last executing test programs: 12.311620493s ago: executing program 0 (id=36): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x80000) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x80000) syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x202) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x6b0b3) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001400)=@newqdisc={0x50, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0x19}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x4}]}}]}, 0x50}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001400)=@newqdisc={0x50, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0x19}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x4}]}}]}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 12.230089617s ago: executing program 0 (id=40): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000"], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000"], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @remote, @private}, &(0x7f00000004c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@getchain={0x34, 0x66, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff1, 0xa}, {0xffee, 0x9}, {0x0, 0x5}}, [{0x8}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8080) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], [0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x210, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x40, 0x3, 0x3}}, @common=@rt={{0x138}, {0xfffffffc, [0x5, 0x5], 0x400, 0x1, 0x1, [@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private0, @remote], 0x6}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x14, 0x7f, 0xfde3}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], [0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x210, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x40, 0x3, 0x3}}, @common=@rt={{0x138}, {0xfffffffc, [0x5, 0x5], 0x400, 0x1, 0x1, [@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private0, @remote], 0x6}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x14, 0x7f, 0xfde3}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000001f) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x800) 12.228242898s ago: executing program 0 (id=42): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r1}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000140)=0x8000, 0x4) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x8, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r6, 0x0, 0x0}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) 11.267496397s ago: executing program 0 (id=69): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x100000000008, 0x24000) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x5, 0x3, r2}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0xcea) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0xc4d) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44890}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0903006f7d177e0000002a"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x13, 0x7, 0xced, 0x2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x1, 0x80000000, 0x9}}) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000540)="66460f013b440f35c4427d18f466baf80cb834dbbf8cef66bafc0c66ed26660f3882580036410f009300400000c744240000680000c7442402e81a9a68c7442406000000000f011c24420fc7b700000000b9e70200000f320f20df", 0x5b}], 0x1, 0x2, &(0x7f0000000600), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x80, 0x3b5, 0x40, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x10, 0x2, 0x8001}}) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0x4e24, 0x0, 0x4e20, 0x7ff, 0x2, 0x0, 0x20, 0xeb, 0x0, 0xee00}, {0xfff, 0x7, 0x7, 0xb, 0x5, 0x5, 0x81, 0xe50}, {0x6, 0x447, 0xf147, 0xeac9}, 0x5, 0x0, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3500, 0x4, 0x1, 0x0, 0x8, 0x3, 0x9}}, 0xe8) 11.110642916s ago: executing program 0 (id=73): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) readv(r3, &(0x7f0000001440)=[{&(0x7f0000000140)=""/220, 0xdc}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f00000003c0)=""/76, 0x4c}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000040)=""/45, 0x2d}], 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100000003000c0001"], 0x30}}, 0x0) write$binfmt_aout(r3, 0x0, 0xffffffdb) openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 10.816518132s ago: executing program 0 (id=79): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={0x0}, 0x1, 0x0, 0x0, 0xae963d6b8481eeb7}, 0xfeb11bdd49a3dcc5) r1 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="180010940101000000f4647964951f00000000000000004071be5a00000000"], &(0x7f00000014c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x64}, 0x94) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) bind$inet(r6, &(0x7f00000003c0)={0x2, 0x4e23, @multicast2}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r7, 0x8008af00, &(0x7f0000000080)) 10.777949475s ago: executing program 32 (id=79): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={0x0}, 0x1, 0x0, 0x0, 0xae963d6b8481eeb7}, 0xfeb11bdd49a3dcc5) r1 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="180010940101000000f4647964951f00000000000000004071be5a00000000"], &(0x7f00000014c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x64}, 0x94) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) bind$inet(r6, &(0x7f00000003c0)={0x2, 0x4e23, @multicast2}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r7, 0x8008af00, &(0x7f0000000080)) 1.021465689s ago: executing program 1 (id=264): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0xfffffffffffffffc, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_BLKTRACESTOP(r0, 0x1275, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) read(r1, 0x0, 0x57) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x8, 0x7, 0x0, 0x200003f0, 0xb02d], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000680)={0x9, 0x108, 0xfa00, {r3, 0x79, "1571a6", "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"}}, 0x110) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000100), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x27, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000dfff00593c37c24b15169668aadedfd2320c90219ee5b0794a9fcf7afa027b7f8dc6cd1d127fac0cb822d9b8bed188ff455d3ef66d47d787a3c0aa4943f8b06f72a9f49beb4e7f20bb55147562f695a89c31b1b812430f66d1fe6fb536a9e3e3fe92169795f6676ac6109d585c020b7b265b3a67d40eab11f5fd75000841da0a2acf5ce99a1ef822604cee051f4615226c83bc27af4759625df1", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a900000018330000030000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000ffffffff183b000002000000000000000000000085000000b40000001800000004000000000000000400000018150000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xffffbe70, 0x62, &(0x7f00000001c0)=""/98, 0x41000, 0x20, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xa, 0x7, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000002c0)=[{0x0, 0x5, 0xd}, {0x3, 0x5, 0x8, 0x6}], 0x10, 0x6}, 0x94) close(r5) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r7, &(0x7f0000002200)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, "bb8ed5519e0a9c8d46eb5f454d2d1a1ebc0a89c478f877cf2e739378b26f4edafe615b8f07c11a6042056601d488ebe3b8a9f006ae0c89a625bc6ded4b048f", 0x8}, 0x60) bind$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20240, 0x180) connect$l2tp6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400}, 0x20) openat(r8, &(0x7f00000000c0)='./file0\x00', 0x440, 0x8) close(r6) 541.00444ms ago: executing program 1 (id=280): r0 = mq_open(&(0x7f00000000c0)=',):\x00', 0x40, 0xf4, 0x0) lseek(r0, 0xa, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000110396dce63853b4a02cb41c650def1cdcd069edacc33e3286ceb0d8c0e22388661708b93892edf55ab7a00e517bd55042e1b903e9bf421470cc8b6f63b2210fff881c1eec007835afd5fade5e0e97f1b98be7c7ba894c17d48ba61dc926fdcd58060f770b390d1fbf811b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000180)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}, {&(0x7f0000000200)="d40c37aea762812fa685534d17de3ee5c4931fa797ab00d1252d2c909b538dbcb7aa5869258b508397d02d087de5ec79501984596084fe3405e927a9f3a9c2e9dc6e58786f91da69cf01cc46cdad1484a3f7953c7f12dfab6868dc5e457a903efae624bdff10d4b0d0dde63a775e863afe509deebce86d"}, {&(0x7f0000000580)="79ec1237d6cd15b70e041ac2d740ecbc4ee06456fcbee1699440d61dbcfc8d067a48f911ea56f31bf1ec3af3c7a1564a2f02cfac9f54e6aec95d483ca5036b824616a4ce31de690c6c5823cbc79add9e06"}, {&(0x7f0000000100)="841b181811f3fc60355a671d93ab21f8dd70667a3c9da62e50043567fcf7f2874758f940b850250f1c524362d4"}], 0x1, 0x0, 0xd}, 0x4000010) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f00000004c0)=""/187, 0x0, 0x0, 0xc16, r1}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x7444, &(0x7f00000004c0)={0x0, 0x7, 0x400, 0xa, 0xfffffffb}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r9, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0xfffffffdffffffff) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8100050008004b000040fffc0000000590787f0000010a010100441405030000000000000000e0000001000000008302000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cd8bbc587fe6dea82c1aa"], 0x0) r12 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f00000003c0)={r12, r10}) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffff7ff}]}) close_range(r11, 0xffffffffffffffff, 0x0) r13 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) dup(r13) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2004c00, 0x0) r14 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r14, 0xc020aa00, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x100, 0x0) 531.192857ms ago: executing program 3 (id=282): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x8, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) timer_settime(0x0, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 450.7362ms ago: executing program 3 (id=285): sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xa0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000040)={[{@name={'name', 0x3d, 'user_\xae\x96\xbc\xff2D\xff\xbe\x80\xd1\x10&\x98=ryf\xa7zk\x13\x85f\xb6\xe2\xae\x94l\x13\xa9q24D\x81S\xfd.$\xcd\xbeq\xaa\xe03\xb3\xc9q\v\xcbkI\xe6\xa3p\x81\xde\xa11\x96\xa7\x83pj_\x1b\xe3\xbf]\xf4\xbd\xdc\x9eG\xab@4\xd9\x05)1X\x19\x8fb\xfe\xfc\xc7\xfa/BICWJ\xe4J\xa6\xde\x02\xeb\xce\xb21\xed(\xc3\x91Sb\v\xda\x1c=\x87\xc8\xd3\xb2>zg@^\x11\x00\x00'}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 449.453049ms ago: executing program 3 (id=287): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 380.074291ms ago: executing program 3 (id=289): r0 = mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x39, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x3, 0x0, &(0x7f0000000180)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000500)) 379.49555ms ago: executing program 4 (id=290): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3d15, 0x0, 0x0, 0x5}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000280)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7}) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000080)={r10, 0x0, 0x0, 0x1, 0x0, [0x0], [], [0x0, 0x0, 0x2], [0xffffffffffffffff, 0xfffffffefefffffc]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000100)={r11}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r12) sendmsg$TIPC_NL_PEER_REMOVE(r12, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)={0x30, r13, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8004) 310.21049ms ago: executing program 1 (id=293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={r2, 0x7000}, &(0x7f0000000140)=0x8) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x82000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil}) sendto$inet(r4, &(0x7f0000000200)="6d5d337ca92b39679196b4", 0xb, 0x4c000, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={r1, 0x3}, &(0x7f00000002c0)=0x8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x100, r7, 0x318, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x43}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff0001}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8080}, 0xc0c0) r8 = dup(r0) setsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000500)={r3, 0x4, 0x16, 0xffff91d3}, 0x10) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000600)={&(0x7f0000000540)="480a4931f615eca6238961b5d848fc6a234d048b742ef7b288446dc6d09e6bedf790373f075824d42a74d913ddfda72ee1f5a35dafd06aca7fdbcd1aed3ea06471d603c3ef8bb8566163ada96806869231fe69c79a32d7700a0b7febcc8cfe79ef7e2deca9517aa5c5e520069037b3620f2d2911c38ddd0fad78ac05237922e5d765bedbbaf29916bae70dffd2da3e5e0febf9d8634ff485b43220928054796520ac12c462b2eea7cea5ecdaa400dfc4648d0bb3a3154b03ab67ef7297e3c4", 0xbf, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000740)={&(0x7f0000000640)="6574c1cffa06f0da6e016b0d52c614cdcab7427484ae75d43885733749df400defd44a4374577a8bfb93a7ea2d9d4313b2faf4e7d657e2f2f110f237a6b3abe14e1394be0a421a48e14ec97d296beaa7c0c7c9f6f211ff32dc27e17ade5714c2519518c5bb98cf3f30bc1c9a1758f3608de9162a044cb71186c2a0961a49ca8e40f82bf0a843011c304bbe67d9ca3a83ccc2c7b29942753931fa82bdcef72a3760c304412f82d28df1d56f3a2b618dbdefdef2aa6bd52925b8c8d77d7feadf8af932356cd8a3f2e786ac3d32ae67cd21d12812e47fbe71dfc9a4d90cfc9453a8bfa9", 0xe2, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000007c0)={&(0x7f0000000780)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000900)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000c40)={&(0x7f0000000940)=[0x0], &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000b80)=[0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000f00)={&(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[{}, {}, {}, {}, {}], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000fc0)={&(0x7f0000000f80)=[r9, r10, 0x0, r11, r12, 0x0, r13, r14, r15], 0x9, 0x80000}) r16 = syz_open_dev$MSR(&(0x7f0000001000), 0x7, 0x0) read$msr(r16, &(0x7f0000001040)=""/217, 0xd9) getsockopt$MISDN_TIME_STAMP(r8, 0x0, 0x1, &(0x7f0000001140), &(0x7f0000001180)=0x4) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r17, 0x84, 0xc, &(0x7f0000001200), &(0x7f0000001240)=0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r17, 0x4010640d, &(0x7f0000001280)={0x4}) 250.694828ms ago: executing program 2 (id=294): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0002000080e7000008000a00", @ANYRES32=r4, @ANYBLOB="140012800b00010067656e6576650000040002"], 0x3c}}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000040)=0x7) sendmsg$nl_route_sched(r0, 0x0, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=r4, @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4050080}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0002000080e7000008000a00", @ANYRES32=r4, @ANYBLOB="140012800b00010067656e6576650000040002"], 0x3c}}, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000040)=0x7) (async) sendmsg$nl_route_sched(r0, 0x0, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=r4, @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4050080}, 0x0) (async) 250.408642ms ago: executing program 3 (id=295): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r1], 0x24}}, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x100}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) 249.654195ms ago: executing program 4 (id=296): syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000060000000dac15084dbaf736b41e5af0502"}, {0x0, 0x2000000000000199, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 88.559286ms ago: executing program 4 (id=297): mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000040)=0x6, 0x4) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x60, &(0x7f0000000240)={0x2, 0x3, 0x37}, 0x8, 0x5, 0xb80, 0x0, 0x4c2, 0x404, 0x0}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{}], 0x144, 0x1, 0x0, 0x2, 0x0, 0x2}) r4 = fanotify_init(0x0, 0x800) r5 = epoll_create1(0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x587380, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000480)="c4e178296216670f30ef67660fc7b769b6660f388059e0b805000000b91e4200000f01c10f20c00f300f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b921000000fa3ec5c4e17929d8", 0x54}], 0x1, 0x1d, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = fcntl$dupfd(r4, 0x0, r5) fanotify_mark(r4, 0x21, 0x8000038, r9, 0x0) fanotify_mark(r4, 0x22, 0x10, r9, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) 88.267265ms ago: executing program 3 (id=298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f00000005c0)='./file0\x00', r1, &(0x7f0000000680)='./file0\x00') connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pread64(r2, &(0x7f0000000440)=""/197, 0xc5, 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000680)={0x1, 'sit0\x00', {}, 0x4}) 88.160162ms ago: executing program 2 (id=299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0xc821}, 0x800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000140)="24000000010006", 0x7) 87.930651ms ago: executing program 1 (id=300): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)="0300", 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'macvtap0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)) r3 = accept4(r1, &(0x7f0000000180)=@generic, &(0x7f0000000100)=0x80, 0x80800) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x1000000, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0x3, 0x19, {{0x17, 0x4, 0x2, 0x5, 0x5c, 0x64, 0x0, 0xff, 0x29, 0x0, @loopback, @local, {[@cipso={0x86, 0xb, 0x1, [{0x0, 0x5, "01c51a"}]}, @generic={0x88, 0x12, "ecfee65e6c91f378488c0d444cafda52"}, @timestamp_prespec={0x44, 0x1c, 0xee, 0x3, 0xc, [{@empty, 0x5}, {@empty}, {@remote, 0x40}]}, @noop, @timestamp_addr={0x44, 0xc, 0x2e, 0x1, 0x5, [{@private=0xa010102, 0x7}]}]}}}}}) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000840)=r7) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) 86.709504ms ago: executing program 4 (id=301): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) (async) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x8e, 0x180000504) (async) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000180)={0x5, 0x0, [{}, {}, {}, {}, {}]}) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) 86.393393ms ago: executing program 2 (id=302): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x64, r2, 0x201, 0x70bd26, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xd}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x64}, 0x8, 0x3000000000002, 0x0, 0x20004004}, 0x4) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280080007003b070000050006"], 0x4c}}, 0x0) 86.124631ms ago: executing program 1 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xa, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x4}}}}]}, 0x44}}, 0x20000801) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x70, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x34}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 85.238991ms ago: executing program 4 (id=304): mmap(&(0x7f000006d000/0x1000)=nil, 0x1000, 0x3, 0x20010, 0xffffffffffffffff, 0x3cfa5000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x124, 0x0, &(0x7f0000000800)=[@increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x3, 0x1, 0x4}, @fd, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000400)={0x0, 0x20, 0x38}}}, @release, @clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x2}, @decrefs={0x40046307, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000740)={@fda={0x66646185, 0x0, 0x2, 0xbee}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/40, 0x28, 0x0, 0x23}, @flat=@binder={0x73622a85, 0x10b, 0x2}}, &(0x7f00000007c0)={0x0, 0x20, 0x48}}}, @transaction={0x40406300, {0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_handle={0x77682a85, 0x101}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x1000, 0x1, 0x23}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x800000000000002}, @increfs], 0x0, 0x0, 0x0}) r1 = syz_clone(0x881080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) ptrace$cont(0x20, r1, 0x4045, 0x4) syz_open_procfs(r1, &(0x7f0000000300)='oom_score\x00') mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x7, &(0x7f0000a00000/0x600000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x6ab9a96e5db345c9, 0x0, 0x7, 0x9, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="310000004a0001001b119906000000000a0080008ac6dcde0da1dca0f0ed15676b", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff020000000000000000000000000001"], 0x30}}, 0x4010080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC, @ANYRESHEX=r5, @ANYRES32=r6], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="04000600", @ANYRES64=r1, @ANYBLOB="02ed28bd7000ffdbdf250b00000000009900d9950e00000000000000000000000000000000008c8d70a5ffd736e44f089604fe20c4f4bfa5c7a996234cdaaf1ec56197d241669bfbc3415d9ed2e6ef73925be69aa6a38847cdd575bfaa0f079064c49518a49bd451f44789ba32115c6ce943cf727c487473bbe9dff2f218f37812917c8125a559a1ddbcc70cd9e658751f16bca9769fcd5664e9e5c07147ffd3ceafd8c7dc69e9231c5c471da6ec9afc0861affa84038e"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) write$cgroup_int(r8, &(0x7f00000001c0)=0x7, 0x12) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1223000, 0x800, 0x1, 0x6}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newchain={0x2c, 0x64, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff2, 0x3}, {0xc, 0xffff}, {0x5, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xe6, 0x7}}]}, 0x2c}}, 0x20044800) 83.524226ms ago: executing program 1 (id=305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) (async, rerun: 32) r2 = dup(r1) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x1, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (rerun: 64) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 82.118268ms ago: executing program 2 (id=306): syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000100dac15084dbaf736b41e5af0502"}, {0x0, 0x2000000000000199, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 1.239355ms ago: executing program 2 (id=307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)=ANY=[]) (async) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)=ANY=[]) 970.54µs ago: executing program 2 (id=308): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="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"], 0x8) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) (rerun: 32) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="8497", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0xa6, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x470283, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) r2 = socket(0x10, 0x803, 0x0) sync_file_range(r2, 0x80000001, 0x7, 0x1) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0xffffffffffffffff}) (async, rerun: 32) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) (async) r7 = dup3(r6, r5, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x72, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r7}, @ptr={0x77682a85, 0x0, 0x0, 0x0, 0x1, 0x35}, @fda={0x66646185, 0x5, 0x1, 0x1a}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086e81, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) (async) keyctl$search(0xa, 0x0, &(0x7f000000fc00)='encrypted\x00', 0x0, 0xfffffffffffffffa) (async, rerun: 32) r9 = dup(r4) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) 0s ago: executing program 4 (id=309): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x80042, 0x72, 0x9}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = epoll_create1(0x80000) r3 = epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x80000005}) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000600)) (async) r5 = socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x501000, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f0000000200)={0x2, 0x38}) chdir(&(0x7f0000000140)='./bus\x00') (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) fdatasync(r7) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r9, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_buf(r9, 0x29, 0x3d, &(0x7f0000000280)=""/166, &(0x7f0000000340)=0xa6) (async) setsockopt$MRT_FLUSH(r5, 0x0, 0xd0, &(0x7f0000000440)=0x9, 0x4) kernel console output (not intermixed with test programs): [ 44.066262][ T40] audit: type=1400 audit(1751405381.482:61): avc: denied { siginh } for pid=5849 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:9244' (ED25519) to the list of known hosts. [ 44.989559][ T40] audit: type=1400 audit(1751405382.432:62): avc: denied { name_bind } for pid=5896 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.008311][ T40] audit: type=1400 audit(1751405382.452:63): avc: denied { write } for pid=5897 comm="sh" path="pipe:[6533]" dev="pipefs" ino=6533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.020182][ T40] audit: type=1400 audit(1751405382.462:64): avc: denied { execute } for pid=5897 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.029187][ T40] audit: type=1400 audit(1751405382.462:65): avc: denied { execute_no_trans } for pid=5897 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.993542][ T40] audit: type=1400 audit(1751405384.442:66): avc: denied { mounton } for pid=5897 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.997663][ T5897] cgroup: Unknown subsys name 'net' [ 47.136824][ T5897] cgroup: Unknown subsys name 'cpuset' [ 47.141474][ T5897] cgroup: Unknown subsys name 'rlimit' [ 47.356656][ T5921] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 47.994307][ T5897] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.177098][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.177114][ T40] audit: type=1400 audit(1751405388.622:80): avc: denied { execmem } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.424115][ T40] audit: type=1400 audit(1751405388.872:81): avc: denied { create } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.430233][ T40] audit: type=1400 audit(1751405388.872:82): avc: denied { read write } for pid=5932 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.437471][ T40] audit: type=1400 audit(1751405388.872:83): avc: denied { open } for pid=5932 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.445568][ T40] audit: type=1400 audit(1751405388.882:84): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="socket:[1656]" dev="sockfs" ino=1656 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.481376][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.482298][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.484858][ T5943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.489586][ T5943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.492578][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.493615][ T5943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.495800][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.496644][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.497552][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.497896][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.498759][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.499151][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.499683][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.501482][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.505106][ T40] audit: type=1400 audit(1751405388.942:85): avc: denied { read } for pid=5946 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.507361][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.507614][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.509232][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.509616][ T40] audit: type=1400 audit(1751405388.942:86): avc: denied { open } for pid=5946 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.511142][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.514140][ T5297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.514942][ T40] audit: type=1400 audit(1751405388.952:87): avc: denied { mounton } for pid=5946 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.518306][ T5297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.756211][ T40] audit: type=1400 audit(1751405389.202:88): avc: denied { module_request } for pid=5933 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.810121][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 51.852698][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 51.857350][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 51.917692][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 52.117245][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.120854][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.124469][ T5933] bridge_slave_0: entered allmulticast mode [ 52.128516][ T5933] bridge_slave_0: entered promiscuous mode [ 52.134408][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.137302][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.139698][ T5946] bridge_slave_0: entered allmulticast mode [ 52.142449][ T5946] bridge_slave_0: entered promiscuous mode [ 52.170273][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.172645][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.174871][ T5933] bridge_slave_1: entered allmulticast mode [ 52.177451][ T5933] bridge_slave_1: entered promiscuous mode [ 52.193506][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.195732][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.197980][ T5946] bridge_slave_1: entered allmulticast mode [ 52.200682][ T5946] bridge_slave_1: entered promiscuous mode [ 52.228128][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.230504][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.233344][ T5934] bridge_slave_0: entered allmulticast mode [ 52.237666][ T5934] bridge_slave_0: entered promiscuous mode [ 52.336586][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.338915][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.341186][ T5934] bridge_slave_1: entered allmulticast mode [ 52.343941][ T5934] bridge_slave_1: entered promiscuous mode [ 52.347639][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.352568][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.357992][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.361901][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.364169][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.366488][ T5932] bridge_slave_0: entered allmulticast mode [ 52.369151][ T5932] bridge_slave_0: entered promiscuous mode [ 52.415668][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.444185][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.447371][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.450429][ T5932] bridge_slave_1: entered allmulticast mode [ 52.454529][ T5932] bridge_slave_1: entered promiscuous mode [ 52.475567][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.561891][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.568916][ T5933] team0: Port device team_slave_0 added [ 52.574565][ T5946] team0: Port device team_slave_0 added [ 52.578569][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.606667][ T5933] team0: Port device team_slave_1 added [ 52.611565][ T5946] team0: Port device team_slave_1 added [ 52.615880][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.741027][ T5934] team0: Port device team_slave_0 added [ 52.745028][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.747470][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.756086][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.804675][ T5934] team0: Port device team_slave_1 added [ 52.808082][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.810709][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.819400][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.824844][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.827728][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.837164][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.843206][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.845981][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.856157][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.862478][ T5932] team0: Port device team_slave_0 added [ 52.901890][ T5932] team0: Port device team_slave_1 added [ 52.904169][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.906355][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.914923][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.920207][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.923425][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.933665][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.989229][ T5933] hsr_slave_0: entered promiscuous mode [ 52.991529][ T5933] hsr_slave_1: entered promiscuous mode [ 53.011964][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.014169][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.023179][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.028667][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.030793][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.038617][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.140570][ T5946] hsr_slave_0: entered promiscuous mode [ 53.144902][ T5946] hsr_slave_1: entered promiscuous mode [ 53.147014][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.150112][ T5946] Cannot create hsr debugfs directory [ 53.155563][ T5934] hsr_slave_0: entered promiscuous mode [ 53.157781][ T5934] hsr_slave_1: entered promiscuous mode [ 53.159814][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.163919][ T5934] Cannot create hsr debugfs directory [ 53.208666][ T5932] hsr_slave_0: entered promiscuous mode [ 53.212093][ T5932] hsr_slave_1: entered promiscuous mode [ 53.214881][ T5932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.217385][ T5932] Cannot create hsr debugfs directory [ 53.543186][ T63] Bluetooth: hci0: command tx timeout [ 53.550695][ T5933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.551956][ T5297] Bluetooth: hci3: command tx timeout [ 53.553809][ T63] Bluetooth: hci2: command tx timeout [ 53.559719][ T5933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.566788][ T5933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.585190][ T5933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.616927][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.628804][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.632554][ T63] Bluetooth: hci1: command tx timeout [ 53.645095][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.652660][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.700997][ T5934] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.707575][ T5934] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.714433][ T5934] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.720846][ T5934] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.792918][ T5932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.799741][ T5932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.805605][ T5932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.810490][ T5932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.819538][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.856882][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.867926][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.870876][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.881455][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.883909][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.893512][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.923081][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.936860][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.939947][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.945674][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.948001][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.958647][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.008539][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.015175][ T40] audit: type=1400 audit(1751405391.462:89): avc: denied { sys_module } for pid=5933 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.016419][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.036539][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.038921][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.048972][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.055290][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.057743][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.065232][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.067536][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.074956][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.077246][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.128871][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.138114][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.178360][ T5946] veth0_vlan: entered promiscuous mode [ 54.182081][ T5933] veth0_vlan: entered promiscuous mode [ 54.186990][ T5933] veth1_vlan: entered promiscuous mode [ 54.193703][ T5946] veth1_vlan: entered promiscuous mode [ 54.215258][ T5946] veth0_macvtap: entered promiscuous mode [ 54.223010][ T5946] veth1_macvtap: entered promiscuous mode [ 54.226572][ T5933] veth0_macvtap: entered promiscuous mode [ 54.232102][ T5933] veth1_macvtap: entered promiscuous mode [ 54.240945][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.248784][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.255056][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.264297][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.267544][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.276139][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.280179][ T5946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.283559][ T5946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.286258][ T5946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.288948][ T5946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.297102][ T5933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.299899][ T5933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.303184][ T5933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.305902][ T5933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.373778][ T5934] veth0_vlan: entered promiscuous mode [ 54.386273][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.388807][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.389657][ T5932] veth0_vlan: entered promiscuous mode [ 54.398719][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.399816][ T5934] veth1_vlan: entered promiscuous mode [ 54.401193][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.420156][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.420546][ T5932] veth1_vlan: entered promiscuous mode [ 54.423636][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.443969][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.446463][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.460333][ T5932] veth0_macvtap: entered promiscuous mode [ 54.469849][ T5934] veth0_macvtap: entered promiscuous mode [ 54.474763][ T5933] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.475140][ T5932] veth1_macvtap: entered promiscuous mode [ 54.487840][ T5934] veth1_macvtap: entered promiscuous mode [ 54.496914][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.514481][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.529752][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.538429][ T5932] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.542232][ T5932] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.545786][ T5932] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.549214][ T5932] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.555954][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.559694][ T5934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.563640][ T5934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.566359][ T5934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.569111][ T5934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.598341][ T6023] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 54.615299][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.617786][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.636678][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.639153][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.649586][ T6025] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 54.651706][ T6025] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.654575][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.657256][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.657399][ T6025] vhci_hcd vhci_hcd.0: Device attached [ 54.670762][ T6028] vhci_hcd: connection closed [ 54.672094][ T99] vhci_hcd: stop threads [ 54.675812][ T99] vhci_hcd: release socket [ 54.677401][ T99] vhci_hcd: disconnect device [ 54.679287][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.681743][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.747643][ T6034] netlink: zone id is out of range [ 54.749418][ T6034] netlink: zone id is out of range [ 54.751112][ T6034] netlink: zone id is out of range [ 54.753335][ T6034] netlink: zone id is out of range [ 54.755119][ T6034] netlink: zone id is out of range [ 54.756881][ T6034] netlink: zone id is out of range [ 54.758522][ T6034] netlink: zone id is out of range [ 54.760142][ T6034] netlink: zone id is out of range [ 54.763296][ T6034] netlink: zone id is out of range [ 54.765588][ T6034] netlink: zone id is out of range [ 55.052166][ T5990] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.125722][ T6042] kvm: MWAIT instruction emulated as NOP! [ 55.181941][ T5990] usb 6-1: device descriptor read/64, error -71 [ 55.424185][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.429584][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.462525][ T5990] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 55.592091][ T5990] usb 6-1: device descriptor read/64, error -71 [ 55.621902][ T63] Bluetooth: hci2: command tx timeout [ 55.632863][ T63] Bluetooth: hci3: command tx timeout [ 55.632923][ T5297] Bluetooth: hci0: command tx timeout [ 55.681929][ T24] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 55.703105][ T5990] usb usb6-port1: attempt power cycle [ 55.711936][ T5297] Bluetooth: hci1: command tx timeout [ 55.835964][ T24] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 55.839301][ T24] usb 7-1: config 0 has no interface number 0 [ 55.841930][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 55.847233][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 55.852173][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 55.856961][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 55.862753][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 55.867256][ T24] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 55.873307][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 55.877036][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.884375][ T24] usb 7-1: config 0 descriptor?? [ 55.891669][ T6048] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.895044][ T6048] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.906053][ T24] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 55.924786][ T59] IPVS: starting estimator thread 0... [ 55.965306][ T6071] input: syz0 as /devices/virtual/input/input5 [ 55.977358][ T6071] MINIX-fs: blocksize too small for device [ 56.026189][ T6069] IPVS: using max 44 ests per chain, 105600 per kthread [ 56.062064][ T5990] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 56.092916][ T5990] usb 6-1: device descriptor read/8, error -71 [ 56.114728][ T6046] xt_l2tp: wrong L2TP version: 0 [ 56.116801][ T6046] xt_l2tp: wrong L2TP version: 0 [ 56.123558][ T59] usb 7-1: USB disconnect, device number 2 [ 56.132480][ T59] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 56.341938][ T5990] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 56.373273][ T5990] usb 6-1: device descriptor read/8, error -71 [ 56.402022][ T53] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.482745][ T5990] usb usb6-port1: unable to enumerate USB device [ 56.721407][ T40] kauditd_printk_skb: 75 callbacks suppressed [ 56.721423][ T40] audit: type=1400 audit(1751405394.162:165): avc: denied { append } for pid=6084 comm="syz.2.17" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.733988][ T40] audit: type=1400 audit(1751405394.172:166): avc: denied { create } for pid=6084 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.741691][ T40] audit: type=1400 audit(1751405394.172:167): avc: denied { bind } for pid=6084 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.867847][ T40] audit: type=1400 audit(1751405394.312:168): avc: denied { setopt } for pid=6092 comm="syz.2.19" lport=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.877338][ T40] audit: type=1400 audit(1751405394.312:169): avc: denied { write } for pid=6092 comm="syz.2.19" name="vlan0" dev="proc" ino=4026533692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 56.924920][ T40] audit: type=1400 audit(1751405394.372:170): avc: denied { getopt } for pid=6092 comm="syz.2.19" lport=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.547596][ T40] audit: type=1400 audit(1751405394.992:171): avc: denied { create } for pid=6106 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 57.604265][ T6111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'. [ 57.607223][ T6111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'. [ 57.618867][ T40] audit: type=1400 audit(1751405395.062:172): avc: denied { read } for pid=6110 comm="syz.0.25" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.627618][ T40] audit: type=1400 audit(1751405395.062:173): avc: denied { open } for pid=6110 comm="syz.0.25" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.636918][ T40] audit: type=1400 audit(1751405395.062:174): avc: denied { ioctl } for pid=6110 comm="syz.0.25" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.692968][ T6115] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 57.696842][ T6115] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 57.700701][ T6115] netlink: 'syz.3.27': attribute type 4 has an invalid length. [ 57.702028][ T5297] Bluetooth: hci2: command tx timeout [ 57.709526][ T6115] netlink: 'syz.3.27': attribute type 4 has an invalid length. [ 57.712312][ T5297] Bluetooth: hci0: command tx timeout [ 57.778536][ T6125] netlink: 124 bytes leftover after parsing attributes in process `syz.0.30'. [ 57.781872][ T5297] Bluetooth: hci1: command tx timeout [ 57.782347][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 57.936122][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.40'. [ 57.936145][ T6152] netlink: 'syz.0.40': attribute type 7 has an invalid length. [ 57.936165][ T6152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.40'. [ 57.936408][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.40'. [ 57.936419][ T6152] netlink: 'syz.0.40': attribute type 7 has an invalid length. [ 57.936425][ T6152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.40'. [ 57.938352][ T6149] warning: `syz.1.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.939309][ T6152] netlink: 40 bytes leftover after parsing attributes in process `syz.0.40'. [ 57.993928][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 58.028056][ T6164] Zero length message leads to an empty skb [ 58.088383][ T6172] loop4: detected capacity change from 0 to 7 [ 58.090737][ T6175] tmpfs: Unknown parameter 'ͮ䰭 [ 58.090737][ T6175] Unx@7v' [ 58.093951][ T6172] Dev loop4: unable to read RDB block 7 [ 58.095992][ T6172] loop4: unable to read partition table [ 58.097959][ T6172] loop4: partition table beyond EOD, truncated [ 58.107086][ T6172] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 58.107926][ T6158] kvm: kvm [6157]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80 [ 58.114770][ T6158] kvm: kvm [6157]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x80 [ 58.115820][ T6165] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.138156][ T6158] kvm: kvm [6157]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 58.161689][ T6158] kvm: kvm [6157]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 58.180116][ T6158] kvm: kvm [6157]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 58.208770][ T6158] kvm: kvm [6157]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 58.229710][ T6158] kvm: kvm [6157]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 58.249908][ T6158] kvm: kvm [6157]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 58.269281][ T6158] kvm: kvm [6157]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 58.287041][ T6158] kvm: kvm [6157]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 58.344665][ T6205] xt_hashlimit: size too large, truncated to 1048576 [ 58.398391][ T6210] xt_hashlimit: size too large, truncated to 1048576 [ 58.524303][ T6217] loop4: detected capacity change from 0 to 7 [ 58.527420][ T6217] Dev loop4: unable to read RDB block 7 [ 58.529266][ T6217] loop4: unable to read partition table [ 58.531169][ T6217] loop4: partition table beyond EOD, truncated [ 58.533371][ T6217] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 58.698718][ T6230] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.728986][ T5346] udevd[5346]: worker [6156] terminated by signal 33 (Unknown signal 33) [ 58.732000][ T5346] udevd[5346]: worker [6156] failed while handling '/devices/virtual/block/loop2' [ 58.738482][ T6232] syz.2.65 uses obsolete (PF_INET,SOCK_PACKET) [ 58.999780][ T6246] syz_tun: entered allmulticast mode [ 59.002458][ T6245] syz_tun: left allmulticast mode [ 59.190277][ T6264] syzkaller1: entered promiscuous mode [ 59.192726][ T6264] syzkaller1: entered allmulticast mode [ 59.284763][ T6273] netlink: 'syz.2.76': attribute type 62 has an invalid length. [ 59.355874][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.370725][ T6278] Malformed UNC in devname [ 59.370725][ T6278] [ 59.373017][ T6278] CIFS: VFS: Malformed UNC in devname [ 59.483700][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.545946][ T6286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.546233][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.552603][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.555545][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.555608][ T6286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.559475][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.565223][ T6286] bond0 (unregistering): Released all slaves [ 59.565292][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.587091][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.689836][ T6292] chnl_net:caif_netlink_parms(): no params data found [ 59.754064][ T6292] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.756352][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.758609][ T6292] bridge_slave_0: entered allmulticast mode [ 59.761237][ T6292] bridge_slave_0: entered promiscuous mode [ 59.774456][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.779781][ T6292] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.782419][ T5297] Bluetooth: hci0: command tx timeout [ 59.782927][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.784128][ T5297] Bluetooth: hci2: command tx timeout [ 59.786930][ T6292] bridge_slave_1: entered allmulticast mode [ 59.787722][ T6292] bridge_slave_1: entered promiscuous mode [ 59.834355][ T6292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.839006][ T6292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.873229][ T5297] Bluetooth: hci1: command tx timeout [ 59.884037][ T6292] team0: Port device team_slave_0 added [ 59.887764][ T6292] team0: Port device team_slave_1 added [ 59.936256][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.939345][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.951421][ T6292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.958672][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.961629][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.971956][ T6292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.037516][ T6292] hsr_slave_0: entered promiscuous mode [ 60.039739][ T6292] hsr_slave_1: entered promiscuous mode [ 60.041988][ T6292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.044908][ T6292] Cannot create hsr debugfs directory [ 60.047359][ T12] bridge_slave_1: left allmulticast mode [ 60.049914][ T12] bridge_slave_1: left promiscuous mode [ 60.053228][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.063274][ T6319] /dev/sr0: Can't open blockdev [ 60.064509][ T12] bridge_slave_0: left allmulticast mode [ 60.067411][ T12] bridge_slave_0: left promiscuous mode [ 60.070021][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.368300][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.373672][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.378545][ T12] bond0 (unregistering): Released all slaves [ 60.384047][ T6335] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.94' sets config #1 [ 60.420748][ T6337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=6337 comm=syz.1.95 [ 60.425863][ T6337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6337 comm=syz.1.95 [ 60.431005][ T6337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=6337 comm=syz.1.95 [ 60.436563][ T6337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=6337 comm=syz.1.95 [ 60.441510][ T6337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6337 comm=syz.1.95 [ 60.446449][ T6337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6337 comm=syz.1.95 [ 60.451428][ T6337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6337 comm=syz.1.95 [ 60.458255][ T6337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=6337 comm=syz.1.95 [ 60.492434][ T6337] binder: 6336:6337 ioctl c018620c 200000000300 returned -22 [ 60.625688][ T6292] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.635263][ T6292] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.642254][ T6292] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.647904][ T6292] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.648845][ T6345] cgroup: Unknown subsys name 'cpuset' [ 60.659853][ T6356] net_ratelimit: 24 callbacks suppressed [ 60.659863][ T6356] IPv6: addrconf: prefix option has invalid lifetime [ 60.695498][ T12] hsr_slave_0: left promiscuous mode [ 60.699490][ T12] hsr_slave_1: left promiscuous mode [ 60.701622][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.704664][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.707630][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.709969][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.727683][ T12] veth1_macvtap: left promiscuous mode [ 60.729669][ T12] veth0_macvtap: left promiscuous mode [ 60.731436][ T12] veth1_vlan: left promiscuous mode [ 60.733835][ T12] veth0_vlan: left promiscuous mode [ 61.143897][ T12] team0 (unregistering): Port device team_slave_1 removed [ 61.187249][ T12] team0 (unregistering): Port device team_slave_0 removed [ 61.192004][ T59] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.352584][ T59] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 61.356195][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.359960][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.364923][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.368742][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.373258][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.377429][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.382610][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.386067][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.389622][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.393592][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.397241][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.401316][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.406589][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.409966][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.414805][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.418124][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.422059][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.426600][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.430536][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.434333][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.438588][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.442223][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.445843][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 61.449896][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.454287][ T59] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 61.457641][ T59] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 61.460262][ T59] usb 7-1: Product: syz [ 61.461608][ T59] usb 7-1: Manufacturer: syz [ 61.463306][ T59] usb 7-1: SerialNumber: syz [ 61.468288][ T59] usb 7-1: config 0 descriptor?? [ 61.477522][ T59] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 61.589073][ T6292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.601230][ T6292] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.606596][ T1247] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.608976][ T1247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.615904][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.618258][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.622335][ T5297] Bluetooth: hci3: command tx timeout [ 61.747025][ T6292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.759621][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 61.759631][ T40] audit: type=1400 audit(1751405399.202:254): avc: denied { write } for pid=6394 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.803706][ T40] audit: type=1400 audit(1751405399.242:255): avc: denied { read write } for pid=6403 comm="syz.3.113" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.812557][ T40] audit: type=1400 audit(1751405399.242:256): avc: denied { open } for pid=6403 comm="syz.3.113" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.821482][ T40] audit: type=1400 audit(1751405399.252:257): avc: denied { map } for pid=6403 comm="syz.3.113" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.831042][ T40] audit: type=1400 audit(1751405399.252:258): avc: denied { execute } for pid=6403 comm="syz.3.113" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.838463][ T40] audit: type=1400 audit(1751405399.272:259): avc: denied { write } for pid=6401 comm="syz.1.112" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 61.846758][ T40] audit: type=1400 audit(1751405399.272:260): avc: denied { open } for pid=6401 comm="syz.1.112" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 61.871598][ T40] audit: type=1400 audit(1751405399.312:261): avc: denied { mount } for pid=6409 comm="syz.3.114" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 61.872403][ T6411] max out of range [ 61.879117][ T40] audit: type=1400 audit(1751405399.312:262): avc: denied { remount } for pid=6409 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 61.887356][ T40] audit: type=1400 audit(1751405399.332:263): avc: denied { mount } for pid=6413 comm="syz.1.115" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.934837][ T6292] veth0_vlan: entered promiscuous mode [ 61.941253][ T6292] veth1_vlan: entered promiscuous mode [ 61.947146][ T12] IPVS: stop unused estimator thread 0... [ 61.957867][ T6292] veth0_macvtap: entered promiscuous mode [ 61.963047][ T6292] veth1_macvtap: entered promiscuous mode [ 61.972212][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.978402][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.982982][ T6292] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.985858][ T6292] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.988555][ T6292] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.991257][ T6292] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.024483][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.027074][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.040292][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.042939][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.058101][ T6422] vlan2: entered promiscuous mode [ 62.059905][ T6422] bridge0: entered promiscuous mode [ 62.061733][ T6422] vlan2: entered allmulticast mode [ 62.064217][ T6422] bridge0: entered allmulticast mode [ 62.069103][ T6422] netlink: 'syz.3.117': attribute type 30 has an invalid length. [ 62.076450][ T6422] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.079353][ T6422] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.082225][ T6422] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.085288][ T6422] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.100960][ T6427] syz.1.118: attempt to access beyond end of device [ 62.100960][ T6427] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 62.106435][ T6427] vxfs: unable to read disk superblock at 1 [ 62.108486][ T6427] syz.1.118: attempt to access beyond end of device [ 62.108486][ T6427] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 62.112549][ T6427] vxfs: unable to read disk superblock at 8 [ 62.114384][ T6427] vxfs: can't find superblock. [ 62.175787][ T6435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.742999][ T6020] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 62.904442][ T6020] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 62.908875][ T6020] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 62.912438][ T6020] usb 8-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 62.915714][ T6020] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.919645][ T6020] usb 8-1: config 0 descriptor?? [ 62.921944][ T6448] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 62.975002][ T6455] input: syz0 as /devices/virtual/input/input6 [ 63.129224][ T6020] usbhid 8-1:0.0: can't add hid device: -71 [ 63.131244][ T6020] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 63.135057][ T6020] usb 8-1: USB disconnect, device number 2 [ 63.381935][ T6473] delete_channel: no stack [ 63.668581][ T5297] Bluetooth: hci0: Invalid handle: 0x1102 > 0x0eff [ 63.702043][ T63] Bluetooth: hci3: command tx timeout [ 63.812257][ T6489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.854207][ T6510] process 'syz.4.145' launched './file0' with NULL argv: empty string added [ 63.888164][ T6296] usb 7-1: USB disconnect, device number 3 [ 63.892894][ T6296] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 64.045334][ T6530] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 64.326630][ T6548] __nla_validate_parse: 16 callbacks suppressed [ 64.326641][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 64.331935][ T6548] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 64.367586][ T6554] batadv_slave_1: entered promiscuous mode [ 64.370061][ T6553] netlink: 2216 bytes leftover after parsing attributes in process `syz.3.159'. [ 64.437299][ T6553] team0 (unregistering): Port device team_slave_0 removed [ 64.443227][ T6553] team0 (unregistering): Port device team_slave_1 removed [ 64.495171][ T6552] batadv_slave_1: left promiscuous mode [ 64.545536][ T6545] xfrm1: entered allmulticast mode [ 64.653609][ T6571] netlink: 'syz.2.165': attribute type 1 has an invalid length. [ 64.716858][ T6580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.168'. [ 64.718832][ T6582] vivid-001: ================= START STATUS ================= [ 64.722136][ T6582] vivid-001: Radio HW Seek Mode: Bounded [ 64.723940][ T6582] vivid-001: Radio Programmable HW Seek: false [ 64.725852][ T6582] vivid-001: RDS Rx I/O Mode: Block I/O [ 64.728151][ T6582] vivid-001: Generate RBDS Instead of RDS: false [ 64.730211][ T6582] vivid-001: RDS Reception: true [ 64.731763][ T6582] vivid-001: RDS Program Type: 0 inactive [ 64.733942][ T6582] vivid-001: RDS PS Name: inactive [ 64.735551][ T6582] vivid-001: RDS Radio Text: inactive [ 64.737263][ T6582] vivid-001: RDS Traffic Announcement: false inactive [ 64.739402][ T6582] vivid-001: RDS Traffic Program: false inactive [ 64.741451][ T6582] vivid-001: RDS Music: false inactive [ 64.743840][ T6582] vivid-001: ================== END STATUS ================== [ 64.750049][ T6582] Cannot find add_set index 65534 as target [ 64.753334][ T6582] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 64.779019][ T6594] netlink: 168 bytes leftover after parsing attributes in process `syz.2.173'. [ 64.812039][ T6602] netlink: 108 bytes leftover after parsing attributes in process `syz.4.175'. [ 64.816694][ T6602] netlink: 108 bytes leftover after parsing attributes in process `syz.4.175'. [ 64.819540][ T6602] netlink: 84 bytes leftover after parsing attributes in process `syz.4.175'. [ 64.865107][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 64.878024][ T6616] overlayfs: upper fs does not support file handles, falling back to index=off. [ 64.958167][ T6629] ALSA: mixer_oss: invalid OSS volume '' [ 65.056178][ T6645] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 65.066285][ T6645] netlink: zone id is out of range [ 65.068703][ T6645] netlink: zone id is out of range [ 65.071325][ T6645] netlink: zone id is out of range [ 65.076245][ T6645] netlink: zone id is out of range [ 65.078844][ T6646] netlink: zone id is out of range [ 65.079237][ T6645] netlink: zone id is out of range [ 65.080830][ T6646] netlink: zone id is out of range [ 65.084770][ T6645] netlink: zone id is out of range [ 65.085209][ T6646] netlink: zone id is out of range [ 65.102133][ T837] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.237052][ T6672] GUP no longer grows the stack in syz.4.193 (6672): 200000007000-20000000a000 (200000004000) [ 65.241991][ T6672] CPU: 2 UID: 0 PID: 6672 Comm: syz.4.193 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 65.242017][ T6672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.242028][ T6672] Call Trace: [ 65.242034][ T6672] [ 65.242043][ T6672] dump_stack_lvl+0x16c/0x1f0 [ 65.242093][ T6672] gup_vma_lookup+0x1d2/0x220 [ 65.242128][ T6672] __get_user_pages+0x271/0x3b80 [ 65.242153][ T6672] ? stack_trace_save+0x8e/0xc0 [ 65.242179][ T6672] ? __pfx_stack_trace_save+0x10/0x10 [ 65.242203][ T6672] ? __pfx___get_user_pages+0x10/0x10 [ 65.242220][ T6672] ? check_path.constprop.0+0x24/0x50 [ 65.242253][ T6672] __gup_longterm_locked+0x5e7/0x1840 [ 65.242280][ T6672] ? __pfx___gup_longterm_locked+0x10/0x10 [ 65.242311][ T6672] pin_user_pages+0x13c/0x160 [ 65.242329][ T6672] ? __pfx_pin_user_pages+0x10/0x10 [ 65.242346][ T6672] ? trace_kmalloc+0x2b/0xd0 [ 65.242374][ T6672] ? xdp_umem_create+0x652/0x1270 [ 65.242403][ T6672] xdp_umem_create+0x73c/0x1270 [ 65.242433][ T6672] xsk_setsockopt+0x5b2/0x840 [ 65.242456][ T6672] ? __pfx_xsk_setsockopt+0x10/0x10 [ 65.242475][ T6672] ? __lock_acquire+0x622/0x1c90 [ 65.242506][ T6672] ? selinux_socket_setsockopt+0x6a/0x80 [ 65.242538][ T6672] ? __pfx_xsk_setsockopt+0x10/0x10 [ 65.242561][ T6672] do_sock_setsockopt+0x221/0x470 [ 65.242590][ T6672] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 65.242632][ T6672] __sys_setsockopt+0x1a0/0x230 [ 65.242662][ T6672] __x64_sys_setsockopt+0xbd/0x160 [ 65.242683][ T6672] ? do_syscall_64+0x91/0x4c0 [ 65.242708][ T6672] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.242732][ T6672] do_syscall_64+0xcd/0x4c0 [ 65.242759][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.242778][ T6672] RIP: 0033:0x7f086098e929 [ 65.242793][ T6672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.242811][ T6672] RSP: 002b:00007f086180e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 65.242827][ T6672] RAX: ffffffffffffffda RBX: 00007f0860bb5fa0 RCX: 00007f086098e929 [ 65.242840][ T6672] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 65.242850][ T6672] RBP: 00007f0860a10b39 R08: 0000000000000020 R09: 0000000000000000 [ 65.242863][ T6672] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 65.242873][ T6672] R13: 0000000000000000 R14: 00007f0860bb5fa0 R15: 00007ffde4a61f18 [ 65.242896][ T6672] [ 65.261925][ T837] usb 7-1: Using ep0 maxpacket: 8 [ 65.352922][ T837] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.356225][ T837] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.359731][ T837] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.362969][ T837] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.366943][ T837] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.369776][ T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.375089][ T6680] netlink: 'syz.4.201': attribute type 7 has an invalid length. [ 65.416666][ T6687] netlink: 11578 bytes leftover after parsing attributes in process `syz.4.203'. [ 65.445204][ T6691] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 65.453800][ T6691] program syz.4.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.609642][ T6699] loop4: detected capacity change from 0 to 7 [ 65.610437][ T6699] Dev loop4: unable to read RDB block 7 [ 65.610466][ T6699] loop4: unable to read partition table [ 65.610555][ T6699] loop4: partition table beyond EOD, truncated [ 65.610565][ T6699] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 65.700206][ T837] usb 7-1: GET_CAPABILITIES returned 0 [ 65.702132][ T837] usbtmc 7-1:16.0: can't read capabilities [ 65.708287][ T6702] kvm: pic: non byte read [ 65.710772][ T6702] kvm: pic: level sensitive irq not supported [ 65.711039][ T6702] kvm: pic: non byte read [ 65.715505][ T6702] kvm: pic: level sensitive irq not supported [ 65.715742][ T6702] kvm: pic: non byte read [ 65.719975][ T6702] kvm: pic: level sensitive irq not supported [ 65.720205][ T6702] kvm: pic: non byte read [ 65.782394][ T63] Bluetooth: hci3: command tx timeout [ 65.873898][ T6704] [U] [ 65.875286][ T6704] [U] [ 65.876490][ T6704] [U] [ 65.877731][ T6704] [U] [ 65.879844][ T6704] [U] [ 65.880784][ T6704] [U] [ 65.882009][ T6704] [U] [ 65.883234][ T6704] [U] [ 65.884704][ T6704] [U] [ 65.885954][ T6704] [U] [ 65.887204][ T6704] [U] [ 65.888224][ T6704] [U] [ 65.889588][ T6704] [U] [ 65.890851][ T6704] [U] [ 65.892081][ T6704] [U] [ 65.893326][ T6704] [U] [ 65.897100][ T6703] [U] [ 65.928863][ T6706] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 65.996510][ T6712] xt_hashlimit: size too large, truncated to 1048576 [ 66.096967][ T6718] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 66.124263][ T6718] netlink: 32 bytes leftover after parsing attributes in process `syz.4.213'. [ 66.198561][ T6724] netlink: 'syz.1.215': attribute type 10 has an invalid length. [ 66.209344][ T6724] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 66.246872][ T6735] net_ratelimit: 9 callbacks suppressed [ 66.246882][ T6735] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 66.273241][ T6737] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 66.294883][ T6737] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 66.317500][ T6745] Bluetooth: MGMT ver 1.23 [ 66.489223][ T1144] tipc: Subscription rejected, illegal request [ 66.538719][ T6761] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 66.602164][ T6003] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 66.765772][ T6003] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.772170][ T6003] usb 9-1: config 0 has no interfaces? [ 66.774540][ T6003] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 66.778364][ T6003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.786615][ T6003] usb 9-1: config 0 descriptor?? [ 66.875777][ T6786] netlink: 'syz.1.234': attribute type 1 has an invalid length. [ 66.881399][ T6787] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 66.984377][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 66.984391][ T40] audit: type=1400 audit(66.893:361): avc: denied { bind } for pid=6791 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.993369][ T6792] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 66.997380][ T6792] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 66.998229][ T40] audit: type=1400 audit(66.893:362): avc: denied { node_bind } for pid=6791 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 67.000656][ T6792] vhci_hcd vhci_hcd.0: Device attached [ 67.009332][ T40] audit: type=1400 audit(66.893:363): avc: denied { mounton } for pid=6746 comm="syz.4.223" path="/proc/75/task" dev="proc" ino=12823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 67.013749][ T6794] vhci_hcd: connection closed [ 67.023846][ T61] vhci_hcd: stop threads [ 67.027502][ T61] vhci_hcd: release socket [ 67.029244][ T61] vhci_hcd: disconnect device [ 67.030792][ T60] usb 9-1: USB disconnect, device number 3 [ 67.056194][ T40] audit: type=1326 audit(66.963:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.4.236" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f086098e929 code=0x0 [ 67.083638][ T6800] xt_CT: No such helper "pptp" [ 67.144817][ T40] audit: type=1400 audit(67.053:365): avc: denied { ioctl } for pid=6803 comm="syz.4.237" path="/dev/sg1" dev="devtmpfs" ino=727 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.494635][ T6806] IPv6: addrconf: prefix option has invalid lifetime [ 67.558598][ T40] audit: type=1400 audit(67.463:366): avc: denied { ioctl } for pid=6810 comm="syz.1.240" path="socket:[14394]" dev="sockfs" ino=14394 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.769023][ T6829] 9pnet_virtio: no channels available for device syz [ 67.835065][ T6834] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 67.875954][ T63] Bluetooth: hci3: command tx timeout [ 67.879041][ T6026] usb 7-1: USB disconnect, device number 4 [ 67.882326][ T6843] usb usb8: usbfs: process 6843 (syz.1.251) did not claim interface 0 before use [ 67.900708][ T6842] uprobe: syz.1.251:6842 failed to unregister, leaking uprobe [ 67.986020][ T6847] Bluetooth: MGMT ver 1.23 [ 67.988366][ T40] audit: type=1400 audit(67.893:367): avc: denied { write } for pid=6848 comm="syz.1.254" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 67.997891][ T40] audit: type=1400 audit(67.893:368): avc: denied { open } for pid=6848 comm="syz.1.254" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 68.037527][ T6851] capability: warning: `syz.2.255' uses deprecated v2 capabilities in a way that may be insecure [ 68.084365][ T6857] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.115386][ T63] Bluetooth: hci1: Malformed Event: 0x13 [ 68.137392][ T40] audit: type=1400 audit(68.043:369): avc: denied { search } for pid=6862 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.149279][ T6860] syzkaller0: entered promiscuous mode [ 68.151042][ T6860] syzkaller0: entered allmulticast mode [ 68.152035][ T6865] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 68.152047][ T40] audit: type=1400 audit(68.043:370): avc: denied { search } for pid=6862 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1898 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.161674][ T6865] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 68.171137][ T6865] vhci_hcd vhci_hcd.0: Device attached [ 68.181146][ T6857] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.193561][ T6866] vhci_hcd: connection closed [ 68.193824][ T1144] vhci_hcd: stop threads [ 68.197029][ T1144] vhci_hcd: release socket [ 68.198487][ T1144] vhci_hcd: disconnect device [ 68.224290][ T6861] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 68.360857][ T6876] hfs: can't find a HFS filesystem on dev sr0 [ 68.998439][ T6857] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.076872][ T6884] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 69.099581][ T6857] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.165762][ T6894] bridge_slave_0: left allmulticast mode [ 69.167700][ T6894] bridge_slave_0: left promiscuous mode [ 69.169550][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.176723][ T6896] xt_hashlimit: max too large, truncated to 1048576 [ 69.180994][ T6896] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 69.181183][ T6894] bridge_slave_1: left allmulticast mode [ 69.186415][ T6894] bridge_slave_1: left promiscuous mode [ 69.188971][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.199035][ T6894] bond0: (slave bond_slave_0): Releasing backup interface [ 69.206507][ T6894] bond0: (slave bond_slave_1): Releasing backup interface [ 69.212414][ T6894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.215345][ T6894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.218975][ T6894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.221309][ T6894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.266649][ T6857] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.280457][ T6857] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.293896][ T6857] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.306424][ T6857] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.316245][ T6894] tipc: Enabling of bearer rejected, failed to enable media [ 69.384524][ T6919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=6919 comm=syz.3.271 [ 69.389001][ T6919] bond0: entered promiscuous mode [ 69.390640][ T6919] bond0: entered allmulticast mode [ 69.440529][ T6921] bridge1: entered promiscuous mode [ 69.442891][ T6921] bridge1: entered allmulticast mode [ 69.448256][ T6924] IPv6: addrconf: prefix option has invalid lifetime [ 69.522919][ T6931] netlink: 'syz.4.275': attribute type 1 has an invalid length. [ 69.526172][ T6931] __nla_validate_parse: 8 callbacks suppressed [ 69.526180][ T6931] netlink: 216 bytes leftover after parsing attributes in process `syz.4.275'. [ 69.680646][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.281'. [ 69.683626][ T6955] ip_vti0: Master is either lo or non-ether device [ 69.725559][ T6961] IPv6: addrconf: prefix option has invalid lifetime [ 69.732404][ T6963] cgroup: Name too long [ 69.799522][ T6970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6970 comm=syz.2.288 [ 69.865870][ T6981] netlink: 'syz.2.292': attribute type 9 has an invalid length. [ 69.868267][ T6981] netlink: 'syz.2.292': attribute type 7 has an invalid length. [ 69.870554][ T6981] netlink: 'syz.2.292': attribute type 8 has an invalid length. [ 69.874638][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 69.877468][ T6981] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 69.880227][ T6981] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (5) [ 69.934956][ T6985] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 69.944215][ T6990] IPv6: addrconf: prefix option has invalid lifetime [ 69.951202][ T6985] bond0: entered promiscuous mode [ 69.957736][ T6985] bond0: entered allmulticast mode [ 69.964549][ T6985] geneve2: entered allmulticast mode [ 69.969081][ T6985] bond0: (slave geneve2): making interface the new active one [ 69.971518][ T6985] geneve2: entered promiscuous mode [ 69.975091][ T6985] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 69.978369][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 69.983919][ T6985] bond0: left promiscuous mode [ 69.985944][ T6985] geneve2: left promiscuous mode [ 69.988117][ T6985] bond0: left allmulticast mode [ 69.991363][ T6985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.001031][ T6993] sctp: [Deprecated]: syz.1.293 (pid 6993) Use of int in maxseg socket option. [ 70.001031][ T6993] Use struct sctp_assoc_value instead [ 70.013600][ T6997] binfmt_misc: register: failed to install interpreter file ./file0 [ 70.017675][ T6997] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.062210][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 70.075842][ T6999] vxlan1: entered promiscuous mode [ 70.083470][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 70.086777][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 70.094168][ T7012] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 70.130729][ T7017] IPv6: addrconf: prefix option has invalid lifetime [ 70.193851][ T7028] binder: BINDER_SET_CONTEXT_MGR already set [ 70.196703][ T7028] binder: 7026:7028 ioctl 4018620d 2000000000c0 returned -16 [ 70.204952][ T1144] ------------[ cut here ]------------ [ 70.207258][ T1144] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 70.210842][ T1144] WARNING: CPU: 0 PID: 1144 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 70.215435][ T1144] Modules linked in: [ 70.218450][ T1144] CPU: 0 UID: 0 PID: 1144 Comm: kworker/u32:7 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 70.224635][ T1144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.229208][ T1144] Workqueue: bond0 bond_mii_monitor [ 70.231399][ T1144] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 70.234138][ T1144] Code: 05 ff ff ff e8 14 d4 58 f8 c6 05 66 2d 2d 07 01 90 ba 48 00 00 00 48 c7 c6 00 9d e3 8c 48 c7 c7 a0 9c e3 8c e8 34 94 17 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 3f a8 90 e8 ae af bf f8 e9 [ 70.240614][ T1144] RSP: 0018:ffffc9000646f9f0 EFLAGS: 00010286 [ 70.243330][ T1144] RAX: 0000000000000000 RBX: ffff88802c05a000 RCX: ffffffff817ae278 [ 70.246037][ T1144] RDX: ffff888029930000 RSI: ffffffff817ae285 RDI: 0000000000000001 [ 70.248652][ T1144] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 70.251110][ T1144] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff92000c8df48 [ 70.253912][ T1144] R13: ffff88802c05acc5 R14: ffffffff8c59db00 R15: ffffffff899c8c10 [ 70.256453][ T1144] FS: 0000000000000000(0000) GS:ffff8880d6752000(0000) knlGS:0000000000000000 [ 70.259401][ T1144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.261444][ T1144] CR2: 00007fd0667de800 CR3: 000000004f7cf000 CR4: 0000000000352ef0 [ 70.264372][ T1144] Call Trace: [ 70.265470][ T1144] [ 70.266422][ T1144] ethtool_op_get_link+0x1d/0x70 [ 70.267989][ T1144] bond_check_dev_link+0x3fc/0x710 [ 70.269620][ T1144] ? __pfx_bond_check_dev_link+0x10/0x10 [ 70.271373][ T1144] bond_mii_monitor+0x3c0/0x2dc0 [ 70.273315][ T1144] ? __pfx_bond_mii_monitor+0x10/0x10 [ 70.275132][ T1144] ? rcu_is_watching+0x12/0xc0 [ 70.276702][ T1144] process_one_work+0x9cf/0x1b70 [ 70.278299][ T1144] ? __pfx_bond_alb_monitor+0x10/0x10 [ 70.280051][ T1144] ? __pfx_process_one_work+0x10/0x10 [ 70.281857][ T1144] ? assign_work+0x1a0/0x250 [ 70.283472][ T1144] worker_thread+0x6c8/0xf10 [ 70.284952][ T1144] ? __pfx_worker_thread+0x10/0x10 [ 70.286768][ T1144] kthread+0x3c2/0x780 [ 70.288145][ T1144] ? __pfx_kthread+0x10/0x10 [ 70.289622][ T1144] ? rcu_is_watching+0x12/0xc0 [ 70.291144][ T1144] ? __pfx_kthread+0x10/0x10 [ 70.292691][ T1144] ret_from_fork+0x5d4/0x6f0 [ 70.294147][ T1144] ? __pfx_kthread+0x10/0x10 [ 70.295612][ T1144] ret_from_fork_asm+0x1a/0x30 [ 70.297249][ T1144] [ 70.298254][ T1144] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 70.300522][ T1144] CPU: 0 UID: 0 PID: 1144 Comm: kworker/u32:7 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 70.304464][ T1144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.307701][ T1144] Workqueue: bond0 bond_mii_monitor [ 70.309296][ T1144] Call Trace: [ 70.310330][ T1144] [ 70.311196][ T1144] dump_stack_lvl+0x3d/0x1f0 [ 70.312637][ T1144] panic+0x71c/0x800 [ 70.313870][ T1144] ? __pfx_panic+0x10/0x10 [ 70.315257][ T1144] ? show_trace_log_lvl+0x29b/0x3e0 [ 70.316851][ T1144] ? check_panic_on_warn+0x1f/0xb0 [ 70.318641][ T1144] ? __linkwatch_sync_dev+0x1ed/0x230 [ 70.320257][ T1144] check_panic_on_warn+0xab/0xb0 [ 70.321791][ T1144] __warn+0xf6/0x3c0 [ 70.323382][ T1144] ? preempt_schedule_notrace+0x62/0xe0 [ 70.325254][ T1144] ? __linkwatch_sync_dev+0x1ed/0x230 [ 70.326878][ T1144] report_bug+0x3c3/0x580 [ 70.328212][ T1144] ? __linkwatch_sync_dev+0x1ed/0x230 [ 70.329886][ T1144] handle_bug+0x184/0x210 [ 70.331216][ T1144] exc_invalid_op+0x17/0x50 [ 70.332671][ T1144] asm_exc_invalid_op+0x1a/0x20 [ 70.334161][ T1144] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 70.336144][ T1144] Code: 05 ff ff ff e8 14 d4 58 f8 c6 05 66 2d 2d 07 01 90 ba 48 00 00 00 48 c7 c6 00 9d e3 8c 48 c7 c7 a0 9c e3 8c e8 34 94 17 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 3f a8 90 e8 ae af bf f8 e9 [ 70.342101][ T1144] RSP: 0018:ffffc9000646f9f0 EFLAGS: 00010286 [ 70.344525][ T1144] RAX: 0000000000000000 RBX: ffff88802c05a000 RCX: ffffffff817ae278 [ 70.346961][ T1144] RDX: ffff888029930000 RSI: ffffffff817ae285 RDI: 0000000000000001 [ 70.349423][ T1144] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 70.351861][ T1144] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff92000c8df48 [ 70.354510][ T1144] R13: ffff88802c05acc5 R14: ffffffff8c59db00 R15: ffffffff899c8c10 [ 70.356948][ T1144] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 70.358686][ T1144] ? __warn_printk+0x198/0x350 [ 70.360179][ T1144] ? __warn_printk+0x1a5/0x350 [ 70.361682][ T1144] ethtool_op_get_link+0x1d/0x70 [ 70.363299][ T1144] bond_check_dev_link+0x3fc/0x710 [ 70.364864][ T1144] ? __pfx_bond_check_dev_link+0x10/0x10 [ 70.366584][ T1144] bond_mii_monitor+0x3c0/0x2dc0 [ 70.368105][ T1144] ? __pfx_bond_mii_monitor+0x10/0x10 [ 70.369766][ T1144] ? rcu_is_watching+0x12/0xc0 [ 70.371225][ T1144] process_one_work+0x9cf/0x1b70 [ 70.373073][ T1144] ? __pfx_bond_alb_monitor+0x10/0x10 [ 70.374747][ T1144] ? __pfx_process_one_work+0x10/0x10 [ 70.376423][ T1144] ? assign_work+0x1a0/0x250 [ 70.377921][ T1144] worker_thread+0x6c8/0xf10 [ 70.379370][ T1144] ? __pfx_worker_thread+0x10/0x10 [ 70.380973][ T1144] kthread+0x3c2/0x780 [ 70.382360][ T1144] ? __pfx_kthread+0x10/0x10 [ 70.383845][ T1144] ? rcu_is_watching+0x12/0xc0 [ 70.385390][ T1144] ? __pfx_kthread+0x10/0x10 [ 70.386910][ T1144] ret_from_fork+0x5d4/0x6f0 [ 70.388394][ T1144] ? __pfx_kthread+0x10/0x10 [ 70.389953][ T1144] ret_from_fork_asm+0x1a/0x30 [ 70.391551][ T1144] [ 70.393597][ T1144] Kernel Offset: disabled [ 70.394931][ T1144] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:30:07 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bfc25 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc9000646f350 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000006c R14=ffffffff9b0882e0 R15=ffffffff855bfbc0 RIP=ffffffff855bfc4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd0667de800 CR3=000000004f7cf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff89728bf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd065a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd065a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd065a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd065a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd065a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd065a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffea0000cf2700 RBX=ffff8880333f9580 RCX=ffffffff82080989 RDX=ffff888056cd0000 RSI=ffffffff820887f1 RDI=0000000000000000 RBP=000000000000010b RSP=ffffc9000c53f608 R8 =0000000000000006 R9 =0000000000013d0d R10=0000000000033c9c R11=0000000000000001 R12=00007f08602f4000 R13=ffff888059b4f7a0 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff82088817 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f08617aa800 CR3=0000000050221000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde4a622a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0860a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0860a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0860a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0860a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0860a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0860a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000065c81 RBX=0000000000000002 RCX=ffffffff8b80dc69 RDX=0000000000000000 RSI=ffffffff8de1a0ee RDI=ffffffff8c157ca0 RBP=ffffed1003c53910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801e29c880 R14=ffffffff90a80d50 R15=0000000000000000 RIP=ffffffff8b80c7cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004f7cf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff89728bf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd065a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd065a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd065a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd065a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd065a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd065a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff91367902 RBX=ffffffff90b4e31c RCX=dffffc0000000000 RDX=ffffffff81000154 RSI=0000000000000000 RDI=ffffffff90b4e318 RBP=ffffffff90b4e318 RSP=ffffc900016af398 R8 =ffffffff913679ce R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff90b4e318 R13=ffffffff8100012f R14=ffffffff90b4e318 R15=ffffffff90b4e318 RIP=ffffffff816abd29 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555592ddc500 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa224d81178 CR3=000000004ea5b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc15733020 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa224c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa224c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa224c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa224c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa224c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa224c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000