last executing test programs: 1m16.098302145s ago: executing program 1 (id=190): syz_emit_ethernet(0x3a, &(0x7f0000000580)={@local, @local, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x9, 0x28, 0x65, 0x0, 0x2, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, @timestamp_reply={0xe, 0x0, 0x0, 0x81, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$cgroup_devices(r2, &(0x7f0000000180)={'b', ' *:* ', 'rw\x00'}, 0x9) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="29000300010003", 0x7) r3 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "5d9bc136c96325017a449620148b6f72ca6ae2a44829bfa79ec13499f8be3977d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x1}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f00000003c0)=""/146, 0x92) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setrlimit(0x7, &(0x7f0000000980)={0x0, 0x62}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r5, &(0x7f00000001c0)="66dfb08558e0929e9afc", 0xa) writev(r4, &(0x7f0000000580), 0x1000000000000297) sendto$inet6(r0, &(0x7f0000000380)="00ff37f92bc9e9e1", 0x8, 0xc040084, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x4000, &(0x7f00000000c0)='rdma') mount(&(0x7f0000000300)=@filename='./bus\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000500)='zonefs\x00', 0x400, &(0x7f0000000540)='logon\x00') r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$IPVS_CMD_SET_SERVICE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40120}, 0x20008041) mknod$loop(&(0x7f0000000100)='./bus\x00', 0x8a8, 0x0) sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x5, @mcast2, 0xfffffffb}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000000280)=[@tclass={{0x14, 0x29, 0x43, 0x5}}], 0x18}}], 0x1, 0x40000c1) 1m15.902133679s ago: executing program 3 (id=194): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0xf, {"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", 0xfffffffffffffe25}}, 0x1006) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x405, 0x0) 1m15.780551504s ago: executing program 3 (id=195): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCNOTTY(r0, 0x5422) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001080)={'ip6gre0\x00', &(0x7f0000001180)={'syztnl2\x00', 0x0, 0x2f, 0x80, 0xfe, 0x5, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7, 0x10, 0x7, 0x9}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000040)) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r5, @ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0x4, 0x108, &(0x7f00000002c0)=""/264, 0x0, 0x0, '\x00', r4}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="1800000072006bcdb13fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x1}]}, &(0x7f0000000000)=0x10) sendto$inet_nvme_pdu(r5, &(0x7f0000001240)=@data_h2c_hdigest={{0x6, 0x5}, 0xffff, 0x3, 0x5, 0x5, "995b8f90"}, 0x80, 0x0, 0x0, 0x0) getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x2, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x11}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xa}]}}]}, 0x44}}, 0x0) 1m15.672928183s ago: executing program 3 (id=196): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000000)={0x2, 0x0, [{}, {}]}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e60, 0x40000000, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x2b, @loopback}}}, 0x30) ioctl$CDROMVOLREAD(r0, 0x5313, &(0x7f0000000000)) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semctl$IPC_STAT(r7, 0x0, 0x2, &(0x7f00000001c0)=""/221) prctl$PR_CAPBSET_READ(0x59616d61, 0xdaffffffffffffff) semtimedop(r7, &(0x7f0000000100)=[{0x4, 0x7}, {0x3, 0xf295}, {0x0, 0x954}, {0x2, 0x200, 0x800}, {0x3, 0xfe, 0x1000}, {0x2, 0xccd6}], 0x6, 0x0) semctl$IPC_RMID(r7, 0x0, 0x0) 1m15.502194352s ago: executing program 3 (id=197): ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000000)=0xffffffff) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2000, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$hiddev(&(0x7f0000000240), 0xe, 0x410401) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f00000002c0)={0x3, 0x2, 0x40008, 0x7fffffff, 0x4, 0xa}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x5b06, &(0x7f0000000040)) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r7, &(0x7f0000001380)=""/229, 0xe5) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf254c0000000c00a70001000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000) 1m13.91015284s ago: executing program 0 (id=200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000080)="1962d35ca4e4129bb0418a573650887a32d3eec3660a51d8d31abd915c0ae1cfe923b6de952236ae9c8c47b0a55f4e94ef6852238daf34105bfc230ae14900f8df251175b64019d26df04b222f4ef26f9409ab89017748fa646ce724b466917709d9907d70c9701e2b4c", 0x6a}, {&(0x7f0000000100)="d20af550bca379ccecdf59d68e49e93129d053e6ca78f826388d35f86caf8c1d530c36777c5b36dff8f6521b8dd11172be0b0e11da34220f328121f075368e871905d537e3a8503ed5cef9c0dcf65f4d8566a4fee8059831d8d25b617abb909ef91ad2", 0x63}, {&(0x7f00000003c0)="e6c56aaf81d4162bc8af65d8a4901b05c7e6c06083afcfb878b0f367ee9cec36448a47551251fadbaf10ae94373dec3884b19acd5da3c0366258669b3bb37717eeeb236d9ca6002994117ce97b48922a928058b99ee638e23b8c27570c69b865d49cf28ac3ecb1787fa782971d50f929ec5edb619941c2bbdac11e506d2ffbf72b4840de9edab8d81b5c670d752a611f4515ae1fdcecd3b022e11a6300fcf626e7af4e0503e24eb972b5c0c944ac5053a919a88c3d84", 0xb6}, {&(0x7f0000000180)="88cb07da453f6d45ec25c0341ce2081c2013fe29823277518298f4caf739132c6d14c971d98855eabea8c640", 0x2c}, {&(0x7f0000000780)="1681a897ef31e455f4fe3a9b69ee7342e5a7452f931812f08254bc29a4773d8cc5138a0e645db641660a13110e4d23c7b53a10b80f89b7c7fbe65e761de1d9a04bca3426b969ad6fb086670647272e75a69334584d1351a495ba34788a86aae2baf75dfbd43f0e5884f04d72e842c75555b78799756d84e4198bf27a5a3a78dd7bd5028ca43c06a992c26574", 0x8c}], 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100be14140c0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c0400000200000002000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200008302000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000000603"], 0x5c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m13.763403087s ago: executing program 0 (id=202): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x927c0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newaddr={0x28, 0x14, 0x9535393fea6299b5, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0xf2d250446cb45dbb, 0xfd, r3}, [@IFA_FLAGS={0x8, 0x8, 0x82}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffb}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c804}, 0x0) 1m13.690841489s ago: executing program 0 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e601bae74656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000001080)='./file0\x00') r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) openat(r3, &(0x7f0000000000)='./file0\x00', 0x400, 0x1b6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$cgroup_devices(r3, 0x0, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f000000e140)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8c4) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0xe2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r4, 0xfffff000) 1m13.482954513s ago: executing program 2 (id=204): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="18470082993230533bff0b543600f8ffffff0000000000000000185b0000040000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000007700"], &(0x7f0000000240)='syzkaller\x00', 0x1ff, 0x35, &(0x7f0000000280)=""/53, 0x41100, 0x10, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m13.482493723s ago: executing program 0 (id=205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="56000012582d391ea65d2b7bd1098a1d58f1c89059da4c146ed6bf5f22", @ANYRES16=r4, @ANYBLOB="01002cbd7080fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4a48ea8cd716f3b0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r7, 0x71, 0x8000000, r8, 0x0) fanotify_mark(r7, 0x12, 0x8000001, r6, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000440000000000800014000000008080002400000000608000340000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 1m13.481496251s ago: executing program 1 (id=206): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=""/104}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) r3 = io_uring_setup(0x14d9, &(0x7f0000000200)={0x0, 0xaf23, 0x20, 0x2, 0xb}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000002c0)={0x9, 0x0, &(0x7f0000000280)=[r0, r1, r1, r2]}, 0x4) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000300), 0x2, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7944}}}, 0x38) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0)="9d2d43f5dc523660611827ad4fcf31ed2e9c4613ab134a122fc7c328b7779804bb05c2e5f6fbfdf566aafa9604a3d4ea265f6720d14292a0bb08607eb19674563e8182e01626c3d36dbd7c74d6546ba5d6cf545dba175b7351a93e7db7ed4e20c643ef8f41a0af419a9664e39b678cfb3a22c3cd14c2dd79dba811695e704e4cc39867cb6ba58a6377567d6ad138b200de87aacb07efe03e796e5e71e4151154b77765c6f41c84675e74e54a4ef7e9bd1d4a8625566d9504f4ed0cb164580125a28cc666c0b5b2b529622fcfb8319cf917ed3e09fb31360598b1377054cfe68f379939", 0xe3, r0}, 0x68) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000580)={0x5, 0xcea4, 0x2040, 0x618}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000600)={0x3, [0x0, 0x0, 0x0]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) write$tun(r6, &(0x7f0000000680)={@val={0x0, 0x88be}, @val={0x1, 0x3, 0x3, 0x8, 0x10, 0x6}, @mpls={[{0x4, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0xc7, 0x0, 0x1}, {0x1}, {0x81}, {}], @generic="f72e2c80ee8aed4f7901bc8f1c9315a6f5ca09dfcfc332682ac493e227d6bd3f8a5b0d722b3cbafe43d4ed129aa4303675f9c8090df173ddd2cc104b8530a976b1326ce3daf4b3c75fdf6333e39f11143a22d439594dcafa0c11a1ff3f2cbbcc59e4e180110c8de66e2a39b408b387"}}, 0x95) sendmsg$nl_route_sched(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)=@gettaction={0x8c, 0x32, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x79f}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8081}, 0x480) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) socketpair(0x9, 0xa, 0x2, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) pipe2$9p(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RRENAMEAT(r8, &(0x7f0000000940)={0x7, 0x4b, 0x2}, 0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a40)={r5, &(0x7f0000000980)="64ec9f6fcce6c05fe7656e8a2a3f9f809e023b9e6bd343db477ede5c403a95a109681466619c0171f4e7231e87619f0d357b2d590874c1be1f454e831f974e7aa3936340c03be4781d76608e1898af250600bdd6c043195408dcaab84a66f37c9e", &(0x7f0000000a00)=@tcp6=r7, 0x1}, 0x20) getresgid(&(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00)=0x0) getresuid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)=0x0) write$P9_RSTATu(r8, &(0x7f0000000c00)={0x54, 0x7d, 0x2, {{0x0, 0x3d, 0x8, 0x25, {0x20, 0x0, 0x1}, 0x10040000, 0x6, 0x426e5d, 0x7, 0x2, '^\'', 0x5, '*$--&', 0x1, '\x00', 0x2, ']$'}, 0x2, '[\xa5', 0xee01, r9, r10}}, 0x54) dup3(r4, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000c80)={0x2, 0xffffffff, 0x7, {0x6, 0xfffff001}, 0x0, 0x1ff}) write$cgroup_pid(r5, &(0x7f0000000d40), 0x12) 1m13.480708531s ago: executing program 2 (id=207): fsopen(&(0x7f0000000000)='tracefs\x00', 0x1) (async) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x145c80, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r1}, 0x10) (async) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r3}, 0x10) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20004080) (async) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) (async) r5 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r5, 0xffff) (async) fcntl$addseals(r5, 0x409, 0x0) (async) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x8000}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) (async) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x24) write$binfmt_elf64(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4603240095258000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff0000380046"], 0x78) close(r13) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r14 = accept4(r12, 0x0, 0x0, 0x80800) sendmmsg$inet(r14, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000200)="299e985407", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b40)}}], 0x2, 0x0) (async) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000240)="0f0179b8660f38804259c4c121eec00f229f660f7f95000000000f009a0a000000660fe5e766ba200066ed66baf80cb86a342288ef66bafc0cb001ee66b897000f00d8", 0x43}], 0x1, 0x2, 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x60800, 0x0) 1m13.279984457s ago: executing program 2 (id=208): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000f80), 0x10842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0x40, &(0x7f0000000080)={0xa, 0x4e21, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffff060}, 0x1c) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x60000000, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0x40103e05, &(0x7f0000000040)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000e40)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000f00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@gettclass={0x24, 0x2a, 0x509, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0xb}, {0x1, 0xfff1}, {0xc, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x8d}}]}, &(0x7f0000000300)='GPL\x00', 0x1}, 0x94) 1m13.279475794s ago: executing program 1 (id=209): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r2) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff8000}]}]}, 0x38}}, 0x8059) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x44, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x44}}, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/128, 0x80}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f00000001c0)=""/240, 0xf0}, {&(0x7f00000002c0)=""/148, 0x94}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x5) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000005c0)={0x10000, r4}) readv(r6, &(0x7f0000001e40)=[{&(0x7f0000001780)=""/191, 0xbf}, {&(0x7f0000001840)=""/238, 0xee}, {&(0x7f0000001940)=""/140, 0x8c}, {&(0x7f0000001a00)=""/163, 0xa3}, {&(0x7f0000001ac0)=""/172, 0xac}, {&(0x7f0000001b80)=""/236, 0xec}, {&(0x7f0000001c80)=""/186, 0xba}, {&(0x7f0000000600)=""/55, 0x37}, {&(0x7f0000001d40)=""/210, 0xd2}, {&(0x7f0000000640)}], 0xa) 1m13.276932348s ago: executing program 2 (id=210): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/181, 0xb5}], 0x1, 0x1ff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) (async) r2 = creat(0x0, 0x0) open_by_handle_at(r2, 0x0, 0x830200) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x8}]}}}]}, 0x44}}, 0x4000000) (async, rerun: 64) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (rerun: 64) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) (async, rerun: 32) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) (rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@nfs_export_on}]}) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000400500040000000000050005000a00000014000780050015000600000008001240"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0xfffffffd], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) 1m12.692431984s ago: executing program 3 (id=211): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x24000420) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000400)=0xb8e7) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bda", 0x7) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af365", 0x1a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r6, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000440)={0x8, 0x0, [{0x80000019, 0x3, 0x2, 0x7, 0x10001, 0x10000, 0x5}, {0x7, 0xfffffff8, 0x6, 0x5, 0x7, 0x3, 0xdbe}, {0x7, 0x6, 0x2, 0x4, 0x0, 0x9, 0x401}, {0x1, 0x281, 0x6, 0x8, 0x2be00, 0xc, 0x9}, {0x80000007, 0x9, 0x0, 0x61bc6aea, 0x8, 0x9, 0x6a3b}, {0xd, 0x200, 0x4, 0xffffff90, 0x6, 0x0, 0x91}, {0xb, 0xc, 0x4, 0x800, 0x2, 0x2, 0xf}, {0xa, 0x7cb, 0x1, 0x6, 0x1, 0xfffffffd, 0x9}]}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x58, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048848}, 0x4000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 1m12.502713033s ago: executing program 2 (id=212): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/105, 0x69) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x9) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @remote}, 0x0, r2}) 1m12.433066065s ago: executing program 1 (id=213): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf256a00000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000000000500d2000700000068d603085ae4b2b21a8b8bfa0e68c73ba9b35d961649a86a0a201f5b2c46a26db010d52b55d1c32967df7b8568c5a836ea665158f396db157c5821057ae6154112e15d417f077dccf31bf8102845d24c4977a742eb971f2607c306e60a14228040a601004388be9ae383d5c33b4ffd41"], 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x24004110) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dmmidi(&(0x7f0000000300), 0xfffffffffffffffe, 0x80800) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r7, 0x40045702, &(0x7f0000000000)) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ppoll(&(0x7f0000000100)=[{r8, 0x6633}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)=ANY=[@ANYBLOB="300000003e001901feffffff00000000017c0000040042800c00018006000600800a00000c000280080007"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0200003300010029bd7000ffdbdb2502000000140001"], 0x21c}, 0x1, 0x0, 0x0, 0x34801}, 0x4000000) 1m12.23342532s ago: executing program 1 (id=214): socket$nl_rdma(0x10, 0x3, 0x14) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/61, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff28"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r7}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x3c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffe0, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002dc0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m12.050323028s ago: executing program 0 (id=215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x400800, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@iv={0x18}], 0x18}], 0x1, 0x999f14a524707237) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, r6, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x180) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8050) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20020000) 1m9.287304605s ago: executing program 3 (id=216): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4fffffede", &(0x7f0000002240)=""/4103, 0xfffffffe, 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 1m9.285993588s ago: executing program 2 (id=217): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x207c) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) 1m8.888676169s ago: executing program 0 (id=218): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000340)={0x10, 0x2c, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x10}], 0x2}, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m1.358841379s ago: executing program 1 (id=219): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0xfffffff2, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r3, &(0x7f00000004c0)=""/57, 0x39) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}, 0xf6}], 0x1, 0x40, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00S'], 0x24}}, 0x4000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x2c8}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r8, @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c0002800500160001000000"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r12}, 0x8) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000380)=0x0) bind$nfc_llcp(r13, &(0x7f00000002c0)={0x27, r14, 0xfffffffd, 0x7, 0x0, 0xfd, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x8000000000000038}, 0x60) recvmmsg(r13, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}, 0xe625}], 0x1, 0x2160, 0x0) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r9, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r15, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8004) 47.45158215s ago: executing program 32 (id=216): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4fffffede", &(0x7f0000002240)=""/4103, 0xfffffffe, 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 27.85922496s ago: executing program 33 (id=218): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000340)={0x10, 0x2c, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x10}], 0x2}, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) 14.451234253s ago: executing program 34 (id=219): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0xfffffff2, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r3, &(0x7f00000004c0)=""/57, 0x39) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}, 0xf6}], 0x1, 0x40, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00S'], 0x24}}, 0x4000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x2c8}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r8, @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c0002800500160001000000"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r12}, 0x8) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000380)=0x0) bind$nfc_llcp(r13, &(0x7f00000002c0)={0x27, r14, 0xfffffffd, 0x7, 0x0, 0xfd, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x8000000000000038}, 0x60) recvmmsg(r13, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}, 0xe625}], 0x1, 0x2160, 0x0) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r9, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r15, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8004) 0s ago: executing program 35 (id=217): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x207c) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:12116' (ED25519) to the list of known hosts. [ 38.966094][ T40] audit: type=1400 audit(1752136373.380:62): avc: denied { name_bind } for pid=5865 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.983595][ T40] audit: type=1400 audit(1752136373.390:63): avc: denied { write } for pid=5867 comm="sh" path="pipe:[6090]" dev="pipefs" ino=6090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.002122][ T40] audit: type=1400 audit(1752136373.410:64): avc: denied { execute } for pid=5867 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.011192][ T40] audit: type=1400 audit(1752136373.410:65): avc: denied { execute_no_trans } for pid=5867 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.905203][ T40] audit: type=1400 audit(1752136375.310:66): avc: denied { mounton } for pid=5867 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 40.913950][ T5867] cgroup: Unknown subsys name 'net' [ 41.042787][ T5867] cgroup: Unknown subsys name 'cpuset' [ 41.048864][ T5867] cgroup: Unknown subsys name 'rlimit' [ 41.261306][ T5933] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.909581][ T5867] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.815206][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 44.815228][ T40] audit: type=1400 audit(1752136379.220:80): avc: denied { execmem } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.035740][ T40] audit: type=1400 audit(1752136379.440:81): avc: denied { create } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.041539][ T40] audit: type=1400 audit(1752136379.440:82): avc: denied { read write } for pid=5946 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.049085][ T40] audit: type=1400 audit(1752136379.440:83): avc: denied { open } for pid=5946 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.056546][ T40] audit: type=1400 audit(1752136379.460:84): avc: denied { ioctl } for pid=5946 comm="syz-executor" path="socket:[2668]" dev="sockfs" ino=2668 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.090450][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.090738][ T5960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.090919][ T5961] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.091932][ T5961] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.092146][ T5961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.092776][ T5961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.093401][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.093618][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.094017][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.094266][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.096547][ T5959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.097299][ T5962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.097859][ T5961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.100051][ T5959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.103146][ T5961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.105376][ T5959] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.105758][ T40] audit: type=1400 audit(1752136379.510:85): avc: denied { read } for pid=5952 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.105785][ T40] audit: type=1400 audit(1752136379.510:86): avc: denied { open } for pid=5952 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.105806][ T40] audit: type=1400 audit(1752136379.510:87): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.107430][ T5961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.111105][ T5959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.117979][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.151311][ T5961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.266086][ T40] audit: type=1400 audit(1752136379.680:88): avc: denied { module_request } for pid=5952 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.292926][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 45.373458][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 45.451093][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.453631][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.456582][ T5952] bridge_slave_0: entered allmulticast mode [ 45.459307][ T5952] bridge_slave_0: entered promiscuous mode [ 45.463114][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.465306][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.467719][ T5952] bridge_slave_1: entered allmulticast mode [ 45.470292][ T5952] bridge_slave_1: entered promiscuous mode [ 45.522841][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 45.558013][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.567767][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.611733][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.614408][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.616831][ T5946] bridge_slave_0: entered allmulticast mode [ 45.619406][ T5946] bridge_slave_0: entered promiscuous mode [ 45.661280][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.663500][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.665757][ T5946] bridge_slave_1: entered allmulticast mode [ 45.668290][ T5946] bridge_slave_1: entered promiscuous mode [ 45.720260][ T5952] team0: Port device team_slave_0 added [ 45.723373][ T5952] team0: Port device team_slave_1 added [ 45.756830][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.758965][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.767352][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.773071][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.782723][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 45.788296][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.790800][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.801997][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.812211][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.847427][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.850295][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.853070][ T5947] bridge_slave_0: entered allmulticast mode [ 45.856727][ T5947] bridge_slave_0: entered promiscuous mode [ 45.907566][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.910183][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.912577][ T5947] bridge_slave_1: entered allmulticast mode [ 45.916061][ T5947] bridge_slave_1: entered promiscuous mode [ 46.000235][ T5952] hsr_slave_0: entered promiscuous mode [ 46.002410][ T5952] hsr_slave_1: entered promiscuous mode [ 46.008123][ T5946] team0: Port device team_slave_0 added [ 46.016239][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.020921][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.024520][ T5946] team0: Port device team_slave_1 added [ 46.118633][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.120837][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.123009][ T5951] bridge_slave_0: entered allmulticast mode [ 46.125611][ T5951] bridge_slave_0: entered promiscuous mode [ 46.156206][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.158469][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.166394][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.170151][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.172341][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.174538][ T5951] bridge_slave_1: entered allmulticast mode [ 46.178453][ T5951] bridge_slave_1: entered promiscuous mode [ 46.194807][ T5947] team0: Port device team_slave_0 added [ 46.198951][ T5947] team0: Port device team_slave_1 added [ 46.204396][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.206715][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.214393][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.281061][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.284259][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.286436][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.294052][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.299644][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.302468][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.312951][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.331581][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.383005][ T5946] hsr_slave_0: entered promiscuous mode [ 46.385310][ T5946] hsr_slave_1: entered promiscuous mode [ 46.387412][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.389730][ T5946] Cannot create hsr debugfs directory [ 46.476481][ T5951] team0: Port device team_slave_0 added [ 46.521514][ T5951] team0: Port device team_slave_1 added [ 46.526348][ T5947] hsr_slave_0: entered promiscuous mode [ 46.528669][ T5947] hsr_slave_1: entered promiscuous mode [ 46.530750][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.533109][ T5947] Cannot create hsr debugfs directory [ 46.632211][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.634672][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.642876][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.686190][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.688219][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.695411][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.768862][ T5951] hsr_slave_0: entered promiscuous mode [ 46.771929][ T5951] hsr_slave_1: entered promiscuous mode [ 46.774726][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.778323][ T5951] Cannot create hsr debugfs directory [ 46.818325][ T5952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.839012][ T5952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.887402][ T5952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.893190][ T5952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.014081][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.019276][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.024153][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.031706][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.096037][ T5947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.102200][ T5947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.109604][ T5947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.115508][ T5947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.116899][ T5961] Bluetooth: hci3: command tx timeout [ 47.186003][ T5961] Bluetooth: hci0: command tx timeout [ 47.186050][ T5950] Bluetooth: hci2: command tx timeout [ 47.188374][ T5959] Bluetooth: hci1: command tx timeout [ 47.201703][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.207884][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.214032][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.222923][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.236883][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.270631][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.287368][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.290132][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.307651][ T218] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.309807][ T218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.326191][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.358375][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.378436][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.392644][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.395630][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.409404][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.414361][ T218] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.417227][ T218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.433241][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.436183][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.452668][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.454902][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.474459][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.494591][ T40] audit: type=1400 audit(1752136381.900:89): avc: denied { sys_module } for pid=5952 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.494691][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.521252][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.535947][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.538838][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.557282][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.559589][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.617810][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.648277][ T5952] veth0_vlan: entered promiscuous mode [ 47.653841][ T5952] veth1_vlan: entered promiscuous mode [ 47.672465][ T5952] veth0_macvtap: entered promiscuous mode [ 47.677757][ T5952] veth1_macvtap: entered promiscuous mode [ 47.684713][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.695194][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.701466][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.707500][ T5952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.710268][ T5952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.713006][ T5952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.715622][ T5952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.769553][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.786839][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.789291][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.793672][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.823268][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.827130][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.829158][ T5946] veth0_vlan: entered promiscuous mode [ 47.850770][ T5946] veth1_vlan: entered promiscuous mode [ 47.855362][ T5951] veth0_vlan: entered promiscuous mode [ 47.873607][ T5951] veth1_vlan: entered promiscuous mode [ 47.879418][ T5952] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.894345][ T5947] veth0_vlan: entered promiscuous mode [ 47.899880][ T5946] veth0_macvtap: entered promiscuous mode [ 47.908728][ T5946] veth1_macvtap: entered promiscuous mode [ 47.919319][ T5947] veth1_vlan: entered promiscuous mode [ 47.927862][ T5951] veth0_macvtap: entered promiscuous mode [ 47.934025][ T5951] veth1_macvtap: entered promiscuous mode [ 47.947737][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.958995][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.970122][ T5946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.973660][ T5946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.977676][ T5946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.981237][ T5946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.990621][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.001153][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.014760][ T5951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.018747][ T5951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.022431][ T5951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.026832][ T5951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.042268][ T5947] veth0_macvtap: entered promiscuous mode [ 48.057335][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.059727][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.066186][ T6038] netlink: 'syz.2.5': attribute type 1 has an invalid length. [ 48.066576][ T5947] veth1_macvtap: entered promiscuous mode [ 48.110051][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.115365][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.137214][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.151329][ T6039] vlan2: entered allmulticast mode [ 48.153026][ T6039] veth1: entered allmulticast mode [ 48.161156][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.166770][ T5947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.169512][ T5947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.172165][ T5947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.175021][ T5947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.179531][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.181897][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.220006][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.221452][ T24] hid-generic 0005:16C0:5505.0002: hidraw1: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 48.223111][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.243527][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.247528][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.271448][ T6044] fido_id[6044]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 48.291423][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.293760][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.775344][ T5996] hid-generic 0005:16C0:5505.0003: hidraw1: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 48.807738][ T6073] fido_id[6073]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 48.939025][ T6080] syz_tun: entered allmulticast mode [ 48.947848][ T6080] dvmrp1: entered allmulticast mode [ 48.951963][ T6079] syz_tun: left allmulticast mode [ 49.186662][ T5959] Bluetooth: hci3: command tx timeout [ 49.266120][ T5959] Bluetooth: hci2: command tx timeout [ 49.266709][ T5950] Bluetooth: hci1: command tx timeout [ 49.277186][ T5950] Bluetooth: hci0: command tx timeout [ 49.833435][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 49.833445][ T40] audit: type=1400 audit(1752136384.240:135): avc: denied { setopt } for pid=6092 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.125239][ T6091] syz.1.21 (6091): drop_caches: 2 [ 50.635321][ T6120] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.640695][ T40] audit: type=1400 audit(1752136385.050:136): avc: denied { getopt } for pid=6119 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.669161][ T40] audit: type=1400 audit(1752136385.080:137): avc: denied { create } for pid=6121 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 50.675843][ T40] audit: type=1400 audit(1752136385.080:138): avc: denied { create } for pid=6121 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 50.683146][ T40] audit: type=1400 audit(1752136385.080:139): avc: denied { bind } for pid=6121 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 50.691105][ T40] audit: type=1400 audit(1752136385.080:140): avc: denied { connect } for pid=6121 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 50.722351][ T40] audit: type=1400 audit(1752136385.130:141): avc: denied { ioctl } for pid=6121 comm="syz.2.33" path="socket:[6830]" dev="sockfs" ino=6830 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 50.735356][ T6124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.740306][ T6124] bond0: (slave rose0): Enslaving as an active interface with an up link [ 50.745085][ T40] audit: type=1400 audit(1752136385.150:142): avc: denied { search } for pid=6125 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.751978][ T40] audit: type=1400 audit(1752136385.150:143): avc: denied { search } for pid=6125 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1905 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.752002][ T40] audit: type=1400 audit(1752136385.150:144): avc: denied { search } for pid=6125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.789651][ T6128] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 51.276079][ T5950] Bluetooth: hci3: command tx timeout [ 51.346098][ T5950] Bluetooth: hci2: command tx timeout [ 51.348052][ T5950] Bluetooth: hci1: command tx timeout [ 52.875822][ T5959] Bluetooth: hci0: command tx timeout [ 53.270348][ T6203] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 53.347428][ T5959] Bluetooth: hci3: command tx timeout [ 53.425838][ T5959] Bluetooth: hci1: command tx timeout [ 53.426274][ T5950] Bluetooth: hci2: command tx timeout [ 53.655035][ T6214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.665355][ T1151] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 53.922170][ T6223] lo speed is unknown, defaulting to 1000 [ 53.933242][ T6223] lo speed is unknown, defaulting to 1000 [ 53.939712][ T6223] lo speed is unknown, defaulting to 1000 [ 54.184373][ T6228] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.191530][ T6228] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 54.232470][ T6223] infiniband syz0: set active [ 54.234221][ T6223] infiniband syz0: added lo [ 54.246734][ T59] lo speed is unknown, defaulting to 1000 [ 54.254126][ T6223] RDS/IB: syz0: added [ 54.256271][ T6223] smc: adding ib device syz0 with port count 1 [ 54.258403][ T6223] smc: ib device syz0 port 1 has pnetid [ 54.261212][ T6223] lo speed is unknown, defaulting to 1000 [ 54.354212][ T6223] lo speed is unknown, defaulting to 1000 [ 54.438380][ T6223] lo speed is unknown, defaulting to 1000 [ 54.528008][ T6223] lo speed is unknown, defaulting to 1000 [ 54.655238][ T59] lo speed is unknown, defaulting to 1000 [ 54.899822][ T6256] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 55.366653][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 55.372228][ T40] audit: type=1400 audit(1752136389.760:206): avc: denied { write } for pid=6264 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.714320][ T40] audit: type=1400 audit(1752136390.120:207): avc: denied { read write } for pid=6271 comm="syz.0.75" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 55.722192][ T40] audit: type=1400 audit(1752136390.120:208): avc: denied { open } for pid=6271 comm="syz.0.75" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 55.805712][ T40] audit: type=1400 audit(1752136390.210:209): avc: denied { create } for pid=6274 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.822333][ T40] audit: type=1400 audit(1752136390.210:210): avc: denied { bind } for pid=6274 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.846532][ T40] audit: type=1400 audit(1752136390.210:211): avc: denied { connect } for pid=6274 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.854248][ T40] audit: type=1400 audit(1752136390.210:212): avc: denied { write } for pid=6274 comm="syz.0.76" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.899604][ T40] audit: type=1400 audit(1752136390.310:213): avc: denied { create } for pid=6278 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.052688][ T40] audit: type=1400 audit(1752136390.460:214): avc: denied { connect } for pid=6278 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.072847][ T6282] batman_adv: batadv0: Adding interface: gretap1 [ 56.074994][ T6282] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.083707][ T6282] batman_adv: batadv0: Interface activated: gretap1 [ 56.123722][ T40] audit: type=1400 audit(1752136390.530:215): avc: denied { connect } for pid=6284 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.688343][ T6298] netlink: 80 bytes leftover after parsing attributes in process `syz.2.85'. [ 59.004988][ T5950] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 59.405666][ C0] sched: DL replenish lagged too much [ 66.645984][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 66.645995][ T40] audit: type=1400 audit(1752136401.050:225): avc: denied { read write } for pid=6354 comm="syz.2.102" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.659286][ T40] audit: type=1400 audit(1752136401.050:226): avc: denied { open } for pid=6354 comm="syz.2.102" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.672667][ T40] audit: type=1400 audit(1752136401.050:227): avc: denied { ioctl } for pid=6354 comm="syz.2.102" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.683782][ T40] audit: type=1400 audit(1752136401.080:228): avc: denied { read } for pid=6358 comm="syz.3.103" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.688200][ T6359] xt_hashlimit: size too large, truncated to 1048576 [ 66.695092][ T40] audit: type=1400 audit(1752136401.080:229): avc: denied { open } for pid=6358 comm="syz.3.103" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.718432][ T40] audit: type=1400 audit(1752136401.100:230): avc: denied { ioctl } for pid=6358 comm="syz.3.103" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.834330][ T40] audit: type=1400 audit(1752136401.240:231): avc: denied { read } for pid=6365 comm="syz.0.104" path="socket:[9821]" dev="sockfs" ino=9821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.853008][ T40] audit: type=1400 audit(1752136401.260:232): avc: denied { create } for pid=6364 comm="dhcpcd-run-hook" name="resolv.conf.bond0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.880138][ T40] audit: type=1400 audit(1752136401.260:233): avc: denied { write open } for pid=6364 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.bond0.ipv4ll" dev="tmpfs" ino=2398 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.908772][ T6172] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.914962][ T40] audit: type=1400 audit(1752136401.260:234): avc: denied { append } for pid=6364 comm="dhcpcd-run-hook" name="resolv.conf.bond0.ipv4ll" dev="tmpfs" ino=2398 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.995830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.999293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.002596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.005167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.007969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.011315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.014235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.056106][ T6172] usb 7-1: Using ep0 maxpacket: 32 [ 67.060591][ T6172] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 67.063087][ T6172] usb 7-1: config 0 has no interface number 0 [ 67.066885][ T6172] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 67.069731][ T6172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.072342][ T6172] usb 7-1: Product: syz [ 67.073657][ T6172] usb 7-1: Manufacturer: syz [ 67.075165][ T6172] usb 7-1: SerialNumber: syz [ 67.091594][ T6172] usb 7-1: config 0 descriptor?? [ 67.102127][ T6172] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 67.105160][ T6172] usb 7-1: selecting invalid altsetting 1 [ 67.112971][ T6172] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 67.124166][ T6172] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 67.136784][ T6172] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 67.139824][ T6172] usb 7-1: media controller created [ 67.154374][ T6172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 67.399297][ T6403] capability: warning: `syz.3.117' uses deprecated v2 capabilities in a way that may be insecure [ 67.741497][ T6427] kernel profiling enabled (shift: 7) [ 67.796178][ T6433] misc userio: The device must be registered before sending interrupts [ 67.868085][ T6438] capability: warning: `syz.3.121' uses 32-bit capabilities (legacy support in use) [ 67.876677][ T6438] ======================================================= [ 67.876677][ T6438] WARNING: The mand mount option has been deprecated and [ 67.876677][ T6438] and is ignored by this kernel. Remove the mand [ 67.876677][ T6438] option from the mount to silence this warning. [ 67.876677][ T6438] ======================================================= [ 67.887883][ T6438] devpts: Unknown parameter '~0x000000000000ee00' [ 68.226720][ T6172] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 68.232130][ T6172] zl10353_read_register: readreg error (reg=127, ret==-110) [ 68.246629][ T6355] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 68.259147][ T6471] batadv_slave_1: entered promiscuous mode [ 68.261552][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 68.288733][ T6172] usb 7-1: USB disconnect, device number 2 [ 68.428739][ T6471] team0 (unregistering): Port device team_slave_0 removed [ 68.437030][ T6471] team0 (unregistering): Port device team_slave_1 removed [ 68.501243][ T6470] batadv_slave_1: left promiscuous mode [ 68.548011][ T6483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.727389][ T6493] tipc: Started in network mode [ 68.751385][ T6493] tipc: Node identity f224f39218ab, cluster identity 4711 [ 68.755354][ T6493] tipc: Enabled bearer , priority 0 [ 68.761870][ T6493] syzkaller0: entered promiscuous mode [ 68.762940][ T6495] xt_nfacct: accounting object `syz1' does not exists [ 68.765895][ T6493] syzkaller0: entered allmulticast mode [ 68.838085][ T6493] tipc: Resetting bearer [ 68.853434][ T6492] tipc: Resetting bearer [ 68.888208][ T6492] tipc: Disabling bearer [ 69.058947][ T6509] netlink: 9 bytes leftover after parsing attributes in process `syz.0.143'. [ 69.061931][ T6509] 0: renamed from hsr0 (while UP) [ 69.090505][ T6511] Zero length message leads to an empty skb [ 69.138087][ T6509] 0: entered allmulticast mode [ 69.141367][ T6509] hsr_slave_0: entered allmulticast mode [ 69.143162][ T6509] hsr_slave_1: entered allmulticast mode [ 69.145240][ T6509] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 69.217787][ T6528] xt_hashlimit: max too large, truncated to 1048576 [ 69.220261][ T6528] xt_bpf: check failed: parse error [ 69.222497][ T6528] tmpfs: Bad value for 'nr_inodes' [ 69.271578][ T6535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.299486][ T6530] block nbd3: shutting down sockets [ 69.707088][ T6556] warning: `syz.0.157' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.784911][ T6566] syz.2.161 uses obsolete (PF_INET,SOCK_PACKET) [ 69.902959][ T6576] process 'syz.2.163' launched './file1' with NULL argv: empty string added [ 70.000015][ T6583] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.025764][ T53] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.036061][ T6172] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 70.176025][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 70.185752][ T53] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 70.188876][ T53] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 70.199899][ T53] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.202812][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.205784][ T6172] usb 6-1: Using ep0 maxpacket: 8 [ 70.214546][ T6172] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.215157][ T53] usb 5-1: Product: 腗拱鹖脓芟宇蠪祿淨風ଯﱧ㕌⫣剨㵚ཚ굛ﱤ诡吜鏱ꙥ륕鄞윅հǡ퉒䳼䌅螟ሆ蒯ꅗﳸ狋䥥ძꢺسꤖ냎ঈ헀撔⾆﷙൧ᝡ챋꽿욟⯃㩑⌐傭⾫複蘈謔駖쉽ᴉ麟풸븞☴擤鏹芑ᰇ腮ꥉ쿺⒄䵓뮈㨭ﲤ稏塞퍮᭕嗗씆휱 [ 70.227612][ T6172] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.236031][ T6172] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.239162][ T53] usb 5-1: Manufacturer: 吶盃㱍７搠筏䂒⍘鈨﹜ឆ夺淋빡釅淢Ｂ嶽㓽 [ 70.242272][ T53] usb 5-1: SerialNumber: ఌ [ 70.242354][ T6172] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.258017][ T6172] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 70.260843][ T6172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.468734][ T53] cdc_ncm 5-1:1.0: bind() failure [ 70.471416][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.472310][ T53] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 70.474345][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.478601][ T53] cdc_ncm 5-1:1.1: bind() failure [ 70.485375][ T53] usb 5-1: USB disconnect, device number 2 [ 70.529891][ T6172] usb 6-1: GET_CAPABILITIES returned 0 [ 70.531749][ T6172] usbtmc 6-1:16.0: can't read capabilities [ 70.734032][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.740587][ T6565] 9p: Unknown access argument 18446744073709551615: -34 [ 70.830035][ T6172] usb 6-1: USB disconnect, device number 2 [ 71.119336][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.121425][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.212917][ T6623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6623 comm=syz.3.178 [ 71.242208][ T6628] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 71.255522][ T6631] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 71.333919][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.181'. [ 71.384003][ T6624] kAFS: unparsable volume name [ 71.401763][ T6638] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 71.468606][ T6640] binder: 6639:6640 unknown command 0 [ 71.470333][ T6640] binder: 6639:6640 ioctl c0306201 200000000b80 returned -22 [ 71.473218][ T6640] Bluetooth: MGMT ver 1.23 [ 71.475912][ T6640] netlink: 14 bytes leftover after parsing attributes in process `syz.1.183'. [ 71.672561][ T6643] binder: 6642:6643 ioctl c0403d08 200000000140 returned -22 [ 71.679732][ T40] kauditd_printk_skb: 113 callbacks suppressed [ 71.679747][ T40] audit: type=1400 audit(1752136406.090:348): avc: denied { append } for pid=6642 comm="syz.1.184" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.741764][ T40] audit: type=1400 audit(1752136406.150:349): avc: denied { name_bind } for pid=6642 comm="syz.1.184" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 71.750836][ T40] audit: type=1400 audit(1752136406.150:350): avc: denied { node_bind } for pid=6642 comm="syz.1.184" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 71.791153][ T6646] veth0_to_bond: entered allmulticast mode [ 71.801717][ T6646] lo: entered promiscuous mode [ 71.804275][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'. [ 71.808501][ T6646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.893110][ T6652] netlink: 'syz.1.187': attribute type 11 has an invalid length. [ 71.896889][ T6652] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.187'. [ 71.903009][ T6652] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 71.935266][ T6652] team0: Port device wlan1 added [ 71.949840][ T40] audit: type=1400 audit(1752136406.360:351): avc: denied { create } for pid=6651 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.957756][ T40] audit: type=1400 audit(1752136406.360:352): avc: denied { write } for pid=6651 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.958939][ T6652] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 71.964907][ T40] audit: type=1400 audit(1752136406.360:353): avc: denied { nlmsg_write } for pid=6651 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.979241][ T40] audit: type=1400 audit(1752136406.370:354): avc: denied { read append } for pid=6651 comm="syz.1.187" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.980208][ T6651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.987537][ T40] audit: type=1400 audit(1752136406.370:355): avc: denied { open } for pid=6651 comm="syz.1.187" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.012304][ T40] audit: type=1400 audit(1752136406.370:356): avc: denied { ioctl } for pid=6651 comm="syz.1.187" path="/dev/input/event1" dev="devtmpfs" ino=942 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.023244][ T40] audit: type=1326 audit(1752136406.380:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.0.176" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb998e929 code=0x7fc00000 [ 72.112825][ T6659] smb3: Unknown parameter 'rdma' [ 72.114697][ T6659] zonefs: Unknown parameter 'logon' [ 72.242818][ T6666] xt_TPROXY: Can be used only with -p tcp or -p udp [ 72.287908][ T61] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.321502][ T6668] ISOFS: Unable to identify CD-ROM format. [ 72.435749][ T61] usb 5-1: Using ep0 maxpacket: 32 [ 72.444836][ T61] usb 5-1: config 1 interface 0 has no altsetting 0 [ 72.450804][ T61] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.40 [ 72.453782][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.456577][ T61] usb 5-1: Product: А [ 72.457992][ T61] usb 5-1: Manufacturer: я [ 72.459827][ T61] usb 5-1: SerialNumber: 현꓁﹢侄殑棂艎谄續ﷰ雟雡춣픕晞멘䷔ᒶ酀橕棁ᵥₔ얢狨"꽞ⶆ˧飇ᵋ幄뎢鋭缧ʧ܀骿ቲ鞿 [ 72.880631][ T61] usbhid 5-1:1.0: can't add hid device: -71 [ 72.882572][ T61] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 72.887638][ T61] usb 5-1: USB disconnect, device number 3 [ 72.925779][ T53] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 73.075907][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 73.081280][ T53] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.085423][ T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.089403][ T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.093456][ T53] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.098765][ T53] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.102433][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.321739][ T53] usb 8-1: usb_control_msg returned -32 [ 73.323553][ T53] usbtmc 8-1:16.0: can't read capabilities [ 74.312817][ T6684] netlink: 68 bytes leftover after parsing attributes in process `syz.0.200'. [ 74.321509][ T6684] netlink: 72 bytes leftover after parsing attributes in process `syz.0.200'. [ 74.366804][ T6686] bridge_slave_0: left allmulticast mode [ 74.368689][ T6686] bridge_slave_0: left promiscuous mode [ 74.371324][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.422987][ T6686] bridge_slave_1: left allmulticast mode [ 74.429680][ T6686] bridge_slave_1: left promiscuous mode [ 74.434108][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.479232][ T6686] bond0: (slave bond_slave_0): Releasing backup interface [ 74.527229][ T6686] bond0: (slave bond_slave_1): Releasing backup interface [ 74.551312][ T6686] team0: Port device team_slave_0 removed [ 74.557998][ T6686] team0: Port device team_slave_1 removed [ 74.560133][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.562499][ T6686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.577649][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.580310][ T6686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.608919][ T6686] batman_adv: batadv0: Interface deactivated: gretap1 [ 74.611743][ T6686] batman_adv: batadv0: Removing interface: gretap1 [ 74.936318][ T53] usb 8-1: USB disconnect, device number 2 [ 75.040616][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.205'. [ 75.043510][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.205'. [ 75.046308][ T6172] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 75.048791][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.205'. [ 75.051685][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.205'. [ 75.195722][ T6172] usb 7-1: Using ep0 maxpacket: 32 [ 75.201241][ T6172] usb 7-1: config 0 has an invalid interface number: 247 but max is 0 [ 75.204056][ T6172] usb 7-1: config 0 has no interface number 0 [ 75.210854][ T6172] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 75.214018][ T6172] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 75.216688][ T6172] usb 7-1: Product: syz [ 75.218044][ T6172] usb 7-1: Manufacturer: syz [ 75.223179][ T6172] usb 7-1: config 0 descriptor?? [ 75.517058][ T6172] usb 7-1: USB disconnect, device number 3 [ 75.883215][ T6724] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 75.887031][ T6724] netlink: 500 bytes leftover after parsing attributes in process `syz.1.213'. [ 77.371130][ T40] kauditd_printk_skb: 116 callbacks suppressed [ 77.371145][ T40] audit: type=1400 audit(1752136411.760:474): avc: denied { recv } for pid=5867 comm="syz-executor" saddr=127.0.0.1 src=39614 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 78.717658][ T40] audit: type=1400 audit(1752136411.760:475): avc: denied { recv } for pid=5867 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=39614 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 78.725355][ T40] audit: type=1400 audit(1752136411.920:476): avc: denied { egress } for pid=46 comm="kworker/u32:2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 80.779278][ T40] audit: type=1400 audit(1752136411.920:477): avc: denied { sendto } for pid=46 comm="kworker/u32:2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 81.416995][ T6727] 9pnet_fd: p9_fd_create_tcp (6727): problem connecting socket to 127.0.0.1 [ 91.510096][ T10] cfg80211: failed to load regulatory.db [ 111.918399][ T40] audit: type=1400 audit(1752136446.270:478): avc: denied { execute } for pid=6741 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 112.865811][ T40] audit: type=1400 audit(1752136447.040:479): avc: denied { execute_no_trans } for pid=6741 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 132.717067][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.723324][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.147496][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.158122][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.018141][ T40] audit: type=1400 audit(1752136539.380:480): avc: denied { read write } for pid=6754 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 205.677346][ T40] audit: type=1400 audit(1752136539.380:481): avc: denied { open } for pid=6754 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 234.946479][ C1] ================================================================== [ 234.948990][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x45a/0x4d0 [ 234.951386][ C1] Read of size 2 at addr ffff888053c93c2a by task kworker/u32:6/1142 [ 234.954980][ C1] [ 234.955723][ C1] CPU: 1 UID: 0 PID: 1142 Comm: kworker/u32:6 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 234.955736][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 234.955744][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 234.955758][ C1] Call Trace: [ 234.955762][ C1] [ 234.955766][ C1] dump_stack_lvl+0x116/0x1f0 [ 234.955781][ C1] print_report+0xcd/0x680 [ 234.955797][ C1] ? __virt_addr_valid+0x81/0x610 [ 234.955809][ C1] ? __phys_addr+0xe8/0x180 [ 234.955820][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 234.955833][ C1] kasan_report+0xe0/0x110 [ 234.955847][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 234.955861][ C1] rose_timer_expiry+0x45a/0x4d0 [ 234.955874][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 234.955886][ C1] call_timer_fn+0x19a/0x620 [ 234.955900][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 234.955916][ C1] ? mark_held_locks+0x49/0x80 [ 234.955931][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 234.955944][ C1] __run_timers+0x6ef/0x960 [ 234.955960][ C1] ? __pfx___run_timers+0x10/0x10 [ 234.955979][ C1] run_timer_base+0x114/0x190 [ 234.955994][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 234.956009][ C1] run_timer_softirq+0x1a/0x40 [ 234.956024][ C1] handle_softirqs+0x219/0x8e0 [ 234.956038][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 234.956050][ C1] ? cfg80211_inform_single_bss_data+0x9ae/0x1df0 [ 234.956066][ C1] do_softirq+0xb2/0xf0 [ 234.956078][ C1] [ 234.956081][ C1] [ 234.956084][ C1] __local_bh_enable_ip+0x100/0x120 [ 234.956096][ C1] cfg80211_inform_single_bss_data+0x9ae/0x1df0 [ 234.956113][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 234.956128][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 234.956147][ C1] ? ieee802_11_parse_elems_full+0x1d7/0x3780 [ 234.956160][ C1] ? stack_trace_save+0x8e/0xc0 [ 234.956174][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 234.956187][ C1] ? stack_depot_save_flags+0x28/0xa40 [ 234.956209][ C1] ? cfg80211_inform_bss_data+0x224/0x3bc0 [ 234.956223][ C1] cfg80211_inform_bss_data+0x224/0x3bc0 [ 234.956238][ C1] ? kasan_save_track+0x14/0x30 [ 234.956249][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 234.956261][ C1] ? __kmalloc_noprof+0x223/0x510 [ 234.956274][ C1] ? ieee802_11_parse_elems_full+0x1d7/0x3780 [ 234.956286][ C1] ? ieee80211_iface_work+0xbf4/0x1020 [ 234.956299][ C1] ? worker_thread+0x6c8/0xf10 [ 234.956309][ C1] ? kthread+0x3c5/0x780 [ 234.956318][ C1] ? ret_from_fork+0x5d7/0x6f0 [ 234.956333][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 234.956345][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 234.956361][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.956372][ C1] ? _ieee802_11_parse_elems_full+0x626/0x44e0 [ 234.956389][ C1] ? __lock_acquire+0x622/0x1c90 [ 234.956399][ C1] ? ieee802_11_parse_elems_full+0x145/0x3780 [ 234.956413][ C1] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 234.956430][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 234.956442][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 234.956455][ C1] ? find_held_lock+0x2b/0x80 [ 234.956468][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x18cb/0x2fd0 [ 234.956480][ C1] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 234.956495][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 234.956511][ C1] ? kcov_remote_start+0x3c9/0x6d0 [ 234.956523][ C1] ieee80211_iface_work+0xbf4/0x1020 [ 234.956535][ C1] ? rcu_is_watching+0x12/0xc0 [ 234.956549][ C1] cfg80211_wiphy_work+0x3dc/0x550 [ 234.956559][ C1] process_one_work+0x9cf/0x1b70 [ 234.956571][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 234.956584][ C1] ? __pfx_process_one_work+0x10/0x10 [ 234.956596][ C1] ? assign_work+0x1a0/0x250 [ 234.956606][ C1] worker_thread+0x6c8/0xf10 [ 234.956618][ C1] ? __pfx_worker_thread+0x10/0x10 [ 234.956629][ C1] kthread+0x3c5/0x780 [ 234.956638][ C1] ? __pfx_kthread+0x10/0x10 [ 234.956647][ C1] ? rcu_is_watching+0x12/0xc0 [ 234.956660][ C1] ? __pfx_kthread+0x10/0x10 [ 234.956669][ C1] ret_from_fork+0x5d7/0x6f0 [ 234.956682][ C1] ? __pfx_kthread+0x10/0x10 [ 234.956692][ C1] ret_from_fork_asm+0x1a/0x30 [ 234.956705][ C1] [ 234.956708][ C1] [ 235.086592][ C1] Allocated by task 6172: [ 235.087925][ C1] kasan_save_stack+0x33/0x60 [ 235.089420][ C1] kasan_save_track+0x14/0x30 [ 235.090885][ C1] __kasan_kmalloc+0xaa/0xb0 [ 235.092317][ C1] drm_atomic_helper_setup_commit+0x63a/0x15d0 [ 235.094205][ C1] drm_atomic_helper_commit+0xa9/0x380 [ 235.095858][ C1] drm_atomic_commit+0x234/0x300 [ 235.097452][ C1] drm_atomic_helper_dirtyfb+0x5fd/0x780 [ 235.099176][ C1] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x340 [ 235.101059][ C1] drm_fb_helper_damage_work+0x27e/0x5f0 [ 235.102768][ C1] process_one_work+0x9cf/0x1b70 [ 235.104262][ C1] worker_thread+0x6c8/0xf10 [ 235.105682][ C1] kthread+0x3c5/0x780 [ 235.106925][ C1] ret_from_fork+0x5d7/0x6f0 [ 235.108336][ C1] ret_from_fork_asm+0x1a/0x30 [ 235.109805][ C1] [ 235.110565][ C1] Freed by task 6172: [ 235.111794][ C1] kasan_save_stack+0x33/0x60 [ 235.113244][ C1] kasan_save_track+0x14/0x30 [ 235.114774][ C1] kasan_save_free_info+0x3b/0x60 [ 235.116311][ C1] __kasan_slab_free+0x51/0x70 [ 235.117799][ C1] kfree+0x2b4/0x4d0 [ 235.119013][ C1] __drm_atomic_helper_plane_destroy_state+0x1bb/0x1f0 [ 235.121075][ C1] drm_atomic_helper_plane_destroy_state+0x15/0x20 [ 235.123035][ C1] drm_atomic_state_default_clear+0x69b/0xe40 [ 235.124877][ C1] __drm_atomic_state_free+0x185/0x2b0 [ 235.126546][ C1] drm_atomic_helper_dirtyfb+0x572/0x780 [ 235.128229][ C1] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x340 [ 235.130140][ C1] drm_fb_helper_damage_work+0x27e/0x5f0 [ 235.131879][ C1] process_one_work+0x9cf/0x1b70 [ 235.133426][ C1] worker_thread+0x6c8/0xf10 [ 235.134864][ C1] kthread+0x3c5/0x780 [ 235.136136][ C1] ret_from_fork+0x5d7/0x6f0 [ 235.137580][ C1] ret_from_fork_asm+0x1a/0x30 [ 235.139050][ C1] [ 235.139789][ C1] The buggy address belongs to the object at ffff888053c93c00 [ 235.139789][ C1] which belongs to the cache kmalloc-512 of size 512 [ 235.143987][ C1] The buggy address is located 42 bytes inside of [ 235.143987][ C1] freed 512-byte region [ffff888053c93c00, ffff888053c93e00) [ 235.148049][ C1] [ 235.148793][ C1] The buggy address belongs to the physical page: [ 235.150684][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53c90 [ 235.153274][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 235.155722][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 235.157994][ C1] page_type: f5(slab) [ 235.159211][ C1] raw: 00fff00000000040 ffff88801b842c80 dead000000000100 dead000000000122 [ 235.161768][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 235.164338][ C1] head: 00fff00000000040 ffff88801b842c80 dead000000000100 dead000000000122 [ 235.166917][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 235.169502][ C1] head: 00fff00000000002 ffffea00014f2401 00000000ffffffff 00000000ffffffff [ 235.172098][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 235.174631][ C1] page dumped because: kasan: bad access detected [ 235.176519][ C1] page_owner tracks the page as allocated [ 235.178198][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5953, tgid 5953 (udevd), ts 48882901551, free_ts 48878271786 [ 235.184137][ C1] post_alloc_hook+0x1c0/0x230 [ 235.185578][ C1] get_page_from_freelist+0x1321/0x3890 [ 235.187212][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 235.188971][ C1] alloc_pages_mpol+0x1fb/0x550 [ 235.190421][ C1] new_slab+0x23b/0x330 [ 235.191663][ C1] ___slab_alloc+0xd9c/0x1940 [ 235.193100][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 235.194679][ C1] __kmalloc_cache_noprof+0xfb/0x3e0 [ 235.196207][ C1] kernfs_fop_open+0x244/0xda0 [ 235.197620][ C1] do_dentry_open+0x741/0x1c10 [ 235.199132][ C1] vfs_open+0x82/0x3f0 [ 235.200365][ C1] path_openat+0x1de4/0x2cb0 [ 235.201738][ C1] do_filp_open+0x20b/0x470 [ 235.203074][ C1] do_sys_openat2+0x11b/0x1d0 [ 235.204476][ C1] __x64_sys_openat+0x174/0x210 [ 235.205987][ C1] do_syscall_64+0xcd/0x4c0 [ 235.207386][ C1] page last free pid 5360 tgid 5360 stack trace: [ 235.209329][ C1] __free_frozen_pages+0x7fe/0x1180 [ 235.210933][ C1] __put_partials+0x16d/0x1c0 [ 235.212388][ C1] qlist_free_all+0x4d/0x120 [ 235.213828][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 235.215487][ C1] __kasan_slab_alloc+0x69/0x90 [ 235.217003][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 235.218732][ C1] getname_flags.part.0+0x4c/0x550 [ 235.220306][ C1] getname_flags+0x93/0xf0 [ 235.221717][ C1] do_readlinkat+0xb4/0x3a0 [ 235.223144][ C1] __x64_sys_readlink+0x78/0xc0 [ 235.224614][ C1] do_syscall_64+0xcd/0x4c0 [ 235.226004][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.227808][ C1] [ 235.228563][ C1] Memory state around the buggy address: [ 235.230252][ C1] ffff888053c93b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 235.232651][ C1] ffff888053c93b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 235.235055][ C1] >ffff888053c93c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.237465][ C1] ^ [ 235.239125][ C1] ffff888053c93c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.241536][ C1] ffff888053c93d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.243962][ C1] ================================================================== [ 235.247405][ C1] hpet: Lost 18 RTC interrupts [ 235.249227][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 235.251405][ C1] CPU: 1 UID: 0 PID: 1142 Comm: kworker/u32:6 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 235.255069][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.258309][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 235.260213][ C1] Call Trace: [ 235.261263][ C1] [ 235.262175][ C1] dump_stack_lvl+0x3d/0x1f0 [ 235.263606][ C1] panic+0x71c/0x800 [ 235.264817][ C1] ? __pfx_panic+0x10/0x10 [ 235.266181][ C1] ? irqentry_exit+0x3b/0x90 [ 235.267606][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 235.269212][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 235.270777][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 235.272357][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 235.273940][ C1] check_panic_on_warn+0xab/0xb0 [ 235.275469][ C1] end_report+0x107/0x170 [ 235.276815][ C1] kasan_report+0xee/0x110 [ 235.278196][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 235.279769][ C1] rose_timer_expiry+0x45a/0x4d0 [ 235.281298][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 235.282974][ C1] call_timer_fn+0x19a/0x620 [ 235.284405][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 235.285995][ C1] ? mark_held_locks+0x49/0x80 [ 235.287483][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 235.289146][ C1] __run_timers+0x6ef/0x960 [ 235.290544][ C1] ? __pfx___run_timers+0x10/0x10 [ 235.292107][ C1] run_timer_base+0x114/0x190 [ 235.293574][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 235.295179][ C1] run_timer_softirq+0x1a/0x40 [ 235.296664][ C1] handle_softirqs+0x219/0x8e0 [ 235.298149][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 235.299785][ C1] ? cfg80211_inform_single_bss_data+0x9ae/0x1df0 [ 235.301746][ C1] do_softirq+0xb2/0xf0 [ 235.303032][ C1] [ 235.303960][ C1] [ 235.304882][ C1] __local_bh_enable_ip+0x100/0x120 [ 235.306491][ C1] cfg80211_inform_single_bss_data+0x9ae/0x1df0 [ 235.308412][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 235.310438][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 235.311958][ C1] ? ieee802_11_parse_elems_full+0x1d7/0x3780 [ 235.313823][ C1] ? stack_trace_save+0x8e/0xc0 [ 235.315318][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 235.316954][ C1] ? stack_depot_save_flags+0x28/0xa40 [ 235.318601][ C1] ? cfg80211_inform_bss_data+0x224/0x3bc0 [ 235.320390][ C1] cfg80211_inform_bss_data+0x224/0x3bc0 [ 235.322120][ C1] ? kasan_save_track+0x14/0x30 [ 235.323627][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 235.325111][ C1] ? __kmalloc_noprof+0x223/0x510 [ 235.326659][ C1] ? ieee802_11_parse_elems_full+0x1d7/0x3780 [ 235.328496][ C1] ? ieee80211_iface_work+0xbf4/0x1020 [ 235.330178][ C1] ? worker_thread+0x6c8/0xf10 [ 235.331648][ C1] ? kthread+0x3c5/0x780 [ 235.332971][ C1] ? ret_from_fork+0x5d7/0x6f0 [ 235.334460][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 235.335984][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 235.337852][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.339673][ C1] ? _ieee802_11_parse_elems_full+0x626/0x44e0 [ 235.341511][ C1] ? __lock_acquire+0x622/0x1c90 [ 235.343012][ C1] ? ieee802_11_parse_elems_full+0x145/0x3780 [ 235.344866][ C1] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 235.346727][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 235.348435][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 235.350331][ C1] ? find_held_lock+0x2b/0x80 [ 235.351789][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x18cb/0x2fd0 [ 235.353729][ C1] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 235.355614][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 235.357600][ C1] ? kcov_remote_start+0x3c9/0x6d0 [ 235.359196][ C1] ieee80211_iface_work+0xbf4/0x1020 [ 235.360837][ C1] ? rcu_is_watching+0x12/0xc0 [ 235.362347][ C1] cfg80211_wiphy_work+0x3dc/0x550 [ 235.363933][ C1] process_one_work+0x9cf/0x1b70 [ 235.365484][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 235.367386][ C1] ? __pfx_process_one_work+0x10/0x10 [ 235.369025][ C1] ? assign_work+0x1a0/0x250 [ 235.370456][ C1] worker_thread+0x6c8/0xf10 [ 235.371886][ C1] ? __pfx_worker_thread+0x10/0x10 [ 235.373477][ C1] kthread+0x3c5/0x780 [ 235.374740][ C1] ? __pfx_kthread+0x10/0x10 [ 235.376145][ C1] ? rcu_is_watching+0x12/0xc0 [ 235.377625][ C1] ? __pfx_kthread+0x10/0x10 [ 235.379068][ C1] ret_from_fork+0x5d7/0x6f0 [ 235.380500][ C1] ? __pfx_kthread+0x10/0x10 [ 235.381934][ C1] ret_from_fork_asm+0x1a/0x30 [ 235.383428][ C1] [ 235.384888][ C1] Kernel Offset: disabled [ 235.386234][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:36:09 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90000006d98 RCX=ffffc90000008000 RDX=0000000000000002 RSI=ffffc90000007c60 RDI=ffffc90000006d98 RBP=ffffc90000007c60 RSP=ffffc90000006ce8 R8 =ffffffff91d0e26e R9 =0000000000000000 R10=0000000000000000 R11=00000000000863a3 R12=0000000000000008 R13=ffffc90000006da8 R14=ffffc90000006da0 R15=ffffc90000000000 RIP=ffffffff816ad544 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6716000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9003db6038 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90048ed100 00007f9003d85440 00007f9003d85458 00007f9003d854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bc395 RDI=ffffffff9b0c42a0 RBP=ffffffff9b0c4260 RSP=ffffc900006a06b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6333353038386552 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9b0c4260 R15=ffffffff855bc330 RIP=ffffffff855bc3bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6816000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005600785f9660 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0a16ed100 00007ff0a0b85440 00007ff0a0b85458 00007ff0a0b854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000301 RBX=0000000000000002 RCX=ffffffff8a18ea08 RDX=ffff88801eaba440 RSI=ffffffff8cf2cf60 RDI=ffffffff8c158f60 RBP=0000000000000000 RSP=ffffc90000648830 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000001 R12=1ffff920000c912d R13=ffff88803a59c280 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8b88341d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6916000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f90048e56e8 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 05c422f00105821b a8fe5fe43e426e4f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b892bc8dfcb2319d 07325fd3497b17ed ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01e815d06667abf6 df02104d53170d1b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e76a6c02f3bc3529 b2a176b443d19ea3 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2ff4f9d916be2178 5c5c5c5c5c5c5c5c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c645e3505c5c5c5c 5c5c5c5c5c5c5c5c ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e52bcebf99ceb60 392aff7887079f91 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c5c5c5c5c5c5c5c 5c5c5c5c4ebaeb80 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856b08e647 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0a16ed100 00007ff0a0b85440 00007ff0a0b85458 00007ff0a0b854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=fffff520000df03b RCX=0000000000000000 RDX=ffff888055534880 RSI=ffffc900006f81f8 RDI=ffffffff81a79250 RBP=0000000000000000 RSP=ffffc900006f81d0 R8 =0000000000000340 R9 =0000000000000000 R10=ffffed100c4a1068 R11=0000000000000001 R12=0000000000000001 R13=0000000000212110 R14=ffffea0001894200 R15=0000000000000000 RIP=ffffffff8161e410 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a16000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe6fdd7e6e0 CR3=0000000024eeb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000000003 Opmask02=00000000ffff7fdf Opmask03=0000000001041000 Opmask04=00000000ffffdfff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005589afe405d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005589afe42bf0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373734216000673 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00306963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000111 00003079656b736f 6168632f63730062 642e79726f74616c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e79726f74616c75 6765723d45524157 4d52494600657261 776d7269663d4d45 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 632c3c3e31326c31 2b2a2d7511131101 0816497b44293d3e 3f39333930780945 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7d7f3e3f3e7f77 7f3f7f7f7f3f3b6f 7f777b7f7f7f3f3f 3f7f3b3f3f7d6b7f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e53595342555300 62642e2f6d6f6f61 6c6167652f2f6563 617665642f3d2f30 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e34313d42554e00 4553002f3d434157 4d410030002f5455 4f454d492f002f30 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000