T14357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.415986][T14357] RSP: 002b:00007f7bb148c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.419067][T14357] RAX: ffffffffffffffda RBX: 00007f7bb0905f80 RCX: 00007f7bb07779f9 [ 461.421995][T14357] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 461.424951][T14357] RBP: 00007f7bb148c090 R08: 0000000000000000 R09: 0000000000000000 [ 461.427993][T14357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.431086][T14357] R13: 0000000000000000 R14: 00007f7bb0905f80 R15: 00007fffe4096958 [ 461.434186][T14357] [ 461.572550][T14332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.682841][ T39] audit: type=1400 audit(1723048433.292:3475): avc: denied { shutdown } for pid=14362 comm="syz.3.2604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 461.688419][T14332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.797989][T14332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.957630][T14374] ptrace attach of "/syz-executor exec"[13383] was attempted by "/syz-executor exec"[14374] [ 461.981277][T14332] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 461.989254][T14332] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 462.000103][T14332] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 462.008424][T14332] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 462.135724][T14332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.168055][T14332] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.183001][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.185567][ T5371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.206273][ T831] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.209461][ T831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.328630][T14332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.508683][ T39] audit: type=1400 audit(1723048434.122:3476): avc: denied { bind } for pid=14376 comm="syz.3.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 462.514705][T14378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.529523][T14332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.540400][ T4761] Bluetooth: hci0: ACL packet for unknown connection handle 1993 [ 462.553226][ T39] audit: type=1400 audit(1723048434.162:3477): avc: denied { getopt } for pid=14376 comm="syz.3.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 462.577491][T14332] veth0_vlan: entered promiscuous mode [ 462.586660][ T4761] Bluetooth: hci5: command tx timeout [ 462.587476][T14332] veth1_vlan: entered promiscuous mode [ 462.618227][T14332] veth0_macvtap: entered promiscuous mode [ 462.627055][T14332] veth1_macvtap: entered promiscuous mode [ 462.649474][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.654842][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.659935][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.665800][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.669844][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.674922][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.679172][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.685658][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.689830][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.693711][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.697831][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.702245][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.709197][T14332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.729325][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.734590][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.738386][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.742589][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.747386][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.751714][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.756091][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.761113][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.765628][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.769909][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.773569][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.777128][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.782649][T14332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.790090][T14332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.793975][T14332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.797207][T14332] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.800345][T14332] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.874281][T12802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.877251][T12802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.903521][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.907693][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.957690][T14386] xt_l2tp: wrong L2TP version: 0 [ 463.534655][T14398] Process accounting resumed [ 463.610191][T14400] FAULT_INJECTION: forcing a failure. [ 463.610191][T14400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.616290][T14400] CPU: 0 UID: 0 PID: 14400 Comm: syz.1.2614 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 463.621554][T14400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 463.626072][T14400] Call Trace: [ 463.627435][T14400] [ 463.628558][T14400] dump_stack_lvl+0x16c/0x1f0 [ 463.630643][T14400] should_fail_ex+0x497/0x5b0 [ 463.632700][T14400] _copy_from_iter+0x2a1/0x1150 [ 463.634713][T14400] ? __alloc_skb+0x1fe/0x380 [ 463.636778][T14400] ? __pfx__copy_from_iter+0x10/0x10 [ 463.638890][T14400] ? __virt_addr_valid+0x5e/0x590 [ 463.640790][T14400] ? __phys_addr_symbol+0x30/0x80 [ 463.642473][T14400] ? __check_object_size+0x497/0x720 [ 463.644385][T14400] netlink_sendmsg+0x813/0xd70 [ 463.646284][T14400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.648646][T14400] ? __import_iovec+0x1fd/0x6e0 [ 463.650929][T14400] ____sys_sendmsg+0xab5/0xc90 [ 463.653079][T14400] ? copy_msghdr_from_user+0x10b/0x160 [ 463.655514][T14400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.657821][T14400] ? find_held_lock+0x2d/0x110 [ 463.659891][T14400] ? __pfx___lock_acquire+0x10/0x10 [ 463.661702][T14400] ___sys_sendmsg+0x135/0x1e0 [ 463.663266][T14400] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.665339][T14400] ? ksys_write+0x21c/0x260 [ 463.666965][T14400] ? __fget_light+0x173/0x210 [ 463.668633][T14400] __sys_sendmsg+0x117/0x1f0 [ 463.670223][T14400] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.672272][T14400] do_syscall_64+0xcd/0x250 [ 463.674265][T14400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.676498][T14400] RIP: 0033:0x7f326b3779f9 [ 463.678478][T14400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.686916][T14400] RSP: 002b:00007f326c0a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.690496][T14400] RAX: ffffffffffffffda RBX: 00007f326b505f80 RCX: 00007f326b3779f9 [ 463.693947][T14400] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 463.697215][T14400] RBP: 00007f326c0a0090 R08: 0000000000000000 R09: 0000000000000000 [ 463.700071][T14400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.702618][T14400] R13: 0000000000000000 R14: 00007f326b505f80 R15: 00007ffcbfb857b8 [ 463.705783][T14400] [ 463.707149][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.515513][T14417] kvm: MWAIT instruction emulated as NOP! [ 464.673143][ T4761] Bluetooth: hci5: command tx timeout [ 465.104097][T14436] ptrace attach of "/syz-executor exec"[14332] was attempted by "/syz-executor exec"[14436] [ 465.535870][T14439] Bluetooth: MGMT ver 1.23 [ 466.756356][ T4761] Bluetooth: hci5: command tx timeout [ 467.186423][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2632'. [ 468.166900][T14492] ptrace attach of "/syz-executor exec"[11669] was attempted by "/syz-executor exec"[14492] [ 468.305453][T14498] bridge0: entered promiscuous mode [ 468.414097][ T39] audit: type=1400 audit(1723048440.022:3478): avc: denied { write } for pid=14493 comm="syz.3.2640" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 468.426614][T14494] block device autoloading is deprecated and will be removed. [ 468.507792][T14493] bridge0: left promiscuous mode [ 468.829777][ T4761] Bluetooth: hci5: command tx timeout [ 469.777866][T14524] syz.3.2647[14524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.778088][T14524] syz.3.2647[14524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.854853][T14524] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2647'. [ 469.954321][T14524] nbd3: detected capacity change from 0 to 22 [ 469.963969][T14526] block nbd3: shutting down sockets [ 469.969152][ C0] blk_print_req_error: 25 callbacks suppressed [ 469.969166][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 469.975716][ C0] buffer_io_error: 25 callbacks suppressed [ 469.975726][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 469.983612][ T1132] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 469.987181][ T1132] Buffer I/O error on dev nbd3, logical block 0, async page read [ 469.991565][ T9084] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 469.996159][ T9084] Buffer I/O error on dev nbd3, logical block 0, async page read [ 469.999630][ T9084] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 470.003562][ T9084] Buffer I/O error on dev nbd3, logical block 0, async page read [ 470.007293][ T9084] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 470.011590][ T9084] Buffer I/O error on dev nbd3, logical block 0, async page read [ 470.015382][ T9084] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 470.019612][ T9084] Buffer I/O error on dev nbd3, logical block 0, async page read [ 470.023710][ T9084] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 470.028104][ T9084] Buffer I/O error on dev nbd3, logical block 0, async page read [ 470.033617][ T9084] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 470.038283][ T9084] Buffer I/O error on dev nbd3, logical block 0, async page read [ 470.042373][ T9084] ldm_validate_partition_table(): Disk read failed. [ 470.045475][ T9084] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 470.049810][ T9084] Buffer I/O error on dev nbd3, logical block 0, async page read [ 470.053914][ T9084] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 470.058290][ T9084] Buffer I/O error on dev nbd3, logical block 0, async page read [ 470.062365][ T9084] Dev nbd3: unable to read RDB block 0 [ 470.065504][ T9084] nbd3: unable to read partition table [ 470.069470][ T9084] nbd3: partition table beyond EOD, truncated [ 470.153872][T14524] ldm_validate_partition_table(): Disk read failed. [ 470.156911][T14524] Dev nbd3: unable to read RDB block 0 [ 470.159661][T14524] nbd3: unable to read partition table [ 470.161966][T14524] nbd3: partition table beyond EOD, truncated [ 470.168096][ T9084] ldm_validate_partition_table(): Disk read failed. [ 470.170805][ T9084] Dev nbd3: unable to read RDB block 0 [ 470.173792][ T9084] nbd3: unable to read partition table [ 470.176457][ T9084] nbd3: partition table beyond EOD, truncated [ 470.344664][ T4761] Bluetooth: hci0: command tx timeout [ 471.180175][T14552] xt_l2tp: wrong L2TP version: 0 [ 472.263534][ T4761] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 472.267771][ T4761] Bluetooth: hci0: Injecting HCI hardware error event [ 472.273434][ T4761] Bluetooth: hci0: hardware error 0x00 [ 472.841337][T14561] xt_l2tp: wrong L2TP version: 0 [ 472.860829][T14561] tmpfs: Unknown parameter 'usrquota' [ 473.598632][ T39] audit: type=1400 audit(1723048445.212:3479): avc: denied { map } for pid=14565 comm="syz.2.2658" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 474.343452][ T4761] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 475.598733][T14578] CIFS mount error: No usable UNC path provided in device string! [ 475.598733][T14578] [ 475.603882][T14578] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 476.113665][T14585] xt_l2tp: wrong L2TP version: 0 [ 476.638904][T14588] syz.2.2664[14588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.639102][T14588] syz.2.2664[14588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.813321][T14588] nbd2: detected capacity change from 0 to 22 [ 476.821193][T14590] block nbd2: shutting down sockets [ 476.822085][ T9084] blk_print_req_error: 40 callbacks suppressed [ 476.822102][ T9084] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.829292][ T9084] buffer_io_error: 40 callbacks suppressed [ 476.829333][ T9084] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.834476][ T1132] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.837713][ T1132] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.841155][ T9084] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.844606][ T9084] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.847271][ T9084] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.851489][ T9084] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.855953][ T9084] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.859716][ T9084] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.862939][ T9084] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.866353][ T9084] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.869431][ T9084] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.873265][ T9084] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.876521][ T9084] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.880031][ T9084] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.883363][ T9084] ldm_validate_partition_table(): Disk read failed. [ 476.885824][ T9084] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.889390][ T9084] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.893203][ T9084] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.896633][ T9084] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.899799][ T9084] Dev nbd2: unable to read RDB block 0 [ 476.902231][ T9084] nbd2: unable to read partition table [ 476.904780][ T9084] nbd2: partition table beyond EOD, truncated [ 476.907941][T14588] ldm_validate_partition_table(): Disk read failed. [ 476.910765][T14588] Dev nbd2: unable to read RDB block 0 [ 476.915190][T14588] nbd2: unable to read partition table [ 476.917817][T14588] nbd2: partition table beyond EOD, truncated [ 476.924068][ T9084] ldm_validate_partition_table(): Disk read failed. [ 476.927086][ T9084] Dev nbd2: unable to read RDB block 0 [ 476.929574][ T9084] nbd2: unable to read partition table [ 476.932090][ T9084] nbd2: partition table beyond EOD, truncated [ 480.109118][T14615] netlink: 6204 bytes leftover after parsing attributes in process `syz.2.2670'. [ 480.113194][T14615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2670'. [ 480.116901][T14615] netlink: 6204 bytes leftover after parsing attributes in process `syz.2.2670'. [ 480.122634][T14615] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2670'. [ 480.134385][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2670'. [ 480.245915][ T5332] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 480.249393][ T5332] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 480.255049][ T5332] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 480.259986][ T5332] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 480.264105][ T5332] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 480.267232][ T5332] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 480.420861][T14618] chnl_net:caif_netlink_parms(): no params data found [ 480.515224][T14618] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.518514][T14618] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.520998][T14618] bridge_slave_0: entered allmulticast mode [ 480.523933][T14618] bridge_slave_0: entered promiscuous mode [ 480.527969][T14618] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.531034][T14618] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.534220][T14618] bridge_slave_1: entered allmulticast mode [ 480.538811][T14618] bridge_slave_1: entered promiscuous mode [ 480.598569][T14618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.607164][T14618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.661738][T14618] team0: Port device team_slave_0 added [ 480.669401][T14618] team0: Port device team_slave_1 added [ 480.710851][T14618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.714164][T14618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.723279][T14618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.729176][T14618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.731873][T14618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.742104][T14618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.809628][T14618] hsr_slave_0: entered promiscuous mode [ 480.814085][T14618] hsr_slave_1: entered promiscuous mode [ 480.817518][T14618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.820358][T14618] Cannot create hsr debugfs directory [ 480.992207][T14618] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.053850][T14487] block nbd0: shutting down sockets [ 481.131780][T14618] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.274745][T14618] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.316376][ T5332] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 481.324244][ T5332] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 481.328829][ T5332] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 481.332729][ T5332] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 481.342557][ T5332] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 481.346359][ T5332] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 481.385657][T14618] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.521404][ T4761] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 481.528722][ T4761] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 481.533372][ T4761] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 481.538826][ T4761] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 481.543749][ T4761] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 481.547345][ T4761] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 481.638006][T14618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 481.662074][T14618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 481.672538][T14618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 481.694767][T14618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 481.700386][T14632] chnl_net:caif_netlink_parms(): no params data found [ 481.835492][T14647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2676'. [ 481.898365][T14632] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.901858][T14632] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.908422][T14632] bridge_slave_0: entered allmulticast mode [ 481.911884][T14632] bridge_slave_0: entered promiscuous mode [ 481.920989][T14632] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.925478][T14632] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.928584][T14632] bridge_slave_1: entered allmulticast mode [ 481.932507][T14632] bridge_slave_1: entered promiscuous mode [ 482.008883][T14632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.028324][T14632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.150234][T14632] team0: Port device team_slave_0 added [ 482.159982][T14632] team0: Port device team_slave_1 added [ 482.246547][T14632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.249567][T14632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.263464][T14632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.287214][T14639] chnl_net:caif_netlink_parms(): no params data found [ 482.307988][T14632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.311049][T14632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.322326][ C1] hpet: Lost 1 RTC interrupts [ 482.330203][T14632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.353377][ T5332] Bluetooth: hci6: command tx timeout [ 482.403771][T14618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.571823][T14639] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.575934][T14639] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.579292][T14639] bridge_slave_0: entered allmulticast mode [ 482.583649][T14639] bridge_slave_0: entered promiscuous mode [ 482.594180][T14632] hsr_slave_0: entered promiscuous mode [ 482.597592][T14632] hsr_slave_1: entered promiscuous mode [ 482.600758][T14632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.604964][T14632] Cannot create hsr debugfs directory [ 482.670058][T14618] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.674593][T14639] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.677500][T14639] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.680607][T14639] bridge_slave_1: entered allmulticast mode [ 482.684313][T14639] bridge_slave_1: entered promiscuous mode [ 482.849967][T14639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.866123][T14639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.878145][ T831] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.881390][ T831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.971535][T14639] team0: Port device team_slave_0 added [ 482.980466][T14639] team0: Port device team_slave_1 added [ 483.041969][ T830] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.045257][ T830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.084304][T14639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.086930][T14639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.098496][T14639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.107257][T14639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.110004][T14639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.120844][T14639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.191648][T14632] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.293856][T14639] hsr_slave_0: entered promiscuous mode [ 483.298238][T14639] hsr_slave_1: entered promiscuous mode [ 483.301565][T14639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.306042][T14639] Cannot create hsr debugfs directory [ 483.330530][T14632] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.383995][ T5332] Bluetooth: hci7: command tx timeout [ 483.434600][T14632] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.540544][T14632] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.633324][ T5332] Bluetooth: hci8: command tx timeout [ 483.648356][T14618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.698036][T14639] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.738780][T14618] veth0_vlan: entered promiscuous mode [ 483.746984][T14618] veth1_vlan: entered promiscuous mode [ 483.780744][T14639] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.805825][T14618] veth0_macvtap: entered promiscuous mode [ 483.812084][T14618] veth1_macvtap: entered promiscuous mode [ 483.823941][T14618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.828501][T14618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.832665][T14618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.837240][T14618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.841398][T14618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.846826][T14618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.850946][T14618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.859750][T14618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.863822][T14618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.868828][T14618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.873038][T14618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.877505][T14618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.881370][T14618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.885745][T14618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.891015][T14618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.925115][T14639] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.946526][T14618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.950972][T14618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.956586][T14618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.961956][T14618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.967324][T14618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.972008][T14618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.979154][T14618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.984679][T14618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.989107][T14618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.995156][T14618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.999436][T14618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.004448][T14618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.009193][T14618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.014093][T14618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.019926][T14618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.032478][T14618] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.037257][T14618] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.041218][T14618] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.045253][T14618] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.075779][T14639] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.166891][T12812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.172884][T12812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.190845][T12812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.196584][T12812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.252768][T14632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 484.259242][T14632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 484.267195][T14632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 484.274001][T14632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 484.341280][T14639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 484.353785][T14639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 484.369933][T14639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 484.380412][T14639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 484.422883][ T5332] Bluetooth: hci6: command tx timeout [ 484.453886][ T39] audit: type=1400 audit(1723048456.072:3480): avc: denied { ioctl } for pid=14674 comm="syz.1.2669" path="/0/file0/file0" dev="9p" ino=36701591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 484.480328][T14632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.517530][T14632] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.538925][ T5372] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.541560][ T5372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.559015][ T5372] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.561413][ T5372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.589994][T14639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.618306][T14632] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 484.621789][T14632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.642215][T14639] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.658835][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.661455][ T5390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.667131][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.669742][ T5390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.732030][T14639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.824805][T14632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.893599][T14639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.911095][T14632] veth0_vlan: entered promiscuous mode [ 484.945149][T14632] veth1_vlan: entered promiscuous mode [ 484.996603][T14639] veth0_vlan: entered promiscuous mode [ 485.011277][T14639] veth1_vlan: entered promiscuous mode [ 485.021783][T14632] veth0_macvtap: entered promiscuous mode [ 485.027290][T14632] veth1_macvtap: entered promiscuous mode [ 485.054018][T14639] veth0_macvtap: entered promiscuous mode [ 485.060214][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.065317][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.068984][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.073366][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.076729][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.080716][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.085814][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.090339][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.094437][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.098362][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.102317][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.106566][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.110510][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.115196][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.119268][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.123419][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.128768][T14632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.137822][T14639] veth1_macvtap: entered promiscuous mode [ 485.171774][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.176639][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.180290][ C1] hpet: Lost 1 RTC interrupts [ 485.180920][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.191609][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.195818][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.199959][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.204048][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.208493][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.214163][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.219152][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.227307][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.233345][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.237504][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.241582][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.258412][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.263687][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.270522][T14632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.283417][T14632] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.288426][T14632] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.291933][T14632] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.297898][T14632] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.324383][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.328496][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.332244][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.336617][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.340769][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.346957][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.351004][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.356086][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.360323][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.364884][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.369492][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.373998][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.378044][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.382423][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.391065][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.402894][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.407231][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.411883][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.419213][T14639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.436067][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.440535][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.445731][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.450201][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.454702][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.459416][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.464999][ T5332] Bluetooth: hci7: command tx timeout [ 485.469315][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.474152][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.478584][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.483810][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.488244][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.494188][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.498594][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.504433][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.508774][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.513631][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.517956][T14639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.522485][T14639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.530997][T14639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.546969][T14639] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.550556][T14639] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.555141][T14639] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.559478][T14639] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.634465][T12799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.637612][T12799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.705256][ T5332] Bluetooth: hci8: command tx timeout [ 485.709691][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.714115][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.727620][T12815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.728706][T14700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.739315][T12815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.740420][T14700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.763557][T14700] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2682'. [ 485.767325][T12802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.774019][T12802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.846133][ T39] audit: type=1400 audit(1723048457.462:3481): avc: denied { getopt } for pid=14699 comm="syz.2.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 485.865098][ T5332] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 485.867711][ T5332] Bluetooth: Wrong link type (-22) [ 485.977090][ T39] audit: type=1400 audit(1723048457.592:3482): avc: denied { map } for pid=14706 comm="syz.3.2674" path="socket:[62987]" dev="sockfs" ino=62987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 486.056105][T14714] xt_l2tp: wrong L2TP version: 0 [ 486.192796][T14717] ptrace attach of "/syz-executor exec"[14632] was attempted by "/syz-executor exec"[14717] [ 486.503465][ T5332] Bluetooth: hci6: command tx timeout [ 486.687989][T14724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.691481][T14724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.238196][T14733] xt_l2tp: wrong L2TP version: 0 [ 487.253846][ T39] audit: type=1400 audit(1723048458.852:3483): avc: denied { mount } for pid=14728 comm="syz.1.2691" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 487.286283][T14734] virtio-fs: tag <(null)> not found [ 487.342958][T14734] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 487.345542][T14734] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 487.352628][T14734] vhci_hcd vhci_hcd.0: Device attached [ 487.553041][ T5332] Bluetooth: hci7: command tx timeout [ 487.553536][ T58] vhci_hcd: vhci_device speed not set [ 487.641182][ T58] usb 15-1: new high-speed USB device number 3 using vhci_hcd [ 487.728248][T14735] vhci_hcd: connection reset by peer [ 487.732998][T12812] vhci_hcd: stop threads [ 487.734839][T12812] vhci_hcd: release socket [ 487.737642][T12812] vhci_hcd: disconnect device [ 487.760175][T14740] bridge_slave_1: left allmulticast mode [ 487.762612][T14740] bridge_slave_1: left promiscuous mode [ 487.775175][T14740] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.788006][ T5332] Bluetooth: hci8: command tx timeout [ 487.817307][T14740] [ 487.818286][T14740] ====================================================== [ 487.821062][T14740] WARNING: possible circular locking dependency detected [ 487.823735][T14740] 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 Not tainted [ 487.827402][T14740] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 487.828403][ T39] audit: type=1400 audit(1723048459.442:3484): avc: denied { write } for pid=5277 comm="syz-executor" path="pipe:[3764]" dev="pipefs" ino=3764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 487.831051][T14740] syz.2.2693/14740 is trying to acquire lock: [ 487.831065][T14740] ffff88807ffdbce0 (&pgdat->kswapd_wait){....}-{2:2}, at: __wake_up+0x1c/0x60 [ 487.844483][T14740] [ 487.844483][T14740] but task is already holding lock: [ 487.847481][T14740] ffff888062eca9f8 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc8/0xe00 [ 487.851457][T14740] [ 487.851457][T14740] which lock already depends on the new lock. [ 487.851457][T14740] [ 487.856047][T14740] [ 487.856047][T14740] the existing dependency chain (in reverse order) is: [ 487.860060][T14740] [ 487.860060][T14740] -> #3 (&trie->lock){....}-{2:2}: [ 487.862687][T14740] _raw_spin_lock_irqsave+0x3a/0x60 [ 487.864671][T14740] trie_delete_elem+0xb0/0x820 [ 487.866620][T14740] ___bpf_prog_run+0x3e51/0xabd0 [ 487.868576][T14740] __bpf_prog_run32+0xc1/0x100 [ 487.871083][T14740] bpf_trace_run4+0x245/0x5a0 [ 487.873103][T14740] __bpf_trace_sched_switch+0x13e/0x190 [ 487.875297][T14740] __traceiter_sched_switch+0x6c/0xc0 [ 487.877454][T14740] __schedule+0x17cf/0x5490 [ 487.879568][T14740] schedule_idle+0x59/0x90 [ 487.881961][T14740] do_idle+0x287/0x3f0 [ 487.884210][T14740] cpu_startup_entry+0x4f/0x60 [ 487.886714][T14740] start_secondary+0x220/0x2b0 [ 487.888818][T14740] common_startup_64+0x13e/0x148 [ 487.890781][T14740] [ 487.890781][T14740] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 487.893371][T14740] _raw_spin_lock_nested+0x31/0x40 [ 487.895351][T14740] raw_spin_rq_lock_nested+0x29/0x130 [ 487.897469][T14740] task_fork_fair+0x73/0x250 [ 487.899340][T14740] sched_cgroup_fork+0x3cf/0x510 [ 487.901320][T14740] copy_process+0x43a1/0x8de0 [ 487.903267][T14740] kernel_clone+0xfd/0x980 [ 487.904976][T14740] user_mode_thread+0xb4/0xf0 [ 487.906859][T14740] rest_init+0x23/0x2b0 [ 487.908578][T14740] start_kernel+0x3df/0x4c0 [ 487.910946][T14740] x86_64_start_reservations+0x18/0x30 [ 487.913670][T14740] x86_64_start_kernel+0xb2/0xc0 [ 487.916090][T14740] common_startup_64+0x13e/0x148 [ 487.918510][T14740] [ 487.918510][T14740] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 487.921309][T14740] _raw_spin_lock_irqsave+0x3a/0x60 [ 487.923353][T14740] try_to_wake_up+0x9a/0x13e0 [ 487.925133][T14740] autoremove_wake_function+0x16/0x150 [ 487.927057][T14740] __wake_up_common+0x131/0x1e0 [ 487.928953][T14740] __wake_up+0x31/0x60 [ 487.930702][T14740] wakeup_kswapd+0x45e/0x640 [ 487.932477][T14740] get_page_from_freelist+0x9bb/0x2e50 [ 487.934642][T14740] __alloc_pages_noprof+0x22b/0x2460 [ 487.936603][T14740] alloc_pages_mpol_noprof+0x275/0x610 [ 487.938901][T14740] __vmalloc_node_range_noprof+0xa6a/0x1520 [ 487.941235][T14740] copy_process+0x2f3b/0x8de0 [ 487.943165][T14740] kernel_clone+0xfd/0x980 [ 487.944884][T14740] __do_sys_clone3+0x1f5/0x270 [ 487.947170][T14740] do_syscall_64+0xcd/0x250 [ 487.949495][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.952079][T14740] [ 487.952079][T14740] -> #0 (&pgdat->kswapd_wait){....}-{2:2}: [ 487.955466][T14740] __lock_acquire+0x24ed/0x3cb0 [ 487.957381][T14740] lock_acquire+0x1b1/0x560 [ 487.959276][T14740] _raw_spin_lock_irqsave+0x3a/0x60 [ 487.961845][T14740] __wake_up+0x1c/0x60 [ 487.964035][T14740] wakeup_kswapd+0x45e/0x640 [ 487.966154][T14740] get_page_from_freelist+0x9bb/0x2e50 [ 487.968445][T14740] __alloc_pages_noprof+0x22b/0x2460 [ 487.970765][T14740] ___kmalloc_large_node+0x7f/0x1a0 [ 487.972815][T14740] __kmalloc_large_node_noprof+0x1c/0x70 [ 487.975092][T14740] __kmalloc_node_noprof.cold+0x5/0x5f [ 487.977443][T14740] bpf_map_kmalloc_node+0x98/0x4a0 [ 487.979695][T14740] trie_update_elem+0x1ef/0xe00 [ 487.981786][T14740] bpf_map_update_value+0x2c1/0x6c0 [ 487.983751][T14740] map_update_elem+0x623/0x910 [ 487.985612][T14740] __sys_bpf+0x90c/0x4a20 [ 487.987608][T14740] __x64_sys_bpf+0x78/0xc0 [ 487.989396][T14740] do_syscall_64+0xcd/0x250 [ 487.991408][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.993770][T14740] [ 487.993770][T14740] other info that might help us debug this: [ 487.993770][T14740] [ 487.997761][T14740] Chain exists of: [ 487.997761][T14740] &pgdat->kswapd_wait --> &rq->__lock --> &trie->lock [ 487.997761][T14740] [ 488.002608][T14740] Possible unsafe locking scenario: [ 488.002608][T14740] [ 488.005432][T14740] CPU0 CPU1 [ 488.007453][T14740] ---- ---- [ 488.009604][T14740] lock(&trie->lock); [ 488.011381][T14740] lock(&rq->__lock); [ 488.014244][T14740] lock(&trie->lock); [ 488.017237][T14740] lock(&pgdat->kswapd_wait); [ 488.019375][T14740] [ 488.019375][T14740] *** DEADLOCK *** [ 488.019375][T14740] [ 488.022805][T14740] 2 locks held by syz.2.2693/14740: [ 488.025129][T14740] #0: ffffffff8ddb5ca0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x24b/0x6c0 [ 488.029420][T14740] #1: ffff888062eca9f8 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc8/0xe00 [ 488.033432][T14740] [ 488.033432][T14740] stack backtrace: [ 488.035976][T14740] CPU: 3 UID: 0 PID: 14740 Comm: syz.2.2693 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 488.040592][T14740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 488.045256][T14740] Call Trace: [ 488.046934][T14740] [ 488.048120][T14740] dump_stack_lvl+0x116/0x1f0 [ 488.049982][T14740] check_noncircular+0x31a/0x400 [ 488.051731][T14740] ? __pfx_check_noncircular+0x10/0x10 [ 488.054152][T14740] ? mark_lock+0xb5/0xc60 [ 488.055965][T14740] ? mark_lock+0xb5/0xc60 [ 488.057679][T14740] ? lockdep_lock+0xc6/0x200 [ 488.059541][T14740] ? __pfx_lockdep_lock+0x10/0x10 [ 488.061349][T14740] ? __read_once_word_nocheck+0x9/0x20 [ 488.063797][T14740] ? unwind_next_frame+0x51/0x23a0 [ 488.065586][T14740] __lock_acquire+0x24ed/0x3cb0 [ 488.067741][T14740] ? __pfx___lock_acquire+0x10/0x10 [ 488.069883][T14740] ? set_pfnblock_flags_mask+0x290/0x480 [ 488.072420][T14740] ? __mod_zone_page_state+0xcc/0x1a0 [ 488.074884][T14740] lock_acquire+0x1b1/0x560 [ 488.076916][T14740] ? __wake_up+0x1c/0x60 [ 488.078923][T14740] ? __pfx_lock_acquire+0x10/0x10 [ 488.080674][T14740] ? rcu_is_watching+0x12/0xc0 [ 488.082675][T14740] ? trace_mm_page_alloc_zone_locked+0x123/0x190 [ 488.085116][T14740] ? find_held_lock+0x2d/0x110 [ 488.087066][T14740] ? __zone_watermark_ok+0x252/0x4d0 [ 488.089420][T14740] _raw_spin_lock_irqsave+0x3a/0x60 [ 488.091640][T14740] ? __wake_up+0x1c/0x60 [ 488.093495][T14740] __wake_up+0x1c/0x60 [ 488.095267][T14740] wakeup_kswapd+0x45e/0x640 [ 488.097289][T14740] get_page_from_freelist+0x9bb/0x2e50 [ 488.099339][T14740] ? __pfx_get_page_from_freelist+0x10/0x10 [ 488.101420][T14740] ? prepare_alloc_pages.constprop.0+0x412/0x560 [ 488.104183][T14740] ? __pfx_mark_lock+0x10/0x10 [ 488.106218][T14740] __alloc_pages_noprof+0x22b/0x2460 [ 488.108481][T14740] ? hlock_class+0x4e/0x130 [ 488.110323][T14740] ? __lock_acquire+0xbdd/0x3cb0 [ 488.112530][T14740] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 488.115065][T14740] ? __pfx___lock_acquire+0x10/0x10 [ 488.117258][T14740] ? lock_acquire+0x1b1/0x560 [ 488.119152][T14740] ? find_held_lock+0x2d/0x110 [ 488.121077][T14740] ___kmalloc_large_node+0x7f/0x1a0 [ 488.123387][T14740] __kmalloc_large_node_noprof+0x1c/0x70 [ 488.125785][T14740] __kmalloc_node_noprof.cold+0x5/0x5f [ 488.128170][T14740] ? bpf_map_kmalloc_node+0x98/0x4a0 [ 488.130559][T14740] bpf_map_kmalloc_node+0x98/0x4a0 [ 488.132745][T14740] trie_update_elem+0x1ef/0xe00 [ 488.134781][T14740] bpf_map_update_value+0x2c1/0x6c0 [ 488.136648][T14740] map_update_elem+0x623/0x910 [ 488.138614][T14740] ? __pfx_map_update_elem+0x10/0x10 [ 488.140882][T14740] ? selinux_bpf+0xee/0x130 [ 488.143008][T14740] __sys_bpf+0x90c/0x4a20 [ 488.144783][T14740] ? __pfx___sys_bpf+0x10/0x10 [ 488.146953][T14740] ? do_futex+0x123/0x350 [ 488.148799][T14740] ? __pfx_do_futex+0x10/0x10 [ 488.150800][T14740] ? xfd_validate_state+0x5d/0x180 [ 488.152968][T14740] __x64_sys_bpf+0x78/0xc0 [ 488.154572][T14740] ? lockdep_hardirqs_on+0x7c/0x110 [ 488.156434][T14740] do_syscall_64+0xcd/0x250 [ 488.158163][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.160498][T14740] RIP: 0033:0x7f6628b779f9 [ 488.162472][T14740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.171047][T14740] RSP: 002b:00007f66299b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 488.174344][T14740] RAX: ffffffffffffffda RBX: 00007f6628d05f80 RCX: 00007f6628b779f9 [ 488.177454][T14740] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000002 [ 488.180706][T14740] RBP: 00007f6628be58ee R08: 0000000000000000 R09: 0000000000000000 [ 488.184210][T14740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.187664][T14740] R13: 0000000000000000 R14: 00007f6628d05f80 R15: 00007ffd8ed7a8c8 [ 488.191364][T14740] [ 488.246332][ T5372] usb 7-1: USB disconnect, device number 11 [ 488.506150][ T53] block nbd1: Possible stuck request ffff8880220b8000: control (read@0,4096B). Runtime 60 seconds [ 488.840870][T12815] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.957877][T12815] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.067727][T12815] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.169885][T12815] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.255741][T12815] bridge_slave_0: left allmulticast mode [ 489.258963][T12815] bridge_slave_0: left promiscuous mode [ 489.261423][T12815] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.509320][T12815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.514332][T12815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.518424][T12815] bond0 (unregistering): Released all slaves [ 489.932235][T12815] hsr_slave_0: left promiscuous mode [ 489.934932][T12815] hsr_slave_1: left promiscuous mode [ 489.937889][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.941133][T12815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.945334][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.949112][T12815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.954742][T12815] veth1_macvtap: left promiscuous mode [ 489.957254][T12815] veth0_macvtap: left promiscuous mode [ 489.959523][T12815] veth1_vlan: left promiscuous mode [ 489.961888][T12815] veth0_vlan: left promiscuous mode [ 490.275281][T12815] team0 (unregistering): Port device team_slave_1 removed [ 490.340309][T12815] team0 (unregistering): Port device team_slave_0 removed [ 490.791338][ T39] audit: type=1400 audit(1723048462.402:3485): avc: denied { sys_chroot } for pid=14773 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 490.800959][ T39] audit: type=1400 audit(1723048462.402:3486): avc: denied { setgid } for pid=14773 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 490.810017][ T39] audit: type=1400 audit(1723048462.402:3487): avc: denied { setrlimit } for pid=14773 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 490.821907][T12815] IPVS: stop unused estimator thread 0... [ 490.935907][T12815] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.025775][T12815] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.100750][T12815] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.170712][T12815] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.312896][T12815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.370947][T12815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.428752][T12815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.490977][T12815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.588807][T12815] bridge_slave_1: left allmulticast mode [ 491.591034][T12815] bridge_slave_1: left promiscuous mode [ 491.594775][T12815] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.599611][T12815] bridge_slave_0: left allmulticast mode [ 491.602044][T12815] bridge_slave_0: left promiscuous mode [ 491.606892][T12815] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.612470][T12815] bridge_slave_1: left allmulticast mode [ 491.615216][T12815] bridge_slave_1: left promiscuous mode [ 491.617715][T12815] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.622403][T12815] bridge_slave_0: left allmulticast mode [ 491.625331][T12815] bridge_slave_0: left promiscuous mode [ 491.627836][T12815] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.969460][T12815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.975515][T12815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.981047][T12815] bond0 (unregistering): Released all slaves [ 491.994310][T12815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.000425][T12815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.007830][T12815] bond0 (unregistering): Released all slaves [ 492.492254][T12815] hsr_slave_0: left promiscuous mode [ 492.496095][T12815] hsr_slave_1: left promiscuous mode [ 492.498888][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.501649][T12815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.505372][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.508931][T12815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.516863][T12815] hsr_slave_0: left promiscuous mode [ 492.519809][T12815] hsr_slave_1: left promiscuous mode [ 492.523527][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.526842][T12815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.530607][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.533946][T12815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.540923][T12815] veth1_macvtap: left promiscuous mode [ 492.544768][T12815] veth0_macvtap: left promiscuous mode [ 492.546981][T12815] veth1_vlan: left promiscuous mode [ 492.549136][T12815] veth0_vlan: left promiscuous mode [ 492.552743][T12815] veth1_macvtap: left promiscuous mode [ 492.555055][T12815] veth0_macvtap: left promiscuous mode [ 492.557706][T12815] veth1_vlan: left promiscuous mode [ 492.559978][T12815] veth0_vlan: left promiscuous mode [ 492.743792][ T58] vhci_hcd: vhci_device speed not set [ 492.993758][ C1] hpet: Lost 1 RTC interrupts [ 493.050526][T12815] team0 (unregistering): Port device team_slave_1 removed [ 493.107888][T12815] team0 (unregistering): Port device team_slave_0 removed [ 493.589718][T12815] team0 (unregistering): Port device team_slave_1 removed [ 493.663121][T12815] team0 (unregistering): Port device team_slave_0 removed [ 494.762512][T12815] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.831161][T12815] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.891430][T12815] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.958815][T12815] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.064178][T12815] bridge_slave_1: left allmulticast mode [ 495.066993][T12815] bridge_slave_1: left promiscuous mode [ 495.069432][T12815] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.074494][T12815] bridge_slave_0: left allmulticast mode [ 495.076521][T12815] bridge_slave_0: left promiscuous mode [ 495.078824][T12815] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.259844][T12815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.265249][T12815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.270217][T12815] bond0 (unregistering): Released all slaves [ 495.591328][T12815] hsr_slave_0: left promiscuous mode [ 495.594356][T12815] hsr_slave_1: left promiscuous mode [ 495.597570][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.600762][T12815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.607978][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.611026][T12815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.616359][T12815] veth1_macvtap: left promiscuous mode [ 495.618516][T12815] veth0_macvtap: left promiscuous mode [ 495.620628][T12815] veth1_vlan: left promiscuous mode [ 495.626121][T12815] veth0_vlan: left promiscuous mode [ 495.971001][T12815] team0 (unregistering): Port device team_slave_1 removed [ 496.025976][T12815] team0 (unregistering): Port device team_slave_0 removed [ 496.401966][ C1] hpet: Lost 1 RTC interrupts VM DIAGNOSIS: 16:30:01 Registers: info registers vcpu 0 CPU#0 RAX=000000000099bbc4 RBX=0000000000000000 RCX=ffffffff8b11e719 RDX=ffffed100d606fda RSI=ffffffff8bb08480 RDI=ffffffff816263bc RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed100d606fd9 R10=ffff88806b037ecb R11=ffff888016e9e000 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff9012ce98 R15=0000000000000000 RIP=ffffffff8b11fb0f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000025016c64 CR3=0000000056190000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a093 ffffffff813255f8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813255f8 ffffffff8100a093 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a093 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46271e66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46271e66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46271e66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46271e66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46271e6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46271e6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 706f6f6c2f766564 2f0074616d726f66 2079726100040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554a4a490a534041 0a00514448574a43 055c57444b4c4705 4b524a4b4e4b5000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 92a23988bf078202 2a973b86c341c37f 794b7659400ae4e7 24f7530000000672 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 94de59fabe04f014 8634235d782409a6 67cee81fd0191d2d f4c9961c2b81a3c2 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 41cf9996c686c7c3 4aa988dea820713d 007c9a21ab30e258 ac30e93518829b3c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 679176927f87a83a 166e92e67cee20ae 5bffab1368c33672 2fbc92a23988bf07 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82022a973b86c341 c37f794b7659400a e4e724f753000000 067224646d5b6905 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000864a7c RBX=0000000000000001 RCX=ffffffff8b11e719 RDX=ffffed100d626fda RSI=ffffffff8bb08480 RDI=ffffffff816263bc RBP=ffffed10030d8910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d626fd9 R10=ffff88806b137ecb R11=0000000000000001 R12=0000000000000001 R13=ffff8880186c4880 R14=ffffffff9012ce98 R15=0000000000000000 RIP=ffffffff8b11fb0f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000025016c64 CR3=0000000055836000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd07ea720 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb28be66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb28be66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb28be66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb28be66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb28be6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb28be6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000005b1774 RBX=0000000000000002 RCX=ffffffff8b11e719 RDX=ffffed100d646fda RSI=ffffffff8bb08480 RDI=ffffffff816263bc RBP=ffffed10030db000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d646fd9 R10=ffff88806b237ecb R11=0000000000000001 R12=0000000000000002 R13=ffff8880186d8000 R14=ffffffff9012ce98 R15=0000000000000000 RIP=ffffffff8b11fb0f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000025016c64 CR3=0000000050c62000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde7c730d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46271e66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46271e66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46271e66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46271e66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46271e6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46271e6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ac ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000ac ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fe4425 RDI=ffffffff9519f6a0 RBP=ffffffff9519f660 RSP=ffffc90003f3edf0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000005b R14=ffffffff84fe43c0 R15=0000000000000000 RIP=ffffffff84fe444f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f66299b36c0 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000025016c64 CR3=0000000000144000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff00 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6628be66e4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6628be66f1 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6628be66eb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6628be66ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6628be6785 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6628be6863 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6628cd6488 00007f6628cd6480 00007f6628cd6478 00007f6628cd6450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f662983d100 00007f6628cd6440 00007f6628cd6458 00007f6628cd64a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6628cd6498 00007f6628cd6490 00007f6628cd6488 00007f6628cd6480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000198 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000