last executing test programs: 3.944863892s ago: executing program 0 (id=1): inotify_init1(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa10001, 0x1, '\x00', @p_u8=0x0}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00010000000004038208"], 0x0, 0x0, 0x0}, 0x0) r5 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r5, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000140)=""/12, 0xc, 0x7, &(0x7f0000000280)) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000040)={0x1, 0x3, 0x3ff}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) move_pages(r6, 0xa, &(0x7f0000000400)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000080)=[0x4, 0x7f, 0x526, 0x1, 0x2, 0x5, 0xffffa4ad], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x4040, 0x0) 3.935042018s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0xa00049, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) chdir(&(0x7f0000000180)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$rose(r6, &(0x7f0000000240)="e7e1d4bc", 0x4, 0x80, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000000)) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r7, &(0x7f0000001940)=""/4086, 0xff6) read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020) openat(r4, &(0x7f0000000100)='./file0\x00', 0x42, 0x17c) 3.811466532s ago: executing program 1 (id=5): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x7, 0x1, 0x2, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x20, 0xc7, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xd, 0x0, 0xf}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x4, 0xc8, 0x40, 0x4}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000680)='m', 0x1}, {&(0x7f00000006c0)="0f3bf65b6260c9a011b97c86328cedeb0ccf4d1c33e8f498d98fbfffe28d236bcbb321014f980589485eec5b8af055771b8f124ee4465f0a387aba0e34cdcafaeb612a3f1944f06b2487e371c021cdc64bc703", 0x53}], 0x2) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x0, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) (async, rerun: 32) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_APDU={0x6, 0x19, "ee2a"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) connect$nfc_raw(r1, &(0x7f00000000c0)={0x27, r5, 0xffffffffffffffff, 0x1}, 0x10) (async, rerun: 32) r6 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000200)=0x1000) 3.052550371s ago: executing program 1 (id=16): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x2}, 0x1c) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x4000, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x5c, 0x1a, 0xa01, 0x0, 0x0, {0xa}, [@generic="5774e7fc00fe62fe98ed657fb46a26c52c22427b47b4c0dad17f1ce464e06a64f4787c192fa50c2136dd222dedf6a3ff1218542c3e990402f637cea70d0997b5d3c440b53acf"]}, 0x5c}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x20000084) fcntl$getown(r1, 0x9) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000002c0)={0x80}) 3.052180342s ago: executing program 1 (id=17): inotify_init1(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa10001, 0x1, '\x00', @p_u8=0x0}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00010000000004038208"], 0x0, 0x0, 0x0}, 0x0) r5 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r5, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000140)=""/12, 0xc, 0x7, &(0x7f0000000280)) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000040)={0x1, 0x3, 0x3ff}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) move_pages(r6, 0xa, &(0x7f0000000400)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000080)=[0x4, 0x7f, 0x526, 0x1, 0x2, 0x5, 0xffffa4ad], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x4040, 0x0) 1.382355561s ago: executing program 3 (id=34): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {0x0, 0x0, 0x1}, 0xfd}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xa2a24bda1472c9ea) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r5, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021"], 0x54}}, 0x0) 1.331505617s ago: executing program 3 (id=36): mkdir(&(0x7f0000000000)='./file0\x00', 0x80) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x5, &(0x7f0000000140), 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) connect(r0, &(0x7f0000000140)=@nfc_llcp={0x27, r1, 0x1, 0x4, 0x8, 0x9, "ddf9be3a196083bcf8dc9db081e769ee66529b0c05669c930f80c8cabc92f16a3d4e76bcdfac43bfa046f8cf234c5359b4394320c645c8d1ed7281f2c31779", 0x39}, 0x80) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x18008, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='net/sockstat6\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x2b, 0x1, 0x0) r5 = signalfd(r4, &(0x7f00000002c0)={[0xeeb5]}, 0x8) socket$netlink(0x10, 0x3, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bind$vsock_stream(r5, &(0x7f0000000340)={0x28, 0x0, 0x2710, @local}, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r8], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) lsetxattr$system_posix_acl(&(0x7f0000005800)='./file0\x00', &(0x7f0000005840)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) 1.21240257s ago: executing program 3 (id=39): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) timer_create(0x3, 0x0, &(0x7f0000000300)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x3, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xf, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x200, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x208, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x400017, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xf78, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x7, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x5, 0x9, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x6, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_clone(0xc0080, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="86", 0x1}], 0x1}, 0x4c0c7) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0xffffffff}}, 0x4, 0x4, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x80000001, @loopback, 0x1000}}, 0xfff, 0x6, 0x91, 0x400, 0x9}, &(0x7f0000000200)=0x98) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x3f) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) poll(&(0x7f00000003c0)=[{r6, 0x3204}], 0x1, 0x1) tgkill(0x0, 0x0, 0x41) 1.08251317s ago: executing program 2 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000003c0)={{0x7, 0x0, 0x3, 0x1, 'syz0\x00', 0x9}, 0x3, 0x30, 0x1, 0x0, 0x0, 0x7fff, 'syz0\x00', 0x0}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x810c5a, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200070001bbdcb85fe200040006aa013acad06392b6161f1dfbd53cb68ea8f453f2e3d611af00c462098c7201e5293b2bbd9ad56c5927dee0f55028f3ddc91a0b18b189c47420890b11f9e3ac4d62b5179de0f4de9fad21c7b0841413497dfb4c829a4a10721a39af4b1a8a310c", @ANYRES32=0x0, @ANYBLOB="040000000000000010000600000000002000010000000000"], 0x2c, 0x1) 1.081687817s ago: executing program 2 (id=43): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) (async) socket(0x2, 0x3, 0xff) socket(0x2, 0x3, 0xff) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r7, &(0x7f0000000040)=""/48, 0x30, 0x200087) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x1, 0x2, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x80, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601120000000000000000000000000500010007000000140007800800124000030000050015000c0000000900020073797a300000000011000300686173683a69702c6d61726b0000000005000400000000000500050002"], 0x60}}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x1019, &(0x7f00000004c0)={@broadcast, @random="49e30e4f6ffa", @val={@val={0x88a8, 0x7, 0x1, 0x3}, {0x8100, 0x0, 0x0, 0x1}}, {@x25={0x805, {0x0, 0x1, 0x0, "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"}}}}, &(0x7f0000000240)={0x0, 0x4, [0xbd5, 0xdf6, 0xcbf, 0x91]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x72bd27, 0x25dfdbfb, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7, 0x8}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x9}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x20, 0x3, 0x101, 0xfffd, 0x0, 0x0, 0x0}) 962.451059ms ago: executing program 2 (id=44): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r2, &(0x7f0000000080)="a239f621635c05dc9de753edbc60c11c1e39e341c777561f8c0c0c63395c87bb098a22ce4a02345f2ffce9c24c1053bf367b9020bb81db1bf5756abc89ff0fbac35fd77610ab259a5dfd62533df2649e1a041732c7ec104deff08ff368edcb660ec0bbaa25c24ce162557ca6150460282b9469a0e58e4766c56883f46082ce9a742707003be5b63149f18b6edebdec3f9fcaacb8e99c37186b", 0x99, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0xcdb, @loopback, 0xd}, 0x1c) (async) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) (async) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfe, 0x8000}, 0xc) (async) lseek(r1, 0x164, 0x0) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1], 0x10}}, 0x20000054) 961.992311ms ago: executing program 2 (id=45): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) init_module(0x0, 0x3f00, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x6e23, 0x0, @loopback}, 0x1c) 794.530322ms ago: executing program 0 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xfffffffe}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) 602.097046ms ago: executing program 0 (id=47): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010102}, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000940)='ns/uts\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000800), 0xc, &(0x7f0000000a00)={&(0x7f0000000840)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf2531000000080001000a00000008000300", @ANYRESOCT=r1, @ANYBLOB="0c00990006009170d456cc6d869f7bb58dc265c953c2f9a58d68504f25bf31fc527b00000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0001000080000000006f85e3956682765881120963bcbc", @ANYRES32=r0, @ANYBLOB="08000100090000000800db00", @ANYRES32=r2, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x24000000) listen(r1, 0x8) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x0, 0x3}, 0x8) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x170, 0x9, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}}]}, @IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}]}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_SKBMARK={0xc}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x780b}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20008000}, 0xc04c040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x801) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r8, 0x2, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}}, 0x4000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x4, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002001e0000000c00000006000100fe0f00000600050088a8000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x60}}, 0x8000) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 312.236418ms ago: executing program 0 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000001480)={0x2, 0x0, @ioapic={0xf000, 0x5, 0xc, 0x1, 0x0, [{0x10, 0x10, 0x81, '\x00', 0x5}, {0x5, 0x4, 0x5, '\x00', 0xc6}, {0x8, 0x1, 0xff, '\x00', 0x5}, {0xfa, 0x0, 0x8, '\x00', 0x91}, {0x2, 0x0, 0x1, '\x00', 0x8}, {0xc1, 0x5, 0x7, '\x00', 0xf1}, {0xff, 0x6, 0x3, '\x00', 0x4}, {0x2, 0x5, 0x96, '\x00', 0xb}, {0x1, 0x80, 0x7, '\x00', 0x7}, {0x8, 0x9b, 0x2, '\x00', 0x4}, {0xe5, 0x0, 0x5, '\x00', 0x9}, {0xe2, 0xd, 0x83, '\x00', 0x7}, {0x1, 0x8, 0x36, '\x00', 0x7}, {0x6, 0x9, 0x5, '\x00', 0x9}, {0x4, 0x8, 0x0, '\x00', 0xe0}, {0xe, 0x3, 0x9, '\x00', 0x8d}, {0xff, 0x8, 0x7, '\x00', 0x8}, {0xff, 0x9, 0x2, '\x00', 0xa0}, {0x4, 0xb2, 0x1, '\x00', 0xa}, {0x5, 0xff, 0x4, '\x00', 0x4}, {0x3, 0x80, 0x0, '\x00', 0x9}, {0x4, 0x6, 0x6, '\x00', 0x7}, {0xd0, 0x9, 0x3, '\x00', 0x1}, {0x9, 0xa, 0x7, '\x00', 0xf9}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x0, 0x0, 0x100000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0xcc, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\n\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd70008000000002000000080061000000000005003e00f5"], 0x24}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x160, r6, 0x820, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x56}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x100, 0x3, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xea, 0x1, "20f450e87381cbad7c0fbd4e64e12c97389f20cb3cd896763d977ba2d0ad563e8d15afce3b184902804c8a36176f7997df32f307138abb64b880980fe80d25124b80609783c3414b0d258852a7576fffae84c23fdb40a953f7f296f5125439791f76cc321b892305b5a6014e072c5e4b5ba9445eebf872a207edfa94570314afa48425942b748cb470ca64d6d0ee2988ce92c5996a986ba866460fd4cb6a110c63108d92267c4a9def396ee62a32858cb82e71c89801f8f9f005f791d5657c264cba6d2a73c704f3accc594dd950ce65fe29e0acc364e49e7e7573b885ee7f868be195a6ff81"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffffb706}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x28, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x12, 0x1, "648cfdb29f9e609f0f60965242c7"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x16c, r6, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8193da1617cea418"}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x49cf}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "94baf4811b985713"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2e64011f159f3e5cc6c185e3047b25ce"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "47894ee0f02808a4"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1a0ca83f191a13153a5379981dce76efe78ca68501884511"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e60b76fbedcc6449"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="228044bf0ca96fb5d1ca966026c43931"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ade223aa535de23d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5229ea3f0b328b464e9b21fbf54c134195bb4a5777fc59c7f42cc363b650402c"}]}, @NL80211_ATTR_REKEY_DATA={0x14, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="72eff6234419816d1c5e011a5d5614db823a6739d569fdecbf30f8f5ce5f1e14"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="886e60ccd1a2ccb83a759b503cf3d346"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e77cf71abb79a251f83bdd8359957fca90102d9a7f8ac2f4"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="69b7ac4759bb65dfef5aed9a055a441327c47ccdc2dbbc6f06f39eb191f1d035"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b13d3700cacd705e"}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 310.222483ms ago: executing program 3 (id=49): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}}, 0x0) 72.300483ms ago: executing program 3 (id=50): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000040)={0x2000000, 0x0, 0x0, 0x40000004, 0x4000007}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x3, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000280)}, 0x9) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) pselect6(0x40, &(0x7f0000000140)={0x9, 0x5, 0xb, 0x5, 0x3, 0xae88, 0xc350, 0x2}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@getnexthop={0x28, 0x6a, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_GROUPS={0x4}]}, 0x28}}, 0x20000840) 72.006546ms ago: executing program 2 (id=51): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r6, @ANYRES64, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="d2427b02a155c1b8f6c2075aa6560bbecce49025b1b7cf135e7ecf9efc4532bdbcf08f6e37aa8007e43dc4be8cdbc5d808da90453f7386665d8c755e76dd3fc7dbf5faa426f6deebdaf2653d9fb20bb447121983436fb73dbf4a4dadd143d1129f24aa9c02adb03a4422d65ea3e27b2717ff1a1f61a5c8cf35c4c692e38866ccb108ed24447b136a63d5bff2bd55d945798085d5dd2aeb005cb48504d36019dd463d939fca6c8bc0069ed1c2224507b6ba3035c198f4cd908556dd0c76a8758a8042ce7e75ba581387bff7fd52a53820de275a68b8a18046b82dbce8f5fa9b2e3c50d482e55e8d151b", @ANYRESOCT=0x0, @ANYRES64=r6, @ANYRESDEC=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10080) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc084}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xb207}, {0xffffffffffffffff, 0x200}], 0x2, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) (async) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000300)) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @bt={0x6, 0x7, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x11}}) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="300100001a84181a000100090000007cdbdf251c000000", @ANYRES32=0x0, @ANYBLOB="0000000814000100fe8000000000000000000000000000bb"], 0x30}}, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f00000000c0)={0x0, 0x8, 0x7, 0x223ae063, @vifc_lcl_addr=@private=0xa010101, @multicast2}, 0x10) (async) ioctl$KVM_SET_SIGNAL_MASK(r10, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b']) (async) syz_clone(0x82aa80, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 71.753723ms ago: executing program 0 (id=52): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x150, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x89}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1020}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0xe3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0xfff7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3ff}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7c3de2d8}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20008855}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000004200c386fa1e0000ffffffff0b002f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0xd0) 71.205432ms ago: executing program 0 (id=53): socket(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) r6 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) sched_setparam(r2, &(0x7f00000022c0)=0x7f) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r8 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000080)=ANY=[], 0x1df) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000000)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "28ce30ec8d08598948224ad54af2c11d875397bdb22d0000b420a1a93c5291ecc6f19e01177d3d458dd49928610000002000", "b6000000551265406c7f3004000000ef00"}}) ioctl$CDROMPLAYMSF(r9, 0x5303, &(0x7f00000001c0)={0xee, 0x2, 0xf, 0x9, 0x2, 0xff}) ptrace$pokeuser(0x6, r6, 0x358, 0x4000000) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_INIT(r5, &(0x7f0000002240)={0x50, 0x0, r1, {0x7, 0x2b, 0x7ff, 0x40010, 0x4, 0xb6e, 0x10, 0x1, 0x0, 0x0, 0x2, 0x2}}, 0x50) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYRES64=r5], 0x10) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_INIT(r10, &(0x7f0000000140)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x600, 0x10, 0x0, 0x1e6, 0x6, 0x0, 0x0, 0x1, 0x4b}}, 0x50) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}]}}) 1.573265ms ago: executing program 3 (id=54): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x80000000000007, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 972.247µs ago: executing program 1 (id=55): inotify_init1(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa10001, 0x1, '\x00', @p_u8=0x0}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00010000000004038208"], 0x0, 0x0, 0x0}, 0x0) r5 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r5, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000140)=""/12, 0xc, 0x7, &(0x7f0000000280)) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000040)={0x1, 0x3, 0x3ff}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) move_pages(r6, 0xa, &(0x7f0000000400)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000080)=[0x4, 0x7f, 0x526, 0x1, 0x2, 0x5, 0xffffa4ad], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x4040, 0x0) 0s ago: executing program 2 (id=56): timer_create(0x7, 0x0, &(0x7f0000000740)) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x32315258, 0xd381d9d58b7a7bd0, 0x7, [{0x6, 0x2}, {0xdc8, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1003, 0xd3}, {0x5, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x7, 0x7, 0x7, 0x0, 0x1}}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0xfffffffffffffe8e) (async) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000305fcffffff000000000000000085c4f5883bcc42b1563ce993282e3bd73f5c683718092c1e77c5f539b54db6e2fa3334beff16b35577720635bae0d45c293fede8837a4ffe2d8d83ebbe22ccd728780560bd100979bf061a2f3b61ed56e964acc701", @ANYRES32=0x0, @ANYBLOB="11110200318800002800128008000100687372001c000280050007000200000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) r6 = fcntl$getown(r0, 0x9) (async) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={r6, r7, r8}, 0xc) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_delete(0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000140)={@local, 0x2}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r12, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0x0, 0x5, 0x7, 0x80, 0x0, [{0xf2, 0x9, 0x7, '\x00', 0x7}, {0xbb, 0xd4, 0x6, '\x00', 0xf}, {0xf9, 0x5, 0x40, '\x00', 0xfb}, {0x8, 0x0, 0x9, '\x00', 0x2}, {0x6, 0xa6, 0x5, '\x00', 0x7f}, {0x6, 0x7f, 0x2, '\x00', 0x3}, {0x25, 0x9, 0x87, '\x00', 0x4}, {0x10, 0xe, 0x4, '\x00', 0x5}, {0x0, 0x81, 0x0, '\x00', 0x7}, {0x6, 0x88, 0xff, '\x00', 0xa}, {0xcf, 0xa, 0x7, '\x00', 0x1}, {0x7, 0x5, 0x81, '\x00', 0x1}, {0x5, 0x2, 0xc0, '\x00', 0x3}, {0x71, 0x6, 0xf0, '\x00', 0x5}, {0x80, 0xe8, 0xff, '\x00', 0x3}, {0xf9, 0x8, 0x1, '\x00', 0x8}, {0x6, 0x0, 0x7, '\x00', 0x3c}, {0x0, 0x3, 0x80, '\x00', 0x6}, {0x73, 0x3, 0x9, '\x00', 0x7f}, {0x6, 0x61, 0xd, '\x00', 0x80}, {0x8, 0x3, 0x0, '\x00', 0x10}, {0x3, 0xfe, 0x9, '\x00', 0x3}, {0x0, 0x2, 0xae, '\x00', 0x3}, {0x3, 0x34, 0x1, '\x00', 0x3}]}}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r10, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r10, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) close_range(r9, 0xffffffffffffffff, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r14, 0x5, 0x0, 0x25dfdbfa, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): [ 38.147354][ T40] audit: type=1400 audit(1757337788.265:60): avc: denied { rlimitinh } for pid=5874 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.156403][ T40] audit: type=1400 audit(1757337788.265:61): avc: denied { siginh } for pid=5874 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:20829' (ED25519) to the list of known hosts. [ 39.022201][ T40] audit: type=1400 audit(1757337789.165:62): avc: denied { name_bind } for pid=5881 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.036573][ T40] audit: type=1400 audit(1757337789.185:63): avc: denied { write } for pid=5882 comm="sh" path="pipe:[7029]" dev="pipefs" ino=7029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.048671][ T40] audit: type=1400 audit(1757337789.195:64): avc: denied { execute } for pid=5882 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.055700][ T40] audit: type=1400 audit(1757337789.195:65): avc: denied { execute_no_trans } for pid=5882 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.937666][ T40] audit: type=1400 audit(1757337791.085:66): avc: denied { mounton } for pid=5882 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 40.940096][ T5882] cgroup: Unknown subsys name 'net' [ 41.087336][ T5882] cgroup: Unknown subsys name 'cpuset' [ 41.092662][ T5882] cgroup: Unknown subsys name 'rlimit' [ 41.323146][ T5907] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.953331][ T5882] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.797385][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 44.797396][ T40] audit: type=1400 audit(1757337794.945:80): avc: denied { execmem } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.023879][ T40] audit: type=1400 audit(1757337795.165:81): avc: denied { create } for pid=5966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.029925][ T40] audit: type=1400 audit(1757337795.165:82): avc: denied { read write } for pid=5966 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.041253][ T40] audit: type=1400 audit(1757337795.165:83): avc: denied { open } for pid=5966 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.048613][ T40] audit: type=1400 audit(1757337795.185:84): avc: denied { ioctl } for pid=5966 comm="syz-executor" path="socket:[1642]" dev="sockfs" ino=1642 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.065652][ T5973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.068624][ T5977] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.069507][ T5975] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.071284][ T5977] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.074251][ T5975] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.075960][ T5977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.078063][ T5975] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.080055][ T5977] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.082385][ T5975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.086186][ T5980] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.087001][ T5975] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.089257][ T40] audit: type=1400 audit(1757337795.235:85): avc: denied { read } for pid=5966 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.097122][ T5973] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.101314][ T40] audit: type=1400 audit(1757337795.235:86): avc: denied { open } for pid=5966 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.109308][ T5973] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.110998][ T5331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.113411][ T40] audit: type=1400 audit(1757337795.235:87): avc: denied { mounton } for pid=5966 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.113991][ T5973] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.114946][ T5973] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.115403][ T5973] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.116802][ T5331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.133912][ T5331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.140927][ T5331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.302020][ T40] audit: type=1400 audit(1757337795.445:88): avc: denied { module_request } for pid=5966 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.361824][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 45.366987][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 45.466498][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 45.470923][ T5978] chnl_net:caif_netlink_parms(): no params data found [ 45.516788][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.520303][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.523272][ T5968] bridge_slave_0: entered allmulticast mode [ 45.526488][ T5968] bridge_slave_0: entered promiscuous mode [ 45.572770][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.575712][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.578487][ T5968] bridge_slave_1: entered allmulticast mode [ 45.581534][ T5968] bridge_slave_1: entered promiscuous mode [ 45.614077][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.616383][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.618602][ T5966] bridge_slave_0: entered allmulticast mode [ 45.621199][ T5966] bridge_slave_0: entered promiscuous mode [ 45.652454][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.663379][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.666421][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.669212][ T5966] bridge_slave_1: entered allmulticast mode [ 45.672171][ T5966] bridge_slave_1: entered promiscuous mode [ 45.695331][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.789378][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.804690][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.806985][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.809250][ T5978] bridge_slave_0: entered allmulticast mode [ 45.811831][ T5978] bridge_slave_0: entered promiscuous mode [ 45.815674][ T5968] team0: Port device team_slave_0 added [ 45.817670][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.819888][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.822152][ T5970] bridge_slave_0: entered allmulticast mode [ 45.825082][ T5970] bridge_slave_0: entered promiscuous mode [ 45.829436][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.844855][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.847104][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.849352][ T5978] bridge_slave_1: entered allmulticast mode [ 45.851970][ T5978] bridge_slave_1: entered promiscuous mode [ 45.855366][ T5968] team0: Port device team_slave_1 added [ 45.857463][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.859727][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.861964][ T5970] bridge_slave_1: entered allmulticast mode [ 45.865129][ T5970] bridge_slave_1: entered promiscuous mode [ 45.894767][ T5966] team0: Port device team_slave_0 added [ 45.937932][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.942787][ T5966] team0: Port device team_slave_1 added [ 45.978699][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.011851][ T5978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.016354][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.018528][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.026713][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.053282][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.057391][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.065878][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.070491][ T5978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.073839][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.076041][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.083976][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.113675][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.115974][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.123972][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.145432][ T5970] team0: Port device team_slave_0 added [ 46.152105][ T5970] team0: Port device team_slave_1 added [ 46.168498][ T5978] team0: Port device team_slave_0 added [ 46.171785][ T5978] team0: Port device team_slave_1 added [ 46.228841][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.231036][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.240189][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.273122][ T5968] hsr_slave_0: entered promiscuous mode [ 46.275547][ T5968] hsr_slave_1: entered promiscuous mode [ 46.292003][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.294274][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.302381][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.320695][ T5966] hsr_slave_0: entered promiscuous mode [ 46.322964][ T5966] hsr_slave_1: entered promiscuous mode [ 46.326361][ T5966] debugfs: 'hsr0' already exists in 'hsr' [ 46.328238][ T5966] Cannot create hsr debugfs directory [ 46.340366][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.342551][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.350745][ T5978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.372677][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.375170][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.383035][ T5978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.505718][ T5970] hsr_slave_0: entered promiscuous mode [ 46.508874][ T5970] hsr_slave_1: entered promiscuous mode [ 46.511723][ T5970] debugfs: 'hsr0' already exists in 'hsr' [ 46.514516][ T5970] Cannot create hsr debugfs directory [ 46.546535][ T5978] hsr_slave_0: entered promiscuous mode [ 46.548740][ T5978] hsr_slave_1: entered promiscuous mode [ 46.550821][ T5978] debugfs: 'hsr0' already exists in 'hsr' [ 46.552655][ T5978] Cannot create hsr debugfs directory [ 46.840140][ T5968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.846617][ T5968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.850422][ T5968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.858921][ T5968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.887409][ T5966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.896391][ T5966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.900364][ T5966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.905267][ T5966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.946577][ T5970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.955877][ T5970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.963478][ T5970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.978756][ T5970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.008046][ T5978] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.012213][ T5978] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.016579][ T5978] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.026843][ T5978] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.056400][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.082082][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.086382][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.111649][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.117725][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.120934][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.130108][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.133131][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.143509][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.146575][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.154764][ T5331] Bluetooth: hci3: command tx timeout [ 47.156345][ T5976] Bluetooth: hci2: command tx timeout [ 47.156728][ T5972] Bluetooth: hci1: command tx timeout [ 47.159179][ T5976] Bluetooth: hci0: command tx timeout [ 47.164877][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.167231][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.198018][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.221335][ T5978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.243179][ T5966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.249645][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.267393][ T5978] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.271489][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.271758][ T40] audit: type=1400 audit(1757337797.415:89): avc: denied { sys_module } for pid=5968 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.273860][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.294909][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.297246][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.300414][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.302683][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.310312][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.312580][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.376142][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.381483][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.415280][ T5966] veth0_vlan: entered promiscuous mode [ 47.423084][ T5966] veth1_vlan: entered promiscuous mode [ 47.437355][ T5968] veth0_vlan: entered promiscuous mode [ 47.442357][ T5968] veth1_vlan: entered promiscuous mode [ 47.452385][ T5978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.459595][ T5966] veth0_macvtap: entered promiscuous mode [ 47.471829][ T5966] veth1_macvtap: entered promiscuous mode [ 47.492433][ T5968] veth0_macvtap: entered promiscuous mode [ 47.497659][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.503330][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.511094][ T5968] veth1_macvtap: entered promiscuous mode [ 47.518015][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.528950][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.537823][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.543018][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.548825][ T5978] veth0_vlan: entered promiscuous mode [ 47.552001][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.566139][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.570500][ T5978] veth1_vlan: entered promiscuous mode [ 47.584889][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.591926][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.605213][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.608639][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.619880][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.622754][ T5970] veth0_vlan: entered promiscuous mode [ 47.630778][ T5978] veth0_macvtap: entered promiscuous mode [ 47.641815][ T5978] veth1_macvtap: entered promiscuous mode [ 47.651711][ T5970] veth1_vlan: entered promiscuous mode [ 47.669692][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.672271][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.675692][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.681860][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.682227][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.686839][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.701603][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.709852][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.709881][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.715625][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.716942][ T5970] veth0_macvtap: entered promiscuous mode [ 47.725343][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.728301][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.740873][ T5970] veth1_macvtap: entered promiscuous mode [ 47.748422][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.750909][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.769007][ T5966] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.770161][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.780942][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.783428][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.784984][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.799991][ T1142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.815573][ T6060] ======================================================= [ 47.815573][ T6060] WARNING: The mand mount option has been deprecated and [ 47.815573][ T6060] and is ignored by this kernel. Remove the mand [ 47.815573][ T6060] option from the mount to silence this warning. [ 47.815573][ T6060] ======================================================= [ 47.825508][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.825678][ T1142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.825758][ T1142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.825789][ T1142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.840625][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.871364][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.876960][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.894418][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.896906][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.952698][ T6073] 9pnet_virtio: no channels available for device syz [ 47.978354][ T60] IPVS: starting estimator thread 0... [ 48.054126][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.064034][ T6078] IPVS: using max 45 ests per chain, 108000 per kthread [ 48.077379][ T6087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9'. [ 48.080221][ T6087] tipc: Invalid UDP bearer configuration [ 48.080245][ T6087] tipc: Enabling of bearer rejected, failed to enable media [ 48.088727][ T6087] Zero length message leads to an empty skb [ 48.203836][ T6062] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 48.209062][ T34] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 48.212562][ T6091] kvm: pic: non byte write [ 48.212668][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.222854][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.233877][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 48.240907][ T34] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 48.244064][ T34] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 48.246613][ T34] usb 5-1: Manufacturer: syz [ 48.249836][ T34] usb 5-1: config 0 descriptor?? [ 48.358084][ T6062] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 48.361413][ T6062] usb 6-1: config 0 has no interface number 0 [ 48.364447][ T6062] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 48.368895][ T6062] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 48.373208][ T6062] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 48.379315][ T6062] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 48.384162][ T6062] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 48.388563][ T6062] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 48.394264][ T6062] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 48.398701][ T6062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.405423][ T6062] usb 6-1: config 0 descriptor?? [ 48.408944][ T6075] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 48.412099][ T6075] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 48.422921][ T6062] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 48.464503][ T6058] Bluetooth: MGMT ver 1.23 [ 48.618999][ T6075] ldusb 6-1:0.55: Write buffer overflow, 3 bytes dropped [ 48.636652][ T6041] usb 6-1: USB disconnect, device number 2 [ 48.645034][ T6041] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 48.686518][ T34] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 48.701886][ T34] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 49.014323][ T6041] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 49.165849][ T6041] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 49.170319][ T6041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.175805][ T6041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.179778][ T6041] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 49.186528][ T6041] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 49.190289][ T6041] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 49.193504][ T6041] usb 6-1: Manufacturer: syz [ 49.199925][ T6041] usb 6-1: config 0 descriptor?? [ 49.233902][ T5976] Bluetooth: hci1: command tx timeout [ 49.235734][ T5976] Bluetooth: hci3: command tx timeout [ 49.236003][ T5972] Bluetooth: hci2: command tx timeout [ 49.237464][ T5973] Bluetooth: hci0: command tx timeout [ 49.614669][ T6041] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 49.624123][ T6041] appleir 0003:05AC:8243.0003: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 49.641746][ T6167] netlink: 'syz.2.24': attribute type 23 has an invalid length. [ 49.799999][ T6171] bond1: entered promiscuous mode [ 49.886159][ T6175] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 49.948586][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 49.948596][ T40] audit: type=1400 audit(1757337800.095:170): avc: denied { append } for pid=6178 comm="syz.3.27" name="comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.958090][ T40] audit: type=1400 audit(1757337800.095:171): avc: denied { read } for pid=6180 comm="syz.2.28" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.960323][ T6181] netlink: 'syz.2.28': attribute type 4 has an invalid length. [ 49.965375][ T40] audit: type=1400 audit(1757337800.095:172): avc: denied { open } for pid=6180 comm="syz.2.28" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.975442][ T40] audit: type=1400 audit(1757337800.115:173): avc: denied { ioctl } for pid=6178 comm="syz.3.27" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.990691][ T40] audit: type=1400 audit(1757337800.135:174): avc: denied { setopt } for pid=6180 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.990970][ T6181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6181 comm=syz.2.28 [ 50.002551][ T40] audit: type=1400 audit(1757337800.145:175): avc: denied { unmount } for pid=5978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 50.024134][ T40] audit: type=1400 audit(1757337800.175:176): avc: denied { ioctl } for pid=6184 comm="syz.3.29" path="socket:[8062]" dev="sockfs" ino=8062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.025457][ T6185] netlink: 80 bytes leftover after parsing attributes in process `syz.3.29'. [ 50.043919][ T6056] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 50.160213][ T40] audit: type=1400 audit(1757337800.305:177): avc: denied { bind } for pid=6191 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.170154][ T40] audit: type=1400 audit(1757337800.305:178): avc: denied { name_bind } for pid=6191 comm="syz.3.31" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 50.177022][ T40] audit: type=1400 audit(1757337800.305:179): avc: denied { node_bind } for pid=6191 comm="syz.3.31" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 50.183804][ T6056] usb 5-1: device descriptor read/64, error -32 [ 50.238181][ T6194] netlink: 'syz.3.32': attribute type 5 has an invalid length. [ 50.262471][ T6189] tipc: Started in network mode [ 50.264547][ T6189] tipc: Node identity 4, cluster identity 4711 [ 50.266910][ T6189] tipc: Node number set to 4 [ 50.270140][ T6189] warning: `syz.2.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.376568][ T6208] nft_compat: unsupported protocol 11 [ 50.380022][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'. [ 50.386592][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.423615][ T6210] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.434271][ T6056] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 50.439442][ T6212] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.518491][ T6219] bridge: RTM_NEWNEIGH with invalid ether address [ 50.522002][ T6219] bridge: RTM_NEWNEIGH with invalid ether address [ 50.574933][ T6056] usb 5-1: device descriptor read/64, error -32 [ 50.696151][ T6228] block device autoloading is deprecated and will be removed. [ 50.701396][ T6228] netlink: zone id is out of range [ 50.705180][ T6228] netlink: zone id is out of range [ 50.706925][ T6228] netlink: zone id is out of range [ 50.708578][ T6228] netlink: zone id is out of range [ 50.710228][ T6228] netlink: zone id is out of range [ 50.711845][ T6228] netlink: zone id is out of range [ 50.713537][ T6228] netlink: zone id is out of range [ 50.715407][ T6228] netlink: zone id is out of range [ 50.717068][ T6228] netlink: zone id is out of range [ 50.719358][ T6228] netlink: zone id is out of range [ 50.823811][ T6056] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 50.844279][ T6056] usb 5-1: device descriptor read/8, error -32 [ 51.314645][ T5972] Bluetooth: hci3: command tx timeout [ 51.314671][ T5973] Bluetooth: hci2: command tx timeout [ 51.315888][ T5331] Bluetooth: hci1: command tx timeout [ 51.315921][ T5331] Bluetooth: hci0: command tx timeout [ 51.407791][ T6252] syz.0.48 uses obsolete (PF_INET,SOCK_PACKET) [ 51.414296][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 51.418000][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 51.688274][ T6266] mmap: syz.0.53 (6266) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.701613][ T6266] loop6: detected capacity change from 0 to 7 [ 51.704380][ T29] usb 6-1: USB disconnect, device number 3 [ 51.706231][ T6266] Dev loop6: unable to read RDB block 7 [ 51.708299][ T6266] loop6: unable to read partition table [ 51.710271][ T6266] loop6: partition table beyond EOD, truncated [ 51.712231][ T6266] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 51.744777][ T6266] ------------[ cut here ]------------ [ 51.746623][ T6266] WARNING: CPU: 2 PID: 6266 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 51.749844][ T6266] Modules linked in: [ 51.751235][ T6266] CPU: 2 UID: 0 PID: 6266 Comm: syz.0.53 Not tainted syzkaller #0 PREEMPT(full) [ 51.755645][ T6266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.759160][ T6266] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 51.761239][ T6266] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 3f c1 7e 0e 00 75 0b c6 05 36 c1 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 51.767894][ T6266] RSP: 0018:ffffc900042df7f0 EFLAGS: 00010246 [ 51.767917][ T6266] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 51.767925][ T6266] RDX: 0000000000000000 RSI: 0000000000000033 RDI: 0000000000040d40 [ 51.767932][ T6266] RBP: 0000000000000033 R08: 0000000000000005 R09: 0000000000000009 [ 51.767939][ T6266] R10: 0000000000000033 R11: 0000000000000000 R12: 0000000000040d40 [ 51.767946][ T6266] R13: 1ffff9200085bf13 R14: ffffffff9ae7fa24 R15: 0000000000000033 [ 51.767954][ T6266] FS: 00007f90710e06c0(0000) GS:ffff8880d68b5000(0000) knlGS:0000000000000000 [ 51.767983][ T6266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.767993][ T6266] CR2: 00007f85d118bf98 CR3: 0000000031768000 CR4: 0000000000352ef0 [ 51.768000][ T6266] Call Trace: [ 51.768004][ T6266] [ 51.768009][ T6266] ? do_syscall_64+0xcd/0x4c0 [ 51.768026][ T6266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.768045][ T6266] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 51.768065][ T6266] ? kasan_quarantine_put+0x10a/0x240 [ 51.768076][ T6266] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.768091][ T6266] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.768105][ T6266] ? policy_nodemask+0xea/0x4e0 [ 51.768118][ T6266] alloc_pages_mpol+0x1fb/0x550 [ 51.768131][ T6266] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 51.768147][ T6266] ? v9fs_fid_get_acl+0x7a/0x120 [ 51.768163][ T6266] ___kmalloc_large_node+0xed/0x160 [ 51.768178][ T6266] ? v9fs_fid_get_acl+0x7a/0x120 [ 51.768193][ T6266] __kmalloc_large_node_noprof+0x1c/0x70 [ 51.768208][ T6266] __kmalloc_noprof.cold+0xc/0x61 [ 51.768223][ T6266] ? __pfx_iget5_locked+0x10/0x10 [ 51.768238][ T6266] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 51.768257][ T6266] v9fs_fid_get_acl+0x7a/0x120 [ 51.768274][ T6266] v9fs_get_acl+0xee/0x530 [ 51.768290][ T6266] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 51.768305][ T6266] v9fs_mount+0x4fd/0xa90 [ 51.768316][ T6266] ? __pfx_v9fs_mount+0x10/0x10 [ 51.768328][ T6266] ? cap_capable+0xb3/0x250 [ 51.768342][ T6266] ? __pfx_v9fs_mount+0x10/0x10 [ 51.768352][ T6266] legacy_get_tree+0x10c/0x220 [ 51.768366][ T6266] vfs_get_tree+0x8b/0x340 [ 51.768381][ T6266] path_mount+0x1513/0x2000 [ 51.768397][ T6266] ? __pfx_path_mount+0x10/0x10 [ 51.768411][ T6266] ? kmem_cache_free+0x2d1/0x4d0 [ 51.768421][ T6266] ? putname+0x154/0x1a0 [ 51.768436][ T6266] ? putname+0x154/0x1a0 [ 51.768451][ T6266] ? __x64_sys_mount+0x28d/0x310 [ 51.768464][ T6266] __x64_sys_mount+0x28d/0x310 [ 51.844485][ T6266] ? __pfx___x64_sys_mount+0x10/0x10 [ 51.846168][ T6266] do_syscall_64+0xcd/0x4c0 [ 51.847617][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.849477][ T6266] RIP: 0033:0x7f907018ebe9 [ 51.850886][ T6266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.857013][ T6266] RSP: 002b:00007f90710e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 51.859630][ T6266] RAX: ffffffffffffffda RBX: 00007f90703c5fa0 RCX: 00007f907018ebe9 [ 51.862110][ T6266] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 51.864705][ T6266] RBP: 00007f9070211e19 R08: 0000200000000500 R09: 0000000000000000 [ 51.867187][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.869631][ T6266] R13: 00007f90703c6038 R14: 00007f90703c5fa0 R15: 00007fff79e2cff8 [ 51.872108][ T6266] [ 51.873094][ T6266] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 51.875413][ T6266] CPU: 2 UID: 0 PID: 6266 Comm: syz.0.53 Not tainted syzkaller #0 PREEMPT(full) [ 51.878214][ T6266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.881542][ T6266] Call Trace: [ 51.882611][ T6266] [ 51.883600][ T6266] dump_stack_lvl+0x3d/0x1f0 [ 51.885064][ T6266] vpanic+0x6e8/0x7a0 [ 51.886335][ T6266] ? __pfx_vpanic+0x10/0x10 [ 51.887802][ T6266] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 51.889743][ T6266] panic+0xca/0xd0 [ 51.890946][ T6266] ? __pfx_panic+0x10/0x10 [ 51.892409][ T6266] check_panic_on_warn+0xab/0xb0 [ 51.894030][ T6266] __warn+0xf6/0x3c0 [ 51.895284][ T6266] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 51.897238][ T6266] report_bug+0x3c3/0x580 [ 51.898665][ T6266] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 51.900626][ T6266] handle_bug+0x184/0x210 [ 51.902019][ T6266] exc_invalid_op+0x17/0x50 [ 51.903543][ T6266] asm_exc_invalid_op+0x1a/0x20 [ 51.905119][ T6266] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 51.907196][ T6266] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 3f c1 7e 0e 00 75 0b c6 05 36 c1 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 51.913146][ T6266] RSP: 0018:ffffc900042df7f0 EFLAGS: 00010246 [ 51.915267][ T6266] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 51.917721][ T6266] RDX: 0000000000000000 RSI: 0000000000000033 RDI: 0000000000040d40 [ 51.920185][ T6266] RBP: 0000000000000033 R08: 0000000000000005 R09: 0000000000000009 [ 51.922652][ T6266] R10: 0000000000000033 R11: 0000000000000000 R12: 0000000000040d40 [ 51.925125][ T6266] R13: 1ffff9200085bf13 R14: ffffffff9ae7fa24 R15: 0000000000000033 [ 51.927598][ T6266] ? do_syscall_64+0xcd/0x4c0 [ 51.929099][ T6266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.931002][ T6266] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 51.932988][ T6266] ? kasan_quarantine_put+0x10a/0x240 [ 51.934945][ T6266] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.936592][ T6266] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.938456][ T6266] ? policy_nodemask+0xea/0x4e0 [ 51.940003][ T6266] alloc_pages_mpol+0x1fb/0x550 [ 51.941561][ T6266] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 51.943278][ T6266] ? v9fs_fid_get_acl+0x7a/0x120 [ 51.945085][ T6266] ___kmalloc_large_node+0xed/0x160 [ 51.946713][ T6266] ? v9fs_fid_get_acl+0x7a/0x120 [ 51.948277][ T6266] __kmalloc_large_node_noprof+0x1c/0x70 [ 51.950143][ T6266] __kmalloc_noprof.cold+0xc/0x61 [ 51.951694][ T6266] ? __pfx_iget5_locked+0x10/0x10 [ 51.953282][ T6266] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 51.955570][ T6266] v9fs_fid_get_acl+0x7a/0x120 [ 51.957094][ T6266] v9fs_get_acl+0xee/0x530 [ 51.958512][ T6266] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 51.960273][ T6266] v9fs_mount+0x4fd/0xa90 [ 51.961640][ T6266] ? __pfx_v9fs_mount+0x10/0x10 [ 51.963193][ T6266] ? cap_capable+0xb3/0x250 [ 51.964842][ T6266] ? __pfx_v9fs_mount+0x10/0x10 [ 51.966375][ T6266] legacy_get_tree+0x10c/0x220 [ 51.967896][ T6266] vfs_get_tree+0x8b/0x340 [ 51.969310][ T6266] path_mount+0x1513/0x2000 [ 51.970774][ T6266] ? __pfx_path_mount+0x10/0x10 [ 51.972313][ T6266] ? kmem_cache_free+0x2d1/0x4d0 [ 51.974048][ T6266] ? putname+0x154/0x1a0 [ 51.975470][ T6266] ? putname+0x154/0x1a0 [ 51.976818][ T6266] ? __x64_sys_mount+0x28d/0x310 [ 51.978374][ T6266] __x64_sys_mount+0x28d/0x310 [ 51.979891][ T6266] ? __pfx___x64_sys_mount+0x10/0x10 [ 51.981566][ T6266] do_syscall_64+0xcd/0x4c0 [ 51.983018][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.985372][ T6266] RIP: 0033:0x7f907018ebe9 [ 51.986775][ T6266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.992724][ T6266] RSP: 002b:00007f90710e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 51.995378][ T6266] RAX: ffffffffffffffda RBX: 00007f90703c5fa0 RCX: 00007f907018ebe9 [ 51.997888][ T6266] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 52.000392][ T6266] RBP: 00007f9070211e19 R08: 0000200000000500 R09: 0000000000000000 [ 52.002857][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.005802][ T6266] R13: 00007f90703c6038 R14: 00007f90703c5fa0 R15: 00007fff79e2cff8 [ 52.008303][ T6266] [ 52.009886][ T6266] Kernel Offset: disabled [ 52.011258][ T6266] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:23:22 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff95dd8db0 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000007 RDI=ffffffff8e5c11a0 RBP=0000000000000000 RSP=ffffc9000410f420 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000001000 R11=0000000000000001 R12=000000009ae63701 R13=ffff888024dc4880 R14=0000000000000000 R15=ffffffff8e5c11a0 RIP=ffffffff8197a465 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556c8f0500 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f85d10f56c0 CR3=000000004fcde000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde7e04540 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde7e046c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde7e046c6 00007ffde7e046cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85d0412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85d0412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85d0412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85d0412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85d0412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85d0412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000000 RBX=ffff888032c68510 RCX=ffffffff84987a84 RDX=ffff888032860000 RSI=0000000000000046 RDI=0000000000000004 RBP=ffff888032c68528 RSP=ffffc90003ddf890 R8 =0000000000000004 R9 =0000000000000046 R10=0000000000000046 R11=0000000000000000 R12=ffff888032c6852c R13=0000000000000046 R14=0000000000000046 R15=ffff888012a0f4f0 RIP=ffffffff81bb888c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb4edbf2880 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f85d1149f98 CR3=000000002492c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000029 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1225c1a8 00007ffc1225c1a8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1225c380 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558ed20ec480 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4ed5f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4ed5f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326fda179c483 737326f8fa795459 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 49856b73bc6986bb 737373762b9e53c5 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 327570632f302f71 6d2f32706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000000000000 0000000000003275 70632f302f716d2f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 366273752f312e64 63685f796d6d7564 2f6d726f6674616c 702f736563697665 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a756b733a322e 392d3533712d6370 7276633a3174633a 554d45516e76633a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646a35 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc900042df160 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000050 R14=ffffffff9b115060 R15=ffffffff856469d0 RIP=ffffffff85646a5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f90710e06c0 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f85d118bf98 CR3=0000000031768000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff79e2d380 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff79e2d506 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff79e2d506 00007fff79e2d50c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9070212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9070212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9070212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9070212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9070212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9070212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff82084dee RDX=ffff88802334a440 RSI=ffffffff8208512d RDI=0000000000000007 RBP=0000000000000001 RSP=ffffc9000448f9e0 R8 =0000000000000007 R9 =0000000000000000 R10=8000000000000025 R11=0000000000000000 R12=ffffc9000448fd68 R13=ffff88803668d400 R14=8000000000000025 R15=0000000000000000 RIP=ffffffff81bb8f11 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555584d5e500 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c246a08 CR3=000000005679e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd479431d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd479431d6 00007ffd479431dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f939da12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f939da12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f939da12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f939da12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f939da12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f939da12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f939db974a8 00007f939db974a0 00007f939db97498 00007f939db97470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f939e6fd100 00007f939db97460 00007f939db97478 00007f939db974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f939db974b8 00007f939db974b0 00007f939db974a8 00007f939db974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000