last executing test programs: 2.201225455s ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r2, 0x701, 0x70bd2b, 0x25dfdbfb, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000810) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000080900020073797a3100000000050004000000030011000300686173683a6e65742c6e65740000000014000780050015004b0000000800114000000000050005000a0000000500010006"], 0x60}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40042, 0x1) r4 = syz_io_uring_setup(0x1a1d, &(0x7f0000000540)={0x0, 0x755e, 0x13080, 0x3, 0x2b7, 0x0, r3}, &(0x7f0000000080), &(0x7f0000001740)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='maps\x00') exit(0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000)='jfs\x00', 0x8080, &(0x7f00000001c0)='discard') r5 = epoll_create1(0x80000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000040)={0x6000001d}) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x2803418, &(0x7f00000005c0)={[{@xino_auto}, {@redirect_dir_on}, {@verity_on}], [{@smackfsdef={'smackfsdef', 0x3d, 'maps\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x55, 0x31, 0x64, 0x37, 0x35, 0x63, 0x30], 0x2d, [0x50, 0x33, 0x33, 0x65], 0x2d, [0x66, 0x61, 0x37, 0x36], 0x2d, [0x39, 0x63, 0x7, 0x31], 0x2d, [0x36, 0x37, 0x33, 0x35, 0x38, 0x0, 0x61, 0x66]}}}, {@flag='nomand'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_pwait(r5, &(0x7f0000000780)=[{}], 0x1, 0x12, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.306478546s ago: executing program 0 (id=21): r0 = socket$alg(0x26, 0x5, 0x0) syz_usbip_server_init(0x3) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="05", 0x1) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "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"}, 0x14a) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)=""/159, 0x9f}], 0x1}, 0xc6f0}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)=""/171, 0xab}], 0x1}, 0x3}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001c00070c2cbd70000000000002000000", @ANYRES32=r4, @ANYBLOB="4000100a140001000000000000000000ffffffff00000000ec000200aaaaaaaaaaaa0000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0x7005, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x40141}, 0x8000) accept$ax25(r5, 0x0, 0x0) 1.201662795s ago: executing program 2 (id=23): r0 = socket(0x2, 0x2, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4004) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a310000000005000100"], 0x4c}}, 0x4000080) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x20, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x4) 1.129434391s ago: executing program 1 (id=25): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) io_setup(0x1, &(0x7f00000016c0)=0x0) dup(0xffffffffffffffff) (async) r1 = dup(0xffffffffffffffff) accept(r1, &(0x7f0000000040)=@qipcrtr, &(0x7f00000000c0)=0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) io_getevents(r0, 0xfffffffffffffbff, 0x8, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)={0x0, 0x3938700}) 1.128993932s ago: executing program 2 (id=26): r0 = userfaultfd(0x80801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80002800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x78, 0x31, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x78}}, 0x20000090) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x2000}) 978.21598ms ago: executing program 1 (id=30): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="f60012000a00020013796494068426adb094d1225fbe27e175afda1372c44a6cc4618ddd5b614c4b352ddb5441df823802687f85f19e4a431e0992bc8d497d5794f0997e15d63313358bdde771c4716bedb6b583babf8b5de0e9f14b0d2b9b6004158a9022716e46983263ddc3d58d7fb79057d3c0095ca2538e7dddc41e5602eaa337fe36f4a9918efc55d6c4690985a547b615d1faffffff14b405b677591283bcfc8002472bd0263e67d730bb859d6cf47cf5a691a0ee0ae7c34fc272b7eacaf8599410e75676068e7d40cf866cbc0c649a1aa328444a632344d99e5755c03fbadffd2c02101d6d946e9e23"], 0x28}}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="f60012000a00020013796494068426adb094d1225fbe27e175afda1372c44a6cc4618ddd5b614c4b352ddb5441df823802687f85f19e4a431e0992bc8d497d5794f0997e15d63313358bdde771c4716bedb6b583babf8b5de0e9f14b0d2b9b6004158a9022716e46983263ddc3d58d7fb79057d3c0095ca2538e7dddc41e5602eaa337fe36f4a9918efc55d6c4690985a547b615d1faffffff14b405b677591283bcfc8002472bd0263e67d730bb859d6cf47cf5a691a0ee0ae7c34fc272b7eacaf8599410e75676068e7d40cf866cbc0c649a1aa328444a632344d99e5755c03fbadffd2c02101d6d946e9e23"], 0x28}}, 0x10) (async) 911.807342ms ago: executing program 2 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xfffffffeffffdfff) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r8}, 0x10) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 911.396268ms ago: executing program 1 (id=32): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000002000)=""/4101, 0x1005}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00'}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x1b30}}) ioctl(r2, 0x8b19, &(0x7f0000000040)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='uid_map\x00') lseek(r5, 0x800005, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x188, r6, 0x204, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xa}, {0xc, 0x90, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x100}, {0x1, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x36d}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8001}, {0xc, 0x90, 0x21b2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x188}}, 0x40000) shutdown(r5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 910.190955ms ago: executing program 3 (id=33): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a00fe"], 0x20}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000822bd7000fbdbdf250e000000080039110844eebf9afcea95c6d6d40002"], 0x48}, 0x1, 0x0, 0x0, 0x4000881}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x648, 0x368, 0x578, 0x368, 0x190, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'wg0\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0xff, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_bridge\x00', {0x6}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x32}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x8, @ipv4=@private=0xa010101, 0x4e23}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xffffffff], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='rpm_return_int\x00', r2}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r5}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 804.850696ms ago: executing program 3 (id=34): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f150000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8000}, 0x10}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x100}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) 773.433186ms ago: executing program 1 (id=35): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet(0x10, 0xa, 0x1000d) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r4, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6bb1db03250100000097cd8c4c66025d1cd7abe7615b9b3fd1ed90f54463c2eaff648c6eb64b4d1200"/51, @ANYRES32=r4, @ANYBLOB="00000000000000003800128008000100677265002c000280060010004e220000060011004e210000080004000800000005000a00fd0000000500170000000000"], 0x58}}, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x198) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) (async) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) (async) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r9, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(0x3) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x0, 0x3, 0x0, {0x20, 0x1}, {0x45, 0x2}, @const={0x4, {0xff7c, 0xff, 0xffff, 0x7}}}) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r10, &(0x7f0000000040)="e2", 0x12d8) (async) write$char_usb(r10, &(0x7f0000000040)="e2", 0x12d8) r11 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xe8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x2, 0x5, 0x3, 0xffff}, 0x3, 0x1, 0x2, 0x8, 0x8, 0x1e, 0x17, 0x8, 0x4, 0x1, {0x5a, 0xff, 0x0, 0x5bf, 0x34, 0x2}}}}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x8, 0x7ff, 0x7, 0x1, 0x7, 0x30, 0x4}}, {0xc, 0x2, [0x4, 0x5, 0x2, 0x4]}}, {{0x1c, 0x1, {0x1, 0x6, 0x3, 0xc6, 0x1, 0x2, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x3, 0xb, 0x1d8, 0x2d4d, 0xffffffffffffffff, 0x2902420e, 0x7, 0x2}}, {0x8, 0x2, [0x6, 0xed9]}}]}]}, 0xe8}}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xe8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x2, 0x5, 0x3, 0xffff}, 0x3, 0x1, 0x2, 0x8, 0x8, 0x1e, 0x17, 0x8, 0x4, 0x1, {0x5a, 0xff, 0x0, 0x5bf, 0x34, 0x2}}}}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x8, 0x7ff, 0x7, 0x1, 0x7, 0x30, 0x4}}, {0xc, 0x2, [0x4, 0x5, 0x2, 0x4]}}, {{0x1c, 0x1, {0x1, 0x6, 0x3, 0xc6, 0x1, 0x2, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x3, 0xb, 0x1d8, 0x2d4d, 0xffffffffffffffff, 0x2902420e, 0x7, 0x2}}, {0x8, 0x2, [0x6, 0xed9]}}]}]}, 0xe8}}, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r12}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r12}, 0x10) 691.639933ms ago: executing program 2 (id=36): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x6f, 0x20, 0x4, 0x3, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 688.88533ms ago: executing program 3 (id=37): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x7d5, &(0x7f0000000500)) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r1, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000002080)={'syztnl2\x00', &(0x7f0000001f40)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x5, 0xf8686c00, {{0x40, 0x4, 0x1, 0xc, 0x100, 0x64, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @loopback, {[@ssrr={0x89, 0x27, 0xb0, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010101, @local, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x80, 0x1, 0x6, [{@remote, 0xfffff8cf}]}, @end, @cipso={0x86, 0x20, 0x3, [{0x2, 0x12, "4d179813ce4215d58a38f1697f41b0a2"}, {0x4, 0x8, "c6131afc96bf"}]}, @cipso={0x86, 0x15, 0x1, [{0x0, 0xf, "47e93556232d597d929517bd10"}]}, @rr={0x7, 0x7, 0x8, [@dev={0xac, 0x14, 0x14, 0x22}]}, @timestamp_prespec={0x44, 0x1c, 0x46, 0x3, 0x4, [{@private=0xa010101, 0x5}, {@multicast2, 0x9}, {@remote, 0x9}]}, @end, @cipso={0x86, 0x52, 0x3, [{0x7, 0x8, "8964c23d05c5"}, {0x2, 0x2}, {0x0, 0xe, "a54f78d22241532a0b86a31c"}, {0x5, 0xb, "c695f7c041c894ec66"}, {0x5, 0x8, "28e5776b8a50"}, {0x0, 0x2}, {0x1, 0x6, "99b5d3d9"}, {0x7, 0xc, "36189154c32ae70c54ab"}, {0x6, 0xd, "b7d6bdd5cf109145203b6f"}]}, @timestamp_addr={0x44, 0xc, 0xfa, 0x1, 0x4, [{@private=0xa010100, 0xd}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002380)={0xffffffffffffffff, 0xe0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000002100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002140)=[0x0], 0x0, 0xa7, &(0x7f0000002180)=[{}, {}], 0x10, 0x10, &(0x7f00000021c0), &(0x7f0000002200), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000002240)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000003040)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003000)={&(0x7f00000023c0)={0xc04, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x80, 0x9, 0x6}, {0x401, 0x7, 0x0, 0x80}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x273}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x190, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x8, 0x0, 0x2}, {0x1, 0x7, 0xb, 0x9}, {0x453, 0x4, 0x8, 0x7fff}, {0x0, 0x4, 0xff, 0x100}, {0x7, 0xd, 0xfb, 0x1}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd3e}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}]}}, {{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x380}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}]}}]}, 0xc04}, 0x1, 0x0, 0x0, 0x4048090}, 0x2c004890) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe6080, 0x0) 688.284286ms ago: executing program 1 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000000020000040000000100000012000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000024039d36b1e7152d903a9c4c00000000"], 0x50) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x8, 0x7, 0x5, 0x5, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x68, 0x0, 0x2, 0x4, 0x0, @remote, @empty}}}}) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x2, 0x0, 0x0, 0xb, 0x0, 0x9}, 0x20) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[0x0], 0x1, r10, r11, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x9, 0xb2bf, 0x3, "fe1d00003413000020000000000caa00000009000018001000"}}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000180)) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000040)={0xa, 0x1, 0x6, {0x4000046, 0xffffffea, 0xfffb, 0x3}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000340)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x7fff, r12}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)=r8}, 0x20) 491.717527ms ago: executing program 0 (id=39): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x2, 0xb, &(0x7f0000000000)="01c9033c7e1cd68bd7cf39"}) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x3f, &(0x7f0000000940), 0x4) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) (rerun: 32) 490.972877ms ago: executing program 1 (id=40): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) syz_usb_control_io$uac1(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="ec4969ce12aee5cbcb87448d7b8d39e591f0817d13", 0x15}], 0x1}}], 0x1, 0x20000800) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0x3, 0x2, {0x1, @pix_mp={0xcf6, 0x101c00, 0x3432564e, 0x5, 0x8, [{0x2a302c, 0x10000}, {0x1, 0xfffffffc}, {0x5, 0x9}, {0x7fff0, 0x10001}, {0x2, 0xffffffff}, {0x6, 0x5}, {0xe, 0x8}, {0x8, 0x10000}], 0x7f, 0x6, 0x2, 0x1}}, 0x82}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usb_control_io(r0, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) r6 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f00000001c0)={0x0, "4f6ca9108dfb5d11d7da2926be514a8aacb2e92c5d96b3d7d64216efba835337", 0x3, 0x1000, 0x8, 0x626, 0x4, 0x3, 0x1, 0x7}) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000440)='qnx4\x00', 0x200013, 0x0) 391.332148ms ago: executing program 3 (id=41): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000080)='./file1\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}}, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (rerun: 64) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r4, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 331.445327ms ago: executing program 0 (id=42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x8000000, 0x0, 0x30, 0x0, @in={0x2, 0x4e20, @broadcast}, @ib={0x1b, 0x2, 0x4, {"fe8099bd00"}, 0x39680000000, 0xfffffffffffffffc, 0x5}}}, 0x118) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x57ee}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00') socket$unix(0x1, 0x5, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_PROTOCOLS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002100), r7) lseek(r6, 0x1, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x2a, 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYRESOCT=r9, @ANYRESDEC=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r10}, &(0x7f00000001c0), &(0x7f0000000300)=r11}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) getdents64(r6, &(0x7f0000000000)=""/38, 0x26) 262.085419ms ago: executing program 3 (id=43): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1, 0x200) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f00000019c0)=0x2) io_uring_setup(0x4cb7, &(0x7f0000000380)={0x0, 0x4b79, 0x1000, 0x2, 0x211, 0x0, r0}) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8011}, 0x8040) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r9, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r8, r9, 0x0, 0x8000fb00) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000240)) chdir(&(0x7f0000000140)='./bus\x00') r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r10, 0x8000, 0x3) 119.771403ms ago: executing program 0 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r1, 0x304, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x78) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000001c0)=""/176) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x100, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xe0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x600000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1c0000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x64}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xec1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x48800}, 0x4011) r4 = fsmount(0xffffffffffffffff, 0x1, 0xf4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r0) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x810, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x8000) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f0000000700)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000740)) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000780)) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x90, r5, 0x522, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x68}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000892}, 0x20040000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r4, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x94, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f0000000c40)={'tunl0\x00', r7, 0x20, 0x80, 0xff, 0xbffd, {{0x33, 0x4, 0x0, 0x2c, 0xcc, 0x68, 0x0, 0x80, 0x2d, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast, {[@cipso={0x86, 0x38, 0x3, [{0x2, 0x8, 'x3EsQ\t'}, {0x5, 0x11, "71fd8f22a04e30c264cd9618ac5088"}, {0x0, 0xa, "6a0543dc87299ede"}, {0x2, 0x7, "574d110168"}, {0x7, 0x4, "ed97"}, {0x5, 0x4, "9963"}]}, @timestamp_prespec={0x44, 0x1c, 0x44, 0x3, 0x1, [{@remote, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x6}]}, @timestamp_addr={0x44, 0x34, 0x4b, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@rand_addr=0x64010102, 0x2}, {@broadcast, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@multicast1, 0x7}]}, @lsrr={0x83, 0xf, 0x70, [@dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @ssrr={0x89, 0x1f, 0xf3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010102, @local, @multicast2, @empty, @local]}]}}}}}) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000dc0)=@overlay={0xc, 0x2, 0x4, 0x70000, 0x5, {r8, r9/1000+10000}, {0x1, 0xc, 0xff, 0x8, 0x40, 0x4, "fc7afd5b"}, 0x7f, 0x3, {}, 0x8, 0x0, r4}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000e40)={0x0, 0x8}, &(0x7f0000000e80)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000ec0)={r10, 0x3, 0x20, 0xffffffff, 0x9}, &(0x7f0000000f00)=0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r11, &(0x7f0000001640)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001600)={&(0x7f0000000fc0)={0x628, r6, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IE={0x71, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @ibss={0x6, 0x2, 0x3}, @erp={0x2a, 0x1, {0x1, 0x1}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xce, 0x8}}, @mic={0x8c, 0x10, {0x6a5, "afb4ae5c17a1", @short="eafbdeb28a35966e"}}, @preq={0x82, 0x41, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0xb0, 0x5, 0x9, @broadcast, 0x5, @value=@device_b, 0x4, 0x4e7, 0x3, [{{0x1, 0x0, 0x1}, @broadcast}, {{0x1}, @broadcast, 0xfffffffa}, {{0x1}, @device_a, 0x3}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x94, 0xfc, "2cbdc7124d383abc788da7d62712f0f834eedf3a4276f9675d5f9174f8f3e45002ec951aebada9d6ff22529107f32d0239b2456ead95388ecc2bbf0d81e3d937c3f12d79df4ae527aa75f0e52d267bd45c6bf795ce5b14011aa1e2ff7fc3046039c3e9ddb17934e87f46efb09b1ff01bc418f916f31f2c2efdf4aceca8c489c20ff3b51bb4298f908a324db3457aeece"}, @NL80211_ATTR_FILS_ERP_REALM={0x6, 0xfa, "41a7"}, @NL80211_ATTR_FILS_ERP_RRK={0x87, 0xfc, "58302dcdd786c3a498e7d5791e16f92a0695d8cd3aa28406629bf8afab5747ca6cd382cb322634d16e6f1e51de322e44385920e58c4fccf39bedd32eeae8706262add29e71ce019968c47cc03e1594565fecd3d2ed226ee64bca0a5a38e5fb65fed073c7c48a5136922e52e5388a05d1427eb79a6063d29ef3afb6517ac6ed76558f5b"}, @NL80211_ATTR_FILS_ERP_REALM={0x42, 0xfa, "aa8564ad29ac6160984a2c2803c66fdf4632e4409b2db027a40cc3088173ce59a4f8fc9ca3efb367491557cdda0c76b57d44c95e3c15de3e5518c3e9f289"}, @NL80211_ATTR_FILS_ERP_RRK={0x101, 0xfc, "46c2f014e8322b8c722d640ea1c13832ab77c64c229a11c050b351135fbd3c2f9dc82ab2903fa6e1d5c3a8b683c60682f6970fd13814fd3b201c86ac88a16f1936dbd5937ebf1399e31f431c18da7d7fa335163f7f73ce0732c2d3b9323908250bed9111d8d2a0c8044e3ae1c946343f54e2e2f39470c29e32ba78de97cc85b8207fdf417c250f69b21789c99796da085ae527c01bcc343eb5133acf4c0422a5cce6386d6b96835bb393d7d6d89428ec1c10ade8d3744de44b72e7df636f11f62fab5d99f62f314b1a70ffd167e970cf697af8955262458afc0f23929e717ee46382e1dd7f4139f68d6c56c30cd7f631692678439406dd6a1b1347332e"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_REALM={0x51, 0xfa, "23f539a74016d4c8457820d63a0dc314c9399ea4c885d5e0806de5ebe0e08b7c49b180a16275816d1fc11fa8cf60f8b6ebb01d12e42da30c93097b3188c729846e98f9df35cd41a8f14a5d532c"}, @NL80211_ATTR_FILS_ERP_REALM={0xc6, 0xfa, "253103986ce5fb52ee01b627e5f5cecf765420cc88bb7d2ddecb6cfb94e884ced1b1238ace8b0735fc2043900625d0a3d80f6e49fd962d57af719e11b5f10285ebbc99e907d7c3bb76d6c7fbb07aed96520cf036c9aa90850146f52a725b1b60480608b8009cb13e0dd5b29159fa67920e0a6c94a0004db4d8c44e27278563bfd9e568255067f8e25aee9cf8a963dfc981b1514606c447c4fe8415f21081363a68f7fb2e67413cb906f6ea8085b28dfda49532a6a6d99f37a62d39868d77cf569a3f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "c549d548dd61f33c3f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "e7eb77cd4f482b37"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f8ce1a"}, @NL80211_ATTR_FILS_ERP_REALM={0xd8, 0xfa, "9176a5e10e47cc1558bd984d654dbef35783bdf8820793c6ae5d7e25e36191727e8b7f949f09c621c5eea88de284c1b3aa3c01a53757ce82e2e1b57173c84b1b90582618c46b3068f039999675a80fd021bb677fa72bde91fecdf9ca67ca8c296ac63dfd54dd76cb573357291ca4a1374a797946d38a307cfe5317d77e705a282f816b8b80f5b19d64057b33b2a6f2bf9e75491837ec48d5a1b9571e9bd7183ede2c91e3233b6b4813b3b324996965fb76b45eea979ac464f1c1499e090d16a955f6f2c8ececa2d0cdfadb2f7a9d8eebd66733d8"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x322}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff9}, @NL80211_ATTR_FILS_ERP_RRK={0x7, 0xfc, "30ffc9"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0x94, 0xfa, "91991c04d8c9259c303e473af5e978b8039eca144aaa941cac95c6a2842d45d93b3d08035f5bf78801e56f7c27f5445a485e2fa89278ccadd2b5cf69d916a9ad46224336e0da049977732d3e099e10271649ac1a4b4ac7039d4eec8b87982cd0f5c6ef8bddd3c8f7674c7cfbd896d3c62112ef950eae776845565e6853496035a85d1a1d515542d42d122baac7481d81"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "7427c1f1097aa2a3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "117f313f586490018b9afa8ddaea2c"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "4bfabff5dd476cf4032e65643e762162"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf58}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}]]}, 0x628}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001680)) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r11, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x48, r13, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) sendmsg$NL80211_CMD_GET_MPATH(r11, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x58, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001980)={0x2, {0x2, 0x8, 0x5, 0xef4, 0xfff9, 0x2}}) 48.075995ms ago: executing program 0 (id=45): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0xa}]}}}]}, 0x40}}, 0x0) r3 = syz_io_uring_setup(0x5e8, &(0x7f0000000000)={0x0, 0x4dd8, 0x4000, 0x3, 0x65}, &(0x7f00000001c0), &(0x7f0000000280)) io_uring_enter(r3, 0x3ab7, 0xc887, 0x14, &(0x7f00000002c0)={[0x6]}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0xa}]}}}]}, 0x40}}, 0x0) (async) syz_io_uring_setup(0x5e8, &(0x7f0000000000)={0x0, 0x4dd8, 0x4000, 0x3, 0x65}, &(0x7f00000001c0), &(0x7f0000000280)) (async) io_uring_enter(r3, 0x3ab7, 0xc887, 0x14, &(0x7f00000002c0)={[0x6]}, 0x8) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) 1.178453ms ago: executing program 0 (id=46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) r1 = syz_clone(0x4400080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peekuser(0x3, r1, 0x380) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x487, 0x0, 0x9}]}) 0s ago: executing program 3 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xb, 0x8, 0x7fc00002}]}) userfaultfd(0x80801) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0x40082104, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x3, 0x0, 0x0, {0xffffffffffffffff, 0x5, 0x0, 0x3d3f, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xa000, 0x0, 0xffffffffffffffff, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x21, 0x0, 0x128200}}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:31310' (ED25519) to the list of known hosts. [ 60.714585][ T40] audit: type=1400 audit(1767473569.239:62): avc: denied { name_bind } for pid=5851 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.771099][ T40] audit: type=1400 audit(1767473569.299:63): avc: denied { execute } for pid=5852 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.781176][ T40] audit: type=1400 audit(1767473569.309:64): avc: denied { execute_no_trans } for pid=5852 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.749814][ T40] audit: type=1400 audit(1767473572.279:65): avc: denied { mounton } for pid=5852 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.761353][ T40] audit: type=1400 audit(1767473572.289:66): avc: denied { mount } for pid=5852 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.772917][ T5852] cgroup: Unknown subsys name 'net' [ 63.776785][ T40] audit: type=1400 audit(1767473572.309:67): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.938586][ T5852] cgroup: Unknown subsys name 'cpuset' [ 63.948636][ T5852] cgroup: Unknown subsys name 'rlimit' [ 64.105212][ T40] audit: type=1400 audit(1767473572.639:68): avc: denied { setattr } for pid=5852 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.114688][ T40] audit: type=1400 audit(1767473572.639:69): avc: denied { create } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.123311][ T40] audit: type=1400 audit(1767473572.639:70): avc: denied { write } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.132122][ T40] audit: type=1400 audit(1767473572.639:71): avc: denied { read } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.142151][ T40] audit: type=1400 audit(1767473572.649:72): avc: denied { mounton } for pid=5852 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.153221][ T40] audit: type=1400 audit(1767473572.649:73): avc: denied { mount } for pid=5852 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.164385][ T40] audit: type=1400 audit(1767473572.659:74): avc: denied { read } for pid=5643 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 64.191366][ T5921] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 65.245264][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.356417][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 70.356434][ T40] audit: type=1400 audit(1767473578.879:82): avc: denied { execmem } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 70.705206][ T40] audit: type=1400 audit(1767473579.239:83): avc: denied { create } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.716711][ T40] audit: type=1400 audit(1767473579.239:84): avc: denied { read write } for pid=5937 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 70.730315][ T40] audit: type=1400 audit(1767473579.239:85): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 70.741375][ T40] audit: type=1400 audit(1767473579.249:86): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="socket:[5756]" dev="sockfs" ino=5756 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.759446][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.763683][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.766573][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.766703][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.769684][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.773934][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.773976][ T5952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.776777][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.778068][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.779187][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.779417][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.779579][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.780206][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.780579][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.780662][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.782156][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.793503][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.794289][ T40] audit: type=1400 audit(1767473579.319:87): avc: denied { read } for pid=5938 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.797175][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.798032][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.799419][ T40] audit: type=1400 audit(1767473579.319:88): avc: denied { open } for pid=5938 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.799897][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.855395][ T40] audit: type=1400 audit(1767473579.329:89): avc: denied { mounton } for pid=5937 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 71.109898][ T40] audit: type=1400 audit(1767473579.639:90): avc: denied { module_request } for pid=5937 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 71.155958][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 71.291521][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 71.360231][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.363755][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.367112][ T5937] bridge_slave_0: entered allmulticast mode [ 71.370941][ T5937] bridge_slave_0: entered promiscuous mode [ 71.375633][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 71.381638][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.385069][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.388396][ T5937] bridge_slave_1: entered allmulticast mode [ 71.392960][ T5937] bridge_slave_1: entered promiscuous mode [ 71.484015][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.487381][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.490959][ T5942] bridge_slave_0: entered allmulticast mode [ 71.495400][ T5942] bridge_slave_0: entered promiscuous mode [ 71.506787][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.510058][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.516687][ T5942] bridge_slave_1: entered allmulticast mode [ 71.521292][ T5942] bridge_slave_1: entered promiscuous mode [ 71.528306][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.538528][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 71.562044][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.612764][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.652233][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.677756][ T5937] team0: Port device team_slave_0 added [ 71.700446][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.702893][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.705946][ T5947] bridge_slave_0: entered allmulticast mode [ 71.710209][ T5947] bridge_slave_0: entered promiscuous mode [ 71.722309][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.725284][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.729143][ T5947] bridge_slave_1: entered allmulticast mode [ 71.733329][ T5947] bridge_slave_1: entered promiscuous mode [ 71.739383][ T5937] team0: Port device team_slave_1 added [ 71.755234][ T5942] team0: Port device team_slave_0 added [ 71.793407][ T5942] team0: Port device team_slave_1 added [ 71.842008][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.859014][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.862483][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.874151][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.880922][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.884571][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.888151][ T5938] bridge_slave_0: entered allmulticast mode [ 71.892000][ T5938] bridge_slave_0: entered promiscuous mode [ 71.898963][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.905105][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.908512][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.920330][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.926535][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.930084][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.941618][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.947322][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.950200][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.952962][ T5938] bridge_slave_1: entered allmulticast mode [ 71.957756][ T5938] bridge_slave_1: entered promiscuous mode [ 71.974563][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.977371][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.988955][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.033372][ T5947] team0: Port device team_slave_0 added [ 72.047170][ T5947] team0: Port device team_slave_1 added [ 72.084521][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.087111][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.097800][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.104727][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.117178][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.119607][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.130931][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.138429][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.172384][ T5937] hsr_slave_0: entered promiscuous mode [ 72.177305][ T5937] hsr_slave_1: entered promiscuous mode [ 72.213993][ T5942] hsr_slave_0: entered promiscuous mode [ 72.218154][ T5942] hsr_slave_1: entered promiscuous mode [ 72.221613][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 72.224164][ T5942] Cannot create hsr debugfs directory [ 72.237811][ T5938] team0: Port device team_slave_0 added [ 72.256007][ T5938] team0: Port device team_slave_1 added [ 72.366200][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.369296][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.381067][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.392073][ T5947] hsr_slave_0: entered promiscuous mode [ 72.395918][ T5947] hsr_slave_1: entered promiscuous mode [ 72.400013][ T5947] debugfs: 'hsr0' already exists in 'hsr' [ 72.402904][ T5947] Cannot create hsr debugfs directory [ 72.422764][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.425611][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.435572][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.553397][ T5938] hsr_slave_0: entered promiscuous mode [ 72.557220][ T5938] hsr_slave_1: entered promiscuous mode [ 72.560311][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 72.562795][ T5938] Cannot create hsr debugfs directory [ 72.835497][ T5945] Bluetooth: hci1: command tx timeout [ 72.844984][ T5945] Bluetooth: hci3: command tx timeout [ 72.845000][ T5950] Bluetooth: hci2: command tx timeout [ 72.845650][ T5952] Bluetooth: hci0: command tx timeout [ 72.879419][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.903264][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.912312][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.941104][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.999237][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.025862][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.043276][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.052873][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.109948][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.119322][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.145473][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.153192][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.237611][ T5947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.246628][ T5947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.256958][ T5947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.266522][ T5947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.327181][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.375511][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.394908][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.398740][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.423696][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.427158][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.462375][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.518691][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.542682][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.554936][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.578120][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.581533][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.601075][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.604517][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.618049][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.636156][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.639321][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.646092][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.650309][ T40] audit: type=1400 audit(1767473582.179:91): avc: denied { sys_module } for pid=5937 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.688406][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.691587][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.699519][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.702867][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.723263][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.727065][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.830311][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.913290][ T5937] veth0_vlan: entered promiscuous mode [ 73.928691][ T5937] veth1_vlan: entered promiscuous mode [ 73.963442][ T5937] veth0_macvtap: entered promiscuous mode [ 73.972576][ T5937] veth1_macvtap: entered promiscuous mode [ 73.985837][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.027466][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.048669][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.058470][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.073846][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.087558][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.096898][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.101387][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.127863][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.148037][ T5938] veth0_vlan: entered promiscuous mode [ 74.197023][ T5938] veth1_vlan: entered promiscuous mode [ 74.273624][ T5942] veth0_vlan: entered promiscuous mode [ 74.277468][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.281338][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.284668][ T5942] veth1_vlan: entered promiscuous mode [ 74.302187][ T5947] veth0_vlan: entered promiscuous mode [ 74.310015][ T1212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.314017][ T1212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.324651][ T5947] veth1_vlan: entered promiscuous mode [ 74.371312][ T5942] veth0_macvtap: entered promiscuous mode [ 74.380248][ T5938] veth0_macvtap: entered promiscuous mode [ 74.381879][ T5937] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.397154][ T5938] veth1_macvtap: entered promiscuous mode [ 74.407234][ T5942] veth1_macvtap: entered promiscuous mode [ 74.421411][ T5947] veth0_macvtap: entered promiscuous mode [ 74.441158][ T5947] veth1_macvtap: entered promiscuous mode [ 74.476416][ T6027] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2'. [ 74.482014][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.489397][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.517316][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.522224][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.543006][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.547627][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.551644][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.562576][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.572249][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.577691][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.579632][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.582348][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.593355][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.605624][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.612155][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.640416][ T1212] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.645400][ T6033] Zero length message leads to an empty skb [ 74.657758][ T1212] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.679232][ T1212] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.697016][ T1212] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.716440][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.720512][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.775630][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.778537][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.804832][ T6038] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 74.829794][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.834025][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.863799][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.868209][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.914941][ T5952] Bluetooth: hci0: command tx timeout [ 74.917456][ T5952] Bluetooth: hci2: command tx timeout [ 74.918184][ T5945] Bluetooth: hci3: command tx timeout [ 74.920047][ T5952] Bluetooth: hci1: command tx timeout [ 74.934311][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.937677][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.973127][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.981451][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.998066][ T6043] netem: change failed [ 75.080353][ T6048] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.092232][ T6048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6048 comm=syz.0.1 [ 75.100066][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.110270][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.114860][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.119947][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.190902][ T6054] JFS: discard option not supported on device [ 75.202156][ T6054] Mount JFS Failure: -5 [ 75.332980][ T6065] SELinux: policydb string length 14080 does not match expected length 8 [ 75.337370][ T6065] SELinux: failed to load policy [ 75.410364][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 75.410383][ T40] audit: type=1400 audit(1767473583.939:164): avc: denied { create } for pid=6069 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.430772][ T40] audit: type=1400 audit(1767473583.959:165): avc: denied { read } for pid=6069 comm="syz.0.15" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.441796][ T40] audit: type=1400 audit(1767473583.959:166): avc: denied { open } for pid=6069 comm="syz.0.15" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.458930][ T40] audit: type=1400 audit(1767473583.959:168): avc: denied { map_read map_write } for pid=6069 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 75.474276][ T40] audit: type=1400 audit(1767473583.959:167): avc: denied { ioctl } for pid=6069 comm="syz.0.15" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.495158][ T40] audit: type=1400 audit(1767473583.959:169): avc: denied { set_context_mgr } for pid=6069 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 75.504336][ T40] audit: type=1400 audit(1767473583.969:170): avc: denied { bind } for pid=6069 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.536703][ T40] audit: type=1400 audit(1767473584.069:171): avc: denied { write } for pid=6073 comm="syz.0.16" name="ip_tables_targets" dev="proc" ino=4026533379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 75.571619][ T40] audit: type=1400 audit(1767473584.099:172): avc: denied { read } for pid=6076 comm="syz.1.17" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.582860][ T40] audit: type=1400 audit(1767473584.099:173): avc: denied { open } for pid=6076 comm="syz.1.17" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.621867][ T6079] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 75.892629][ T6082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6082 comm=syz.3.19 [ 75.916951][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 75.922365][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 75.927492][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 75.932113][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 76.062527][ T6095] nbd: must specify at least one socket [ 76.096074][ T6098] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 76.098995][ T6098] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.106889][ T6101] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.23'. [ 76.119005][ T6098] vhci_hcd vhci_hcd.0: Device attached [ 76.237228][ T6115] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.244653][ T6098] "syz.0.21" (6098) uses obsolete ecb(arc4) skcipher [ 76.252918][ T6100] vhci_hcd: connection closed [ 76.256624][ T54] vhci_hcd vhci_hcd.0: stop threads [ 76.267363][ T54] vhci_hcd vhci_hcd.0: release socket [ 76.267964][ T6118] netlink: 'syz.2.26': attribute type 15 has an invalid length. [ 76.272093][ T54] vhci_hcd vhci_hcd.0: disconnect device [ 76.312639][ T6005] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 76.373264][ C0] Unknown status report in ack skb [ 76.449162][ T6130] xt_TPROXY: Can be used only with -p tcp or -p udp [ 76.457520][ T6131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6131 comm=syz.1.32 [ 76.844470][ T837] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 76.995443][ T837] usb 7-1: device descriptor read/64, error -71 [ 77.002296][ T5945] Bluetooth: hci2: command tx timeout [ 77.002321][ T5951] Bluetooth: hci0: command tx timeout [ 77.002449][ T5952] Bluetooth: hci3: command tx timeout [ 77.006536][ T5951] Bluetooth: hci1: command tx timeout [ 77.089379][ T6165] syzkaller0: entered promiscuous mode [ 77.091902][ T6165] syzkaller0: entered allmulticast mode [ 77.106126][ T6032] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 77.234456][ T837] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 77.264565][ T6032] usb 6-1: Using ep0 maxpacket: 8 [ 77.276377][ T6032] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 77.281656][ T6032] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 77.288053][ T6032] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.292561][ T6032] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.299687][ T6032] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.305447][ T6032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.325115][ T5950] ================================================================== [ 77.328547][ T5950] BUG: KASAN: slab-use-after-free in le_read_features_complete+0x5b/0x390 [ 77.331855][ T5950] Write of size 4 at addr ffff88802fad0010 by task kworker/u33:4/5950 [ 77.335260][ T5950] [ 77.338119][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 77.338146][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.338159][ T5950] Workqueue: hci2 hci_cmd_sync_work [ 77.338189][ T5950] Call Trace: [ 77.338195][ T5950] [ 77.338202][ T5950] dump_stack_lvl+0x116/0x1f0 [ 77.338229][ T5950] print_report+0xcd/0x630 [ 77.338267][ T5950] ? __virt_addr_valid+0x81/0x610 [ 77.338285][ T5950] ? __phys_addr+0xe8/0x180 [ 77.338303][ T5950] ? le_read_features_complete+0x5b/0x390 [ 77.338329][ T5950] kasan_report+0xe0/0x110 [ 77.338354][ T5950] ? le_read_features_complete+0x5b/0x390 [ 77.338384][ T5950] kasan_check_range+0x100/0x1b0 [ 77.338413][ T5950] le_read_features_complete+0x5b/0x390 [ 77.338440][ T5950] hci_cmd_sync_work+0x1ff/0x470 [ 77.338468][ T5950] ? __pfx_le_read_features_complete+0x10/0x10 [ 77.338498][ T5950] process_one_work+0x9ba/0x1b20 [ 77.338530][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 77.338560][ T5950] ? assign_work+0x1a0/0x250 [ 77.338585][ T5950] worker_thread+0x6c8/0xf10 [ 77.338615][ T5950] ? __kthread_parkme+0x19e/0x250 [ 77.338636][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 77.338662][ T5950] kthread+0x3c5/0x780 [ 77.338686][ T5950] ? __pfx_kthread+0x10/0x10 [ 77.338710][ T5950] ? rcu_is_watching+0x12/0xc0 [ 77.338730][ T5950] ? __pfx_kthread+0x10/0x10 [ 77.338763][ T5950] ret_from_fork+0x983/0xb10 [ 77.338787][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 77.338810][ T5950] ? rcu_is_watching+0x12/0xc0 [ 77.338828][ T5950] ? __switch_to+0x7af/0x10d0 [ 77.338855][ T5950] ? __pfx_kthread+0x10/0x10 [ 77.338879][ T5950] ret_from_fork_asm+0x1a/0x30 [ 77.338917][ T5950] [ 77.338925][ T5950] [ 77.414409][ T5950] Allocated by task 5952: [ 77.416366][ T5950] kasan_save_stack+0x33/0x60 [ 77.418275][ T5950] kasan_save_track+0x14/0x30 [ 77.420147][ T5950] __kasan_kmalloc+0xaa/0xb0 [ 77.421870][ T5950] __hci_conn_add+0xf8/0x1cc0 [ 77.423570][ T5950] hci_conn_add_unset+0x76/0x130 [ 77.425490][ T5950] le_conn_complete_evt+0x639/0x1fa0 [ 77.427820][ T5950] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 77.430402][ T5950] hci_le_meta_evt+0x357/0x610 [ 77.432207][ T5950] hci_event_packet+0x685/0x1210 [ 77.434287][ T5950] hci_rx_work+0x2c9/0x1020 [ 77.436244][ T5950] process_one_work+0x9ba/0x1b20 [ 77.438308][ T5950] worker_thread+0x6c8/0xf10 [ 77.440633][ T5950] kthread+0x3c5/0x780 [ 77.442180][ T5950] ret_from_fork+0x983/0xb10 [ 77.444213][ T5950] ret_from_fork_asm+0x1a/0x30 [ 77.446934][ T5950] [ 77.447993][ T5950] Freed by task 5952: [ 77.449817][ T5950] kasan_save_stack+0x33/0x60 [ 77.451704][ T5950] kasan_save_track+0x14/0x30 [ 77.453457][ T5950] kasan_save_free_info+0x3b/0x60 [ 77.455411][ T5950] __kasan_slab_free+0x5f/0x80 [ 77.457356][ T5950] kfree+0x2f8/0x6e0 [ 77.459283][ T5950] device_release+0xa4/0x240 [ 77.461516][ T5950] kobject_put+0x1ef/0x6f0 [ 77.463979][ T5950] device_unregister+0x2f/0xe0 [ 77.466041][ T5950] hci_conn_del_sysfs+0xdd/0x1a0 [ 77.468105][ T5950] hci_conn_del+0x680/0x11d0 [ 77.470119][ T5950] hci_disconn_complete_evt+0x410/0xa30 [ 77.472496][ T5950] hci_event_packet+0xa39/0x1210 [ 77.474445][ T5950] hci_rx_work+0x2c9/0x1020 [ 77.476327][ T5950] process_one_work+0x9ba/0x1b20 [ 77.476640][ T6181] overlay: Unknown parameter 'TôÞuÁH' [ 77.478438][ T5950] worker_thread+0x6c8/0xf10 [ 77.482458][ T5950] kthread+0x3c5/0x780 [ 77.484136][ T5950] ret_from_fork+0x983/0xb10 [ 77.486201][ T5950] ret_from_fork_asm+0x1a/0x30 [ 77.488360][ T5950] [ 77.489754][ T5950] The buggy address belongs to the object at ffff88802fad0000 [ 77.489754][ T5950] which belongs to the cache kmalloc-8k of size 8192 [ 77.496423][ T5950] The buggy address is located 16 bytes inside of [ 77.496423][ T5950] freed 8192-byte region [ffff88802fad0000, ffff88802fad2000) [ 77.501932][ T5950] [ 77.502863][ T5950] The buggy address belongs to the physical page: [ 77.505416][ T5950] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802fad0000 pfn:0x2fad0 [ 77.510519][ T5950] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 77.513659][ T5950] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 77.516546][ T5950] page_type: f5(slab) [ 77.518187][ T5950] raw: 00fff00000000040 ffff88801b443180 ffffea0000d80400 0000000000000003 [ 77.521247][ T5950] raw: ffff88802fad0000 0000000000020000 00000000f5000000 0000000000000000 [ 77.524466][ T5950] head: 00fff00000000040 ffff88801b443180 ffffea0000d80400 0000000000000003 [ 77.528127][ T5950] head: ffff88802fad0000 0000000000020000 00000000f5000000 0000000000000000 [ 77.532027][ T5950] head: 00fff00000000003 ffffea0000beb401 00000000ffffffff 00000000ffffffff [ 77.535749][ T5950] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 77.539832][ T5950] page dumped because: kasan: bad access detected [ 77.542611][ T5950] page_owner tracks the page as allocated [ 77.544989][ T5950] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5634, tgid 5634 (ifup), ts 45717928044, free_ts 45679479721 [ 77.553033][ T5950] post_alloc_hook+0x1af/0x220 [ 77.554754][ T5950] get_page_from_freelist+0xd0b/0x31a0 [ 77.556651][ T5950] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 77.558999][ T5950] alloc_pages_mpol+0x1fb/0x550 [ 77.560961][ T5950] new_slab+0x2c3/0x430 [ 77.562890][ T5950] ___slab_alloc+0xe18/0x1c90 [ 77.564665][ T5950] __slab_alloc.constprop.0+0x63/0x110 [ 77.566841][ T5950] __kmalloc_cache_noprof+0x485/0x800 [ 77.569295][ T5950] tomoyo_init_log+0xc8a/0x2140 [ 77.571046][ T5950] tomoyo_supervisor+0x302/0x13b0 [ 77.572871][ T5950] tomoyo_env_perm+0x191/0x200 [ 77.574606][ T5950] tomoyo_find_next_domain+0xec1/0x20b0 [ 77.576593][ T5950] tomoyo_bprm_check_security+0x12d/0x1d0 [ 77.578696][ T5950] security_bprm_check+0x1b9/0x1e0 [ 77.580772][ T5950] bprm_execve+0x81e/0x1620 [ 77.582369][ T5950] do_execveat_common.isra.0+0x4a5/0x610 [ 77.584195][ T5950] page last free pid 5633 tgid 5633 stack trace: [ 77.586795][ T5950] __free_frozen_pages+0x7df/0x1170 [ 77.588652][ T5950] __put_partials+0x130/0x170 [ 77.590569][ T5950] qlist_free_all+0x4c/0xf0 [ 77.592207][ T5950] kasan_quarantine_reduce+0x195/0x1e0 [ 77.594253][ T5950] __kasan_slab_alloc+0x69/0x90 [ 77.596217][ T5950] __kmalloc_cache_noprof+0x282/0x800 [ 77.598676][ T5950] tomoyo_init_log+0x197/0x2140 [ 77.600666][ T5950] tomoyo_supervisor+0x302/0x13b0 [ 77.602369][ T5950] tomoyo_env_perm+0x191/0x200 [ 77.604106][ T5950] tomoyo_find_next_domain+0xec1/0x20b0 [ 77.605889][ T5950] tomoyo_bprm_check_security+0x12d/0x1d0 [ 77.607742][ T5950] security_bprm_check+0x1b9/0x1e0 [ 77.609879][ T5950] bprm_execve+0x81e/0x1620 [ 77.611970][ T5950] do_execveat_common.isra.0+0x4a5/0x610 [ 77.614353][ T5950] __x64_sys_execve+0x8e/0xb0 [ 77.616048][ T5950] do_syscall_64+0xcd/0xf80 [ 77.617437][ T5950] [ 77.618145][ T5950] Memory state around the buggy address: [ 77.620185][ T5950] ffff88802facff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.623143][ T5950] ffff88802facff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.626629][ T5950] >ffff88802fad0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.629057][ T5950] ^ [ 77.631004][ T5950] ffff88802fad0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.634483][ T5950] ffff88802fad0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.637821][ T5950] ================================================================== [ 77.646495][ T837] usb 7-1: device descriptor read/64, error -71 [ 77.649121][ T5950] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.651387][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 77.655194][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.660194][ T5950] Workqueue: hci2 hci_cmd_sync_work [ 77.662910][ T5950] Call Trace: [ 77.664701][ T5950] [ 77.666067][ T5950] dump_stack_lvl+0x3d/0x1f0 [ 77.668027][ T5950] vpanic+0x640/0x6f0 [ 77.670621][ T5950] panic+0xca/0xd0 [ 77.672670][ T5950] ? __pfx_panic+0x10/0x10 [ 77.674961][ T5950] ? le_read_features_complete+0x5b/0x390 [ 77.677427][ T5950] ? preempt_schedule_common+0x44/0xc0 [ 77.680072][ T5950] ? preempt_schedule_thunk+0x16/0x30 [ 77.682458][ T5950] ? check_panic_on_warn+0x1f/0xb0 [ 77.684515][ T5950] check_panic_on_warn+0xab/0xb0 [ 77.686825][ T5950] end_report+0x107/0x160 [ 77.688906][ T5950] kasan_report+0xee/0x110 [ 77.690909][ T5950] ? le_read_features_complete+0x5b/0x390 [ 77.693438][ T5950] kasan_check_range+0x100/0x1b0 [ 77.696223][ T5950] le_read_features_complete+0x5b/0x390 [ 77.698825][ T5950] hci_cmd_sync_work+0x1ff/0x470 [ 77.701244][ T5950] ? __pfx_le_read_features_complete+0x10/0x10 [ 77.704259][ T5950] process_one_work+0x9ba/0x1b20 [ 77.706337][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 77.708525][ T5950] ? assign_work+0x1a0/0x250 [ 77.711251][ T5950] worker_thread+0x6c8/0xf10 [ 77.714301][ T5950] ? __kthread_parkme+0x19e/0x250 [ 77.716298][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 77.718243][ T5950] kthread+0x3c5/0x780 [ 77.720325][ T5950] ? __pfx_kthread+0x10/0x10 [ 77.722799][ T5950] ? rcu_is_watching+0x12/0xc0 [ 77.724954][ T5950] ? __pfx_kthread+0x10/0x10 [ 77.726993][ T5950] ret_from_fork+0x983/0xb10 [ 77.729099][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 77.731312][ T5950] ? rcu_is_watching+0x12/0xc0 [ 77.733510][ T5950] ? __switch_to+0x7af/0x10d0 [ 77.735330][ T5950] ? __pfx_kthread+0x10/0x10 [ 77.736800][ T5950] ret_from_fork_asm+0x1a/0x30 [ 77.738387][ T5950] [ 77.740342][ T5950] Kernel Offset: disabled [ 77.741798][ T5950] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:53:06 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff88806a43bc40 RCX=1ffff1100fffacae RDX=1ffff1100d48778d RSI=ffffffff8bf2b400 RDI=ffff88806a43bc68 RBP=0000000000000000 RSP=ffffc90003a07528 R8 =0000000000000006 R9 =0000000000000000 R10=0000000000001000 R11=ffff888025bad4b0 R12=0000000000140cca R13=0000000000000001 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81a3158b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f18a4047880 ffffffff 00c00000 GS =0000 ffff8880d68f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564019c58d40 CR3=0000000034651000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000007f780000 Opmask01=0000000000000000 Opmask02=00000000010fffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564019c59460 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564019db2340 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18a405d7f0 00007f18a405d7e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18a39f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffff00000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564019d64eb0 0000564019d64eb0 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 00000000ffffffff 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b00000000000000 ce000000001d1f1f 00191f1f004d5c5a 005c5a4d00594a4b ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a756b733a302e 30312d3533712d63 707276633a317463 3a554d45516e7663 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853265b5 RDI=ffffffff9aeedc40 RBP=ffffffff9aeedc00 RSP=ffffc9000309f588 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000035393554 R12=0000000000000000 R13=000000000000005d R14=ffffffff9aeedc00 R15=ffffffff85326550 RIP=ffffffff853265df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000380 CR3=000000002cb7a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555b8d2175 000055555b8d1b60 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555b8da3e5 000055555b8d9bf0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555b8d5458 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00657375662f7665 642f01ffffffffff ffffffeb08018280 0300100001818004 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0620100004014fda 0fffffffffffff04 0fffffffffffff04 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004880302080004 80030e8010000000 0002080606100006 0150fc0000000208 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010480041880c5ba 9008000100000008 0606011eba121000 04a0030008000498 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03128e0800049003 0008000488030208 000480030e801000 0000000208060610 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060150fc000000 0208062010000401 4fda0fffffffffff ff040fffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff040fffffffffff ff040010000fffff ffffffff04448082 8010000c0272d600 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7194000200071010 000b800428100006 a28e080001eaee08 000100000608060c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff820b959a RBX=00007f9157915720 RCX=00000000000315f8 RDX=ffffffff820b95d0 RSI=ffffffff820b959a RDI=0000000000000001 RBP=ffffffff820b95d0 RSP=00007fffad8d38e0 R8 =00007f9156de6038 R9 =00007f9156dd2000 R10=00007f91565ff008 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=ffffffff820b95d0 R15=00000000000315f8 RIP=00007f9156a6f001 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555577079500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c31a423 CR3=00000000235ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156c15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156c1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156c15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156c1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156c150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156c151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156dba4a8 00007f9156dba4a0 00007f9156dba498 00007f9156dba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f915791d100 00007f9156dba460 00007f9156dba478 00007f9156dba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156dba4b8 00007f9156dba4b0 00007f9156dba4a8 00007f9156dba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000069a RBX=0000000000000002 RCX=ffffffff95baf350 RDX=0000000000000004 RSI=0000000000000007 RDI=ffffffff8e3c95e0 RBP=0000000000000007 RSP=ffffc900039f7428 R8 =0000000000000000 R9 =000000000000001a R10=0000000000001000 R11=ffff8880235c54b0 R12=ffff8880235c4980 R13=0000000000000001 R14=ffff8880235c55c8 R15=0000000000000000 RIP=ffffffff8199cd8f RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555587de4500 ffffffff 00c00000 GS =0000 ffff8880d6bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f91579ad9c8 CR3=00000000349b8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156c15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156c1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156c15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156c1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156c150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156c151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156dba4a8 00007f9156dba4a0 00007f9156dba498 00007f9156dba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f915791d100 00007f9156dba460 00007f9156dba478 00007f9156dba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9156dba4b8 00007f9156dba4b0 00007f9156dba4a8 00007f9156dba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000