last executing test programs: 1.77011997s ago: executing program 0 (id=168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xed16aefea7fa3876}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000340)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x19) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x1a3) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a40000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000007588c07ef4551d7fbf6b00003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000"], 0xa4}}, 0x0) 1.709945121s ago: executing program 0 (id=171): write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='-1\x00', 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x6, 0xd, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x320, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000040)={'wlan0\x00'}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.470223905s ago: executing program 0 (id=174): set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f00000000c0)='n\x00\x00\x00\x00\x00\x00\x00', 0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200140, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x2c, 0x18, 0x1, 0x70bd26, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "32ba630f60057a49"}, 0x7}}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) set_mempolicy(0x1, &(0x7f0000000100)=0x9a69, 0x5) ioctl$TCSBRKP(r1, 0x5425, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f00000001c0)={[{'ufp\x00'}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000400", @ANYRES32=0x0, @ANYBLOB="41050000000000001c00128009000100626f6e64000000000c0002800800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 1.469574248s ago: executing program 0 (id=175): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29, 0x1]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x2}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8, 0x10000000}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x10}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xf49, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8, 0x1}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x5}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffb, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0xe, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x3, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) 1.370219138s ago: executing program 1 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x88, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.240536624s ago: executing program 1 (id=179): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/75, 0x1118000, 0x0, 0x4, 0x3}, 0x20) r0 = syz_io_uring_setup(0x649f, &(0x7f0000000140)={0x0, 0xca65, 0x10000, 0x3, 0x1fb}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x6, 0x4], 0x2) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 1.080039646s ago: executing program 3 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @broadcast}, 0xfffffffffffffffd) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000004010) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@loopback, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x5, 0xc818}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bb"], 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r8, 0x4) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x3, 0x3}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400da314d836e8434ec00000001000000000000"], 0x14}}, 0x0) 920.500405ms ago: executing program 2 (id=184): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x2000)=nil, 0x5000) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0xfffffbff) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004a00020027bd7000fcdbdf250a004000", @ANYRES32=r2, @ANYBLOB="0000003c14000100fc02400000000000000000000000000008000200dfdd8722"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) 920.153329ms ago: executing program 2 (id=185): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) ioperm(0x0, 0x8001, 0x9) ioperm(0x0, 0x80, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x1}, 0x8) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000000), 0x65) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x5, 0x2, 0x401, 0x2, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xdffffff8]}) 850.598764ms ago: executing program 2 (id=186): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0xa, 0x90}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000f000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 737.892633ms ago: executing program 2 (id=187): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xf0f3, 0x2, 0x2, 0x6}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x804) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003904000022000000000000000000", @ANYRES32=r4, @ANYBLOB="01980000031300002000128008000100736974001400028008000200ac14142506000d000a000000"], 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1}, 0x1c}}, 0x0) sendto$packet(r2, &(0x7f0000000280)="b49a061927f81c27e00b6dd82e4c5d123e5b69b1012c95dfb3cee98f6f07f6ffac3a5510f2e284b7a1db0d2cb4446ed7ccd4203e2432638d39ccd6a615c752f847c3cdbd970f8e12667be97a7de44d3ae273750a33a8f0763c8710de260b7ef71c397e68b620e0496dbd7516fe833abf347a26207c6e7a43b8b8ff8f103ef425ddfc57bedec64a25a16cc8aed8d98774f6e3bb", 0x93, 0x48031, 0x0, 0x0) 737.276184ms ago: executing program 2 (id=188): syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060080350000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) syz_usbip_server_init(0x4) (async) syz_usbip_server_init(0x1) (async) syz_usbip_server_init(0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fsopen(&(0x7f0000000000)='iso9660\x00', 0x1) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060080350000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) (async) 737.074463ms ago: executing program 2 (id=189): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700"], 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x200000006, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0x40ead000) openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) syz_open_dev$tty1(0xc, 0x4, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)}, {&(0x7f0000000140)=""/33, 0x21}, {&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/227, 0xe3}], 0x6}, 0x3}, {{&(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000640)=""/155, 0x9b}, {&(0x7f0000000700)=""/106, 0x6a}], 0x2, &(0x7f00000007c0)=""/68, 0x44}, 0x8}, {{&(0x7f0000000840)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000000e80)=[{&(0x7f00000008c0)=""/223, 0xdf}, {&(0x7f00000009c0)=""/69, 0x45}, {&(0x7f0000000a40)=""/43, 0x2b}, {&(0x7f0000000a80)=""/236, 0xec}, {&(0x7f0000000b80)=""/23, 0x17}, {&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/175, 0xaf}, {&(0x7f0000000d80)=""/224, 0xe0}], 0x8, &(0x7f0000000f00)=""/165, 0xa5}, 0x80000000}, {{&(0x7f0000000fc0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001040)=""/200, 0xc8}], 0x1, &(0x7f0000001180)=""/198, 0xc6}, 0x9}, {{&(0x7f0000001280)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001300)=""/8, 0x8}, {&(0x7f0000001340)=""/186, 0xba}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/242, 0xf2}, {&(0x7f0000002500)=""/247, 0xf7}, {&(0x7f0000002600)=""/82, 0x52}, {&(0x7f0000002680)=""/189, 0xbd}], 0x7}, 0xcbb}], 0x5, 0x40012021, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="08002bbd7000fedbdf25050000000600010005000000080009000200000008000c00aa0a000008000b00040000000500050001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 669.81377ms ago: executing program 1 (id=190): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) ftruncate(r2, 0x796c) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r3, 0x0, &(0x7f0000000280)) (async) write$UHID_INPUT(r2, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) 669.201511ms ago: executing program 1 (id=191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4010}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x46c002, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x84000, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r4, 0x3b88, &(0x7f0000000340)={0xc}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="026d4abd7000ffdbdf2501000000000000000141000000200017000000000000001269723a76657468305f6d61637674617000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000200)) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r3, 0xc008aec1, &(0x7f00000003c0)={0x4, 0x0, [{0xc0000001, 0x6, 0x0, 0x3ff, 0x0, 0x41c, 0x7}, {0x80000007, 0x0, 0x6, 0x9, 0x7c091ba3, 0xd24a, 0x4}, {0x80000019, 0x5ff, 0x5, 0x9, 0xfffff085, 0xb, 0x5}, {0x40000000, 0x9, 0x2, 0x1, 0x10000, 0x7fff, 0xfffffff9}]}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)='X\x00', 0x2}], 0x1) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) open_by_handle_at(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc811f9fe8000000000000000"], 0xffe) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4010}, 0x18) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x46c002, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x84000, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$CLEAR(r4, 0x3b88, &(0x7f0000000340)={0xc}) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="026d4abd7000ffdbdf2501000000000000000141000000200017000000000000001269723a76657468305f6d61637674617000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) io_setup(0x2, &(0x7f0000000200)) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r3, 0xc008aec1, &(0x7f00000003c0)={0x4, 0x0, [{0xc0000001, 0x6, 0x0, 0x3ff, 0x0, 0x41c, 0x7}, {0x80000007, 0x0, 0x6, 0x9, 0x7c091ba3, 0xd24a, 0x4}, {0x80000019, 0x5ff, 0x5, 0x9, 0xfffff085, 0xb, 0x5}, {0x40000000, 0x9, 0x2, 0x1, 0x10000, 0x7fff, 0xfffffff9}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)='X\x00', 0x2}], 0x1) (async) getpid() (async) syz_pidfd_open(r5, 0x0) (async) open_by_handle_at(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc811f9fe8000000000000000"], 0xffe) (async) 518.697522ms ago: executing program 1 (id=192): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x43bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f00000000c0)={0x2, 0x10, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0]}) sendmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="d8", 0x1}], 0x1}}], 0x1, 0x20000010) r6 = syz_open_dev$media(&(0x7f0000000000), 0x800, 0x20000) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r0, 0x800046f3, 0x4, 0x40, 0x0, 0x0) 517.40568ms ago: executing program 0 (id=193): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x4, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30040000002c5d2d00030a0102000000000000000001000000090001"], 0xc0}}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x4, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30040000002c5d2d00030a0102000000000000000001000000090001"], 0xc0}}, 0x0) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) (async) 170.146398ms ago: executing program 3 (id=194): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x8001af84, &(0x7f00000003c0)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x1, 0x20, 0x40, 0x282, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@can_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "8b893b21c1f3344a"}, 0x5}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0xffffffffffffffff}}]}, 0x3c}}, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2000) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000400)={0x0, 0x1, 0x0, [0x3, 0x8d56, 0x4c4479ad, 0xb2a5, 0x8000000000000001], [0xc6, 0x100000001, 0x8, 0x9, 0x100000001, 0x3, 0x7, 0x80000000, 0x4, 0x100000000, 0x0, 0x86, 0x0, 0x40, 0x0, 0x6, 0x0, 0x2, 0x8, 0x23, 0x1, 0xffffffff80000001, 0x8, 0x80, 0x3, 0x37, 0x6, 0x1, 0x4, 0x7, 0x9, 0x3, 0x6, 0x1, 0x7ff, 0x8, 0x5, 0xaa, 0x3, 0x7fffffffffffffff, 0x100000001, 0x58, 0x1, 0x7, 0x5, 0xd, 0x4, 0x9, 0x9, 0x3, 0xfff, 0xb, 0x6, 0x5b9, 0x8, 0x7fffffffffffffff, 0xa, 0x9, 0x40000000, 0x6, 0x6, 0xb24, 0x0, 0xb, 0xffffffffeb209859, 0xfffffffffffff000, 0x10001, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xccd1, 0x0, 0xa, 0x7, 0x1ff, 0x9, 0x8, 0x80000000000, 0x9, 0xfff, 0x5, 0x7, 0xb5, 0x9, 0x9, 0x5, 0x0, 0xe, 0x101, 0x3, 0x200, 0x85, 0x8, 0x0, 0x9, 0x7, 0x7f, 0xffffffffffff40ec, 0x1000, 0x400, 0x6, 0x8, 0x2, 0x207, 0x5, 0x5, 0x0, 0x80000000, 0x9, 0x9, 0x0, 0x2, 0x8000000000000001, 0x8, 0x7, 0x3, 0x7fffffffffffffff, 0x6, 0x24afea69, 0x8, 0x2]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000bc0)={r4, 0x9, 0x1, [0x1, 0x1ff, 0x7, 0x9, 0x7fffffffffffffff], [0x4, 0x6, 0x0, 0x5, 0x6, 0x8, 0x3, 0x101, 0xffffffff, 0x6, 0x1, 0x80, 0x0, 0x2, 0x1, 0xda000000, 0x5, 0x28, 0x8000000000000000, 0x4, 0x7fffffff, 0x8000000000000001, 0xffffffffffffffff, 0xef, 0xffffffffffffffff, 0x7, 0x7fffffffffffffff, 0x800000000100, 0xfff, 0x0, 0x1, 0x3, 0xff, 0x10, 0x1, 0xfff, 0x1, 0x0, 0xff, 0xa, 0x200, 0x8, 0x1, 0xa, 0x69ea, 0x9, 0x0, 0x3, 0xa4e, 0x1, 0x7fffffff, 0x0, 0x10b, 0x8232, 0x4, 0xfffffffffffffffe, 0x8, 0xc, 0x1000, 0x4, 0x6a24, 0x1, 0x3, 0x0, 0x4, 0x7, 0x8, 0x4, 0x0, 0x40, 0x7, 0x8, 0x4ac, 0x80, 0xd, 0x7, 0x3, 0x3, 0x2000000000, 0xfffffffffffffffb, 0xffffffffffff1f20, 0x1, 0x6, 0xd622, 0x200, 0x1, 0x6, 0x4, 0x8, 0x0, 0x4, 0x5, 0x2, 0x8, 0x0, 0x0, 0xf, 0xffffffffffffbd77, 0x6, 0xd37, 0xe, 0x2, 0x2, 0x9, 0x101, 0xd, 0xfffffffffffffffa, 0x7, 0x8, 0x1, 0x4, 0x5, 0x7, 0x1, 0x800, 0xee, 0x3, 0x5, 0x26ad7298, 0x9, 0x2]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000040)) 169.667571ms ago: executing program 3 (id=195): r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002300)=[{{&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000780)=""/9, 0x3}, {&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/55, 0x37}], 0x5, &(0x7f0000000540)=""/207, 0xfe}, 0x400}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/64, 0x40}, {&(0x7f0000002480)=""/36, 0x24}], 0x3, &(0x7f0000000800)=""/147, 0x93}, 0xf5}, {{&(0x7f00000008c0)=@x25, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000940)=""/241, 0xf1}, {&(0x7f0000000a40)=""/181, 0xb5}], 0x2, &(0x7f0000000b40)=""/116, 0x74}, 0xc}, {{&(0x7f0000000bc0), 0x80, &(0x7f00000024c0)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/135, 0x87}, {&(0x7f0000001d00)=""/84, 0x54}, {&(0x7f0000001d80)=""/253, 0xfd}, {&(0x7f0000001e80)=""/120, 0x78}], 0x5, &(0x7f0000001f80)=""/167, 0xa7}, 0x3}, {{&(0x7f0000002040)=@ax25={{0x3, @bcast}, [@remote, @netrom, @null, @rose, @rose, @null, @remote, @bcast]}, 0x80, &(0x7f0000002240)=[{&(0x7f00000020c0)=""/103, 0x67}, {&(0x7f0000002140)=""/207, 0xcf}], 0x2, &(0x7f0000002280)=""/68, 0x44}, 0x13}], 0x5, 0x21, &(0x7f0000002440)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x40810, 0x50}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000491}, 0x40040d4) 99.653571ms ago: executing program 3 (id=196): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 85.700551ms ago: executing program 3 (id=197): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0xa, 0x90}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 85.171095ms ago: executing program 0 (id=198): r0 = memfd_secret(0x80000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}]}, 0x44}}, 0x0) fcntl$setlease(r0, 0x400, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYRES16], 0x58}, 0x1, 0xffffffff00000003, 0x0, 0x24000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') close(r0) 255.096µs ago: executing program 3 (id=199): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3], 0x38}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x2}, 0x10) write(r0, &(0x7f00000000c0)="1b0000001e005f025145e9676a2cbf0dffffffff01000000000000", 0x1b) 0s ago: executing program 1 (id=200): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000000)=0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00020000000c00160004000000000000000500140000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 0s ago: executing program 3 (id=201): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) (async, rerun: 32) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) (rerun: 32) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x4) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x98) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0xff) (async, rerun: 64) r3 = fcntl$dupfd(r0, 0x406, r0) (rerun: 64) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0x799d, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:2150' (ED25519) to the list of known hosts. [ 44.725804][ T40] audit: type=1400 audit(1756027591.791:62): avc: denied { name_bind } for pid=5936 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.741190][ T40] audit: type=1400 audit(1756027591.801:63): avc: denied { write } for pid=5937 comm="sh" path="pipe:[6518]" dev="pipefs" ino=6518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.753727][ T40] audit: type=1400 audit(1756027591.821:64): avc: denied { execute } for pid=5937 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.762128][ T40] audit: type=1400 audit(1756027591.821:65): avc: denied { execute_no_trans } for pid=5937 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.937694][ T40] audit: type=1400 audit(1756027594.001:66): avc: denied { mounton } for pid=5937 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.940228][ T5937] cgroup: Unknown subsys name 'net' [ 47.097020][ T5937] cgroup: Unknown subsys name 'cpuset' [ 47.102613][ T5937] cgroup: Unknown subsys name 'rlimit' [ 47.284086][ T5956] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 47.990709][ T5937] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.502761][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.502772][ T40] audit: type=1400 audit(1756027598.561:80): avc: denied { execmem } for pid=5961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.764223][ T40] audit: type=1400 audit(1756027598.831:81): avc: denied { create } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.771426][ T40] audit: type=1400 audit(1756027598.831:82): avc: denied { read write } for pid=5966 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.782400][ T40] audit: type=1400 audit(1756027598.831:83): avc: denied { open } for pid=5966 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.796419][ T40] audit: type=1400 audit(1756027598.841:84): avc: denied { ioctl } for pid=5965 comm="syz-executor" path="socket:[2941]" dev="sockfs" ino=2941 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.823702][ T5969] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.827737][ T5981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.833306][ T5981] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.836868][ T5981] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.839468][ T5981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.839756][ T5972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.845940][ T5972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.847010][ T5979] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.849409][ T5972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.849520][ T5980] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.850088][ T5980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.850318][ T5980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.850796][ T5980] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.851050][ T5980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.852116][ T5979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.855540][ T40] audit: type=1400 audit(1756027598.921:85): avc: denied { read } for pid=5965 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.858003][ T5979] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.860059][ T40] audit: type=1400 audit(1756027598.921:86): avc: denied { open } for pid=5965 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.866780][ T5972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.867834][ T40] audit: type=1400 audit(1756027598.921:87): avc: denied { mounton } for pid=5965 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.873658][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.877617][ T5972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.880342][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.121898][ T40] audit: type=1400 audit(1756027599.181:88): avc: denied { module_request } for pid=5975 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.179542][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 52.301913][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 52.437311][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.440411][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.446343][ T5975] bridge_slave_0: entered allmulticast mode [ 52.450430][ T5975] bridge_slave_0: entered promiscuous mode [ 52.456438][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.459537][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.462871][ T5975] bridge_slave_1: entered allmulticast mode [ 52.467552][ T5975] bridge_slave_1: entered promiscuous mode [ 52.536122][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 52.543220][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 52.550069][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.555007][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.605525][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.608243][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.610508][ T5965] bridge_slave_0: entered allmulticast mode [ 52.613530][ T5965] bridge_slave_0: entered promiscuous mode [ 52.622974][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.625300][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.627605][ T5965] bridge_slave_1: entered allmulticast mode [ 52.630227][ T5965] bridge_slave_1: entered promiscuous mode [ 52.765102][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.769769][ T5975] team0: Port device team_slave_0 added [ 52.808961][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.812743][ T5975] team0: Port device team_slave_1 added [ 52.821463][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.824249][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.826684][ T5973] bridge_slave_0: entered allmulticast mode [ 52.829291][ T5973] bridge_slave_0: entered promiscuous mode [ 52.913020][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.915581][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.917833][ T5973] bridge_slave_1: entered allmulticast mode [ 52.920468][ T5973] bridge_slave_1: entered promiscuous mode [ 52.938079][ T5965] team0: Port device team_slave_0 added [ 52.956114][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.959043][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.970119][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.020783][ T5965] team0: Port device team_slave_1 added [ 53.025599][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.029040][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.032140][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.043506][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.048653][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.051678][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.055065][ T5966] bridge_slave_0: entered allmulticast mode [ 53.059240][ T5966] bridge_slave_0: entered promiscuous mode [ 53.092056][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.126968][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.129436][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.131876][ T5966] bridge_slave_1: entered allmulticast mode [ 53.135854][ T5966] bridge_slave_1: entered promiscuous mode [ 53.160710][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.164642][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.176013][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.272081][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.275338][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.286062][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.292333][ T5973] team0: Port device team_slave_0 added [ 53.297971][ T5973] team0: Port device team_slave_1 added [ 53.330043][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.339552][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.398596][ T5975] hsr_slave_0: entered promiscuous mode [ 53.401078][ T5975] hsr_slave_1: entered promiscuous mode [ 53.444255][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.446494][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.455645][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.461691][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.464737][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.475294][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.498593][ T5966] team0: Port device team_slave_0 added [ 53.547593][ T5966] team0: Port device team_slave_1 added [ 53.572734][ T5965] hsr_slave_0: entered promiscuous mode [ 53.578248][ T5965] hsr_slave_1: entered promiscuous mode [ 53.581174][ T5965] debugfs: 'hsr0' already exists in 'hsr' [ 53.584016][ T5965] Cannot create hsr debugfs directory [ 53.658209][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.660414][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.668396][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.708604][ T5973] hsr_slave_0: entered promiscuous mode [ 53.711353][ T5973] hsr_slave_1: entered promiscuous mode [ 53.713692][ T5973] debugfs: 'hsr0' already exists in 'hsr' [ 53.715543][ T5973] Cannot create hsr debugfs directory [ 53.722426][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.724686][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.732568][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.884095][ T5972] Bluetooth: hci3: command tx timeout [ 53.885360][ T63] Bluetooth: hci1: command tx timeout [ 53.963251][ T63] Bluetooth: hci0: command tx timeout [ 53.973247][ T63] Bluetooth: hci2: command tx timeout [ 53.992265][ T5966] hsr_slave_0: entered promiscuous mode [ 53.995498][ T5966] hsr_slave_1: entered promiscuous mode [ 53.998474][ T5966] debugfs: 'hsr0' already exists in 'hsr' [ 54.000890][ T5966] Cannot create hsr debugfs directory [ 54.165813][ T5975] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.175820][ T5975] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.183609][ T5975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.202983][ T5975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.275002][ T5965] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.279548][ T5965] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.299470][ T5965] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.306245][ T5965] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.347327][ T5973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.352769][ T5973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.357962][ T5973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.362691][ T5973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.445228][ T5966] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.452323][ T5966] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.459758][ T5966] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.470592][ T5966] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.516056][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.534740][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.546186][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.559343][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.576039][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.584033][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.586685][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.592145][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.598849][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.601195][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.616865][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.619922][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.626105][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.629148][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.634955][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.638290][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.646801][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.649769][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.708771][ T5975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.731582][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.746992][ T40] audit: type=1400 audit(1756027601.801:89): avc: denied { sys_module } for pid=5975 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.762362][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.771754][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.774906][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.787347][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.789776][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.841988][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.898317][ T5975] veth0_vlan: entered promiscuous mode [ 54.907714][ T5975] veth1_vlan: entered promiscuous mode [ 54.912939][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.936376][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.945609][ T5975] veth0_macvtap: entered promiscuous mode [ 54.959932][ T5973] veth0_vlan: entered promiscuous mode [ 54.964915][ T5975] veth1_macvtap: entered promiscuous mode [ 54.987185][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.990078][ T5973] veth1_vlan: entered promiscuous mode [ 54.996072][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.014225][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.017443][ T5965] veth0_vlan: entered promiscuous mode [ 55.037645][ T1144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.041465][ T1144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.052673][ T5965] veth1_vlan: entered promiscuous mode [ 55.056300][ T1144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.059885][ T1144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.090234][ T5973] veth0_macvtap: entered promiscuous mode [ 55.096729][ T5973] veth1_macvtap: entered promiscuous mode [ 55.114470][ T5966] veth0_vlan: entered promiscuous mode [ 55.132644][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.140279][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.147592][ T5966] veth1_vlan: entered promiscuous mode [ 55.152402][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.158437][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.169084][ T1147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.188503][ T1147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.191321][ T1147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.197434][ T1147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.197685][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.203529][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.204671][ T5965] veth0_macvtap: entered promiscuous mode [ 55.218083][ T5965] veth1_macvtap: entered promiscuous mode [ 55.239838][ T5966] veth0_macvtap: entered promiscuous mode [ 55.257117][ T5966] veth1_macvtap: entered promiscuous mode [ 55.261881][ T5975] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.275176][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.277090][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.282003][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.284913][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.307863][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.332694][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.340942][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.345731][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.354125][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.358839][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.366189][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.370153][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.381288][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.385411][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.389468][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.401659][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.419901][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.426815][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.438467][ T6062] Zero length message leads to an empty skb [ 55.459487][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.461966][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.493172][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.497632][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.519255][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.521998][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.601792][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 55.691820][ T6068] Bluetooth: MGMT ver 1.23 [ 55.822723][ T6089] netlink: 880 bytes leftover after parsing attributes in process `syz.3.12'. [ 55.964348][ T63] Bluetooth: hci1: command tx timeout [ 55.971452][ T6107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18'. [ 55.973248][ T63] Bluetooth: hci3: command tx timeout [ 56.043172][ T63] Bluetooth: hci2: command tx timeout [ 56.045559][ T63] Bluetooth: hci0: command tx timeout [ 56.129274][ T6133] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.179227][ T6138] netlink: 132 bytes leftover after parsing attributes in process `syz.1.26'. [ 56.230332][ T6143] hfsplus: unable to find HFS+ superblock [ 56.350183][ T6162] warning: `syz.3.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.357830][ T6164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.27'. [ 56.484791][ T6175] vlan2: entered promiscuous mode [ 56.486567][ T6175] vlan2: entered allmulticast mode [ 56.488194][ T6175] hsr_slave_1: entered allmulticast mode [ 56.503659][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 56.718835][ T40] kauditd_printk_skb: 183 callbacks suppressed [ 56.718846][ T40] audit: type=1400 audit(1756027603.781:273): avc: denied { create } for pid=6188 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 56.788844][ T40] audit: type=1400 audit(1756027603.851:274): avc: denied { read } for pid=6186 comm="syz.0.41" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.797607][ T40] audit: type=1400 audit(1756027603.851:275): avc: denied { setopt } for pid=6188 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.805740][ T40] audit: type=1400 audit(1756027603.851:276): avc: denied { open } for pid=6186 comm="syz.0.41" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.910206][ T6193] overlayfs: failed to resolve 'verity=require': -2 [ 57.028551][ T6195] capability: warning: `syz.3.43' uses 32-bit capabilities (legacy support in use) [ 57.033160][ T40] audit: type=1400 audit(1756027604.091:277): avc: denied { search } for pid=5679 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.040064][ T40] audit: type=1400 audit(1756027604.101:278): avc: denied { search } for pid=5679 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.047098][ T40] audit: type=1400 audit(1756027604.101:279): avc: denied { search } for pid=5679 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.054676][ T40] audit: type=1400 audit(1756027604.101:280): avc: denied { read } for pid=5679 comm="dhcpcd" name="n103" dev="tmpfs" ino=2156 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.061919][ T40] audit: type=1400 audit(1756027604.101:281): avc: denied { open } for pid=5679 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2156 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.070868][ T40] audit: type=1400 audit(1756027604.101:282): avc: denied { getattr } for pid=5679 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2156 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.136214][ T6202] delete_channel: no stack [ 57.249871][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 57.251047][ T6221] hpfs: Bad magic ... probably not HPFS [ 57.258463][ T6221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.45'. [ 57.286051][ T6226] netlink: 'syz.2.50': attribute type 21 has an invalid length. [ 57.288571][ T6226] netlink: 'syz.2.50': attribute type 6 has an invalid length. [ 57.290916][ T6226] netlink: 132 bytes leftover after parsing attributes in process `syz.2.50'. [ 57.455814][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 57.459336][ T6239] netlink: 'syz.1.55': attribute type 12 has an invalid length. [ 57.478982][ T6239] (syz.1.55,6239,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 57.482634][ T6239] (syz.1.55,6239,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 57.521686][ T6243] sctp: failed to load transform for md5: -2 [ 57.644150][ T6035] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.813509][ T6035] usb 7-1: Using ep0 maxpacket: 32 [ 57.818384][ T6035] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 57.834418][ T6035] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 57.837963][ T6035] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 57.841067][ T6035] usb 7-1: Product: syz [ 57.842782][ T6035] usb 7-1: Manufacturer: syz [ 57.845569][ T6035] usb 7-1: SerialNumber: syz [ 57.849379][ T6035] usb 7-1: config 0 descriptor?? [ 57.852817][ T6236] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.043188][ T5972] Bluetooth: hci3: command tx timeout [ 58.044963][ T5972] Bluetooth: hci1: command tx timeout [ 58.054095][ T6293] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.119768][ T6066] usb 7-1: USB disconnect, device number 2 [ 58.123233][ T63] Bluetooth: hci2: command tx timeout [ 58.125183][ T5972] Bluetooth: hci0: command tx timeout [ 58.290345][ T6321] cgroup: Invalid name [ 58.327729][ T6236] ======================================================= [ 58.327729][ T6236] WARNING: The mand mount option has been deprecated and [ 58.327729][ T6236] and is ignored by this kernel. Remove the mand [ 58.327729][ T6236] option from the mount to silence this warning. [ 58.327729][ T6236] ======================================================= [ 58.366135][ T6334] netlink: 'syz.1.83': attribute type 30 has an invalid length. [ 58.413831][ T6337] netlink: 'syz.3.84': attribute type 1 has an invalid length. [ 58.417067][ T6337] NCSI netlink: No device for ifindex 0 [ 58.767968][ T6364] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 58.770878][ T6364] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 58.989818][ T6371] 9pnet: Could not find request transport: virtTo [ 59.023154][ T6377] binder: BINDER_SET_CONTEXT_MGR already set [ 59.025171][ T6377] binder: 6374:6377 ioctl 4018620d 200000000140 returned -16 [ 59.110539][ T6390] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 59.200849][ T6395] Bluetooth: hci0: service_discovery: too big uuid_count value 65290 [ 59.253999][ T6403] random: crng reseeded on system resumption [ 59.261199][ T6403] Restarting kernel threads ... [ 59.265780][ T6403] Done restarting kernel threads. [ 59.492498][ T6416] syz.1.108 uses obsolete (PF_INET,SOCK_PACKET) [ 59.563205][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 59.711473][ T6433] kvm: emulating exchange as write [ 59.725594][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 59.728735][ T29] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 59.731975][ T29] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.752570][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 59.755861][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 59.758580][ T29] usb 7-1: Product: syz [ 59.759991][ T29] usb 7-1: Manufacturer: syz [ 59.761482][ T29] usb 7-1: SerialNumber: syz [ 59.823227][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.953487][ T24] usb 5-1: device descriptor read/64, error -71 [ 59.971427][ T29] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 60.134260][ T5972] Bluetooth: hci1: command tx timeout [ 60.134398][ T63] Bluetooth: hci3: command tx timeout [ 60.172744][ T6408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.176419][ T6408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.184558][ T29] usb 7-1: USB disconnect, device number 3 [ 60.190750][ T29] usblp0: removed [ 60.193947][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.214865][ T63] Bluetooth: hci0: command tx timeout [ 60.214896][ T5972] Bluetooth: hci2: command tx timeout [ 60.333242][ T24] usb 5-1: device descriptor read/64, error -71 [ 60.443276][ T24] usb usb5-port1: attempt power cycle [ 60.786769][ T6461] fuse: Unknown parameter '' [ 60.789884][ T6461] fuse: Bad value for 'fd' [ 60.793152][ T6461] netlink: 'syz.2.121': attribute type 64 has an invalid length. [ 60.793415][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 60.796680][ T6461] netlink: 'syz.2.121': attribute type 4 has an invalid length. [ 60.802019][ T6461] __nla_validate_parse: 3 callbacks suppressed [ 60.802028][ T6461] netlink: 152 bytes leftover after parsing attributes in process `syz.2.121'. [ 60.816019][ T24] usb 5-1: device descriptor read/8, error -71 [ 61.053237][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 61.074148][ T24] usb 5-1: device descriptor read/8, error -71 [ 61.189564][ T24] usb usb5-port1: unable to enumerate USB device [ 61.427752][ T6492] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.432401][ T6492] overlayfs: failed to set xattr on upper [ 61.437890][ T6492] overlayfs: ...falling back to redirect_dir=nofollow. [ 61.440488][ T6492] overlayfs: ...falling back to index=off. [ 61.442497][ T6492] overlayfs: ...falling back to uuid=null. [ 61.444670][ T6492] overlayfs: ...falling back to xino=off. [ 61.508259][ T6496] geneve2: entered promiscuous mode [ 61.510003][ T6496] geneve2: entered allmulticast mode [ 61.512177][ T1144] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.519414][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.525671][ T1144] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.529466][ T1144] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.879014][ T6512] bridge0: entered promiscuous mode [ 61.881990][ T6512] macsec1: entered promiscuous mode [ 61.887155][ T6512] bridge0: port 3(macsec1) entered blocking state [ 61.890052][ T6512] bridge0: port 3(macsec1) entered disabled state [ 61.892899][ T6512] macsec1: entered allmulticast mode [ 61.895662][ T6512] bridge0: entered allmulticast mode [ 61.901721][ T6512] macsec1: left allmulticast mode [ 61.906592][ T6512] bridge0: left allmulticast mode [ 61.910411][ T6512] bridge0: left promiscuous mode [ 61.977557][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 61.977568][ T40] audit: type=1400 audit(1756027609.041:398): avc: denied { accept } for pid=6511 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.188407][ T40] audit: type=1400 audit(1756027609.251:399): avc: denied { mounton } for pid=6448 comm="syz.3.117" path="/29/bus" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.210268][ T6525] overlay: ./bus is not a directory [ 62.462284][ T40] audit: type=1400 audit(1756027609.521:400): avc: denied { create } for pid=6535 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.469685][ T6540] blkio.reset_stats is deprecated [ 62.471910][ T40] audit: type=1400 audit(1756027609.521:401): avc: denied { ioctl } for pid=6535 comm="syz.2.142" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.506541][ T40] audit: type=1400 audit(1756027609.571:402): avc: denied { getopt } for pid=6541 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.513729][ T6542] afs: Unknown parameter 'dyná' [ 62.515183][ T40] audit: type=1400 audit(1756027609.571:403): avc: denied { create } for pid=6541 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.526039][ T40] audit: type=1400 audit(1756027609.571:404): avc: denied { connect } for pid=6541 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.546236][ T40] audit: type=1400 audit(1756027609.611:405): avc: denied { append } for pid=6543 comm="syz.3.144" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.619186][ T40] audit: type=1400 audit(1756027609.681:406): avc: denied { read } for pid=6543 comm="syz.3.144" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 62.626283][ T40] audit: type=1400 audit(1756027609.681:407): avc: denied { open } for pid=6543 comm="syz.3.144" path="/31/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 62.709866][ T6558] bridge_slave_0: left allmulticast mode [ 62.711903][ T6558] bridge_slave_0: left promiscuous mode [ 62.714896][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.720188][ T6558] bridge_slave_1: left allmulticast mode [ 62.722041][ T6558] bridge_slave_1: left promiscuous mode [ 62.726056][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.731069][ T6558] bond0: (slave bond_slave_0): Releasing backup interface [ 62.738907][ T6558] bond0: (slave bond_slave_1): Releasing backup interface [ 62.746879][ T6558] team0: Port device team_slave_0 removed [ 62.752037][ T6558] team0: Port device team_slave_1 removed [ 62.756228][ T6558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.759445][ T6558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.763356][ T6558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.765740][ T6558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.792905][ T6559] team0: Mode changed to "activebackup" [ 62.796491][ T6562] vlan0: entered promiscuous mode [ 62.804899][ T6562] team0: Port device vlan0 added [ 62.807009][ T6558] team0: No ports can be present during mode change [ 62.809898][ T6559] tipc: Started in network mode [ 62.811542][ T6559] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 62.819849][ T6559] tipc: Enabled bearer , priority 0 [ 62.923157][ T63] Bluetooth: hci2: command 0x0406 tx timeout [ 63.073358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.079988][ T6573] fuse: Unknown parameter 'g' [ 63.083916][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 63.207012][ T6587] sp0: Synchronizing with TNC [ 63.285327][ T6600] netlink: 52 bytes leftover after parsing attributes in process `syz.3.161'. [ 63.348312][ T6604] sock: sock_timestamping_bind_phc: sock not bind to device [ 63.356482][ T6604] sock: sock_timestamping_bind_phc: sock not bind to device [ 63.526383][ T6622] process 'syz.0.167' launched './file0' with NULL argv: empty string added [ 63.596918][ T6627] netlink: 84 bytes leftover after parsing attributes in process `syz.0.168'. [ 63.613180][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.170'. [ 63.884959][ T6645] nfs: Unknown parameter 'ufp' [ 63.887329][ T6645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6645 comm=syz.0.174 [ 63.947376][ T29] tipc: Node number set to 11578026 [ 64.014368][ T6655] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.091860][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 64.348456][ T6669] random: crng reseeded on system resumption [ 64.359717][ T29] hid-generic 000C:0007:0007.0002: unknown main item tag 0x0 [ 64.362193][ T29] hid-generic 000C:0007:0007.0002: unknown main item tag 0x0 [ 64.365829][ T29] hid-generic 000C:0007:0007.0002: unknown main item tag 0x0 [ 64.368181][ T29] hid-generic 000C:0007:0007.0002: unknown main item tag 0x0 [ 64.370559][ T29] hid-generic 000C:0007:0007.0002: unknown main item tag 0x0 [ 64.372898][ T29] hid-generic 000C:0007:0007.0002: unknown main item tag 0x0 [ 64.375304][ T29] hid-generic 000C:0007:0007.0002: unknown main item tag 0x0 [ 64.377618][ T29] hid-generic 000C:0007:0007.0002: unknown main item tag 0x0 [ 64.379931][ T29] hid-generic 000C:0007:0007.0002: unknown main item tag 0x0 [ 64.382281][ T29] hid-generic 000C:0007:0007.0002: unknown main item tag 0x0 [ 64.389337][ T29] hid-generic 000C:0007:0007.0002: hidraw1: HID v14.24 Device [syz1] on syz0 [ 64.406209][ T29] libceph: connect (1)[c::]:6789 error -101 [ 64.408472][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 64.420595][ T6672] fido_id[6672]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.558947][ T6684] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 64.561345][ T6684] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.565245][ T6684] vhci_hcd vhci_hcd.0: Device attached [ 64.569795][ T6684] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 64.572042][ T6684] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.574831][ T6684] vhci_hcd vhci_hcd.0: Device attached [ 64.577883][ T6684] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 64.579934][ T6684] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.582681][ T6684] vhci_hcd vhci_hcd.0: Device attached [ 64.587062][ T6684] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 64.612424][ T6689] vhci_hcd: connection closed [ 64.612617][ T6685] vhci_hcd: connection closed [ 64.612733][ T6687] vhci_hcd: connection closed [ 64.614008][ T12] vhci_hcd: stop threads [ 64.614316][ T12] vhci_hcd: release socket [ 64.614332][ T12] vhci_hcd: disconnect device [ 64.624386][ T12] vhci_hcd: stop threads [ 64.625763][ T12] vhci_hcd: release socket [ 64.627180][ T12] vhci_hcd: disconnect device [ 64.628794][ T12] vhci_hcd: stop threads [ 64.630137][ T12] vhci_hcd: release socket [ 64.631570][ T12] vhci_hcd: disconnect device [ 64.664439][ T29] libceph: connect (1)[c::]:6789 error -101 [ 64.666437][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 64.857595][ T6714] bad cache= option: none [ 64.857595][ T6714] [ 64.860191][ T6714] CIFS: VFS: bad cache= option: none [ 64.873129][ T6052] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.023235][ T6052] usb 7-1: Using ep0 maxpacket: 32 [ 65.026065][ T6052] usb 7-1: config 0 has an invalid interface number: 247 but max is 0 [ 65.028622][ T6052] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.031855][ T6052] usb 7-1: config 0 has no interface number 0 [ 65.033926][ T6052] usb 7-1: config 0 interface 247 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.039326][ T6052] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 65.042239][ T6052] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 65.045662][ T6052] usb 7-1: Product: syz [ 65.047435][ T6052] usb 7-1: Manufacturer: syz [ 65.050498][ T6052] usb 7-1: config 0 descriptor?? [ 65.127262][ T6663] ceph: No mds server is up or the cluster is laggy [ 65.417517][ T6733] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 65.421800][ T6733] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 65.425655][ T6733] CPU: 3 UID: 0 PID: 6733 Comm: syz.3.201 Not tainted syzkaller #0 PREEMPT(full) [ 65.429467][ T6733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.432858][ T6733] RIP: 0010:h5_recv+0x104/0x950 [ 65.434428][ T6733] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 41 b6 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 65.440382][ T6733] RSP: 0018:ffffc9000591fc00 EFLAGS: 00010293 [ 65.442374][ T6733] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887ad56a [ 65.444858][ T6733] RDX: ffff88805375a440 RSI: ffffffff887ad5af RDI: 0000000000000005 [ 65.447316][ T6733] RBP: ffffc9000591fd88 R08: 0000000000000005 R09: 0000000000000000 [ 65.449771][ T6733] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 65.452281][ T6733] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb478e0 [ 65.454748][ T6733] FS: 00007fe33ab9d6c0(0000) GS:ffff8880d69b9000(0000) knlGS:0000000000000000 [ 65.457515][ T6733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.459575][ T6733] CR2: 00007fe33ab9cf98 CR3: 0000000033664000 CR4: 0000000000352ef0 [ 65.462053][ T6733] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006 [ 65.464553][ T6733] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 65.467018][ T6733] Call Trace: [ 65.468077][ T6733] [ 65.469020][ T6733] ? __pfx_h5_recv+0x10/0x10 [ 65.470505][ T6733] hci_uart_tty_receive+0x251/0x7e0 [ 65.472145][ T6733] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 65.473936][ T6733] tty_ioctl+0x583/0x1680 [ 65.475331][ T6733] ? __pfx_tty_ioctl+0x10/0x10 [ 65.476839][ T6733] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 65.478985][ T6733] ? hook_file_ioctl_common+0x145/0x410 [ 65.480727][ T6733] ? selinux_file_ioctl+0x180/0x270 [ 65.482396][ T6733] ? selinux_file_ioctl+0xb4/0x270 [ 65.484115][ T6733] ? __pfx_tty_ioctl+0x10/0x10 [ 65.485634][ T6733] __x64_sys_ioctl+0x18e/0x210 [ 65.487173][ T6733] do_syscall_64+0xcd/0x4c0 [ 65.488617][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.490505][ T6733] RIP: 0033:0x7fe339d8ebe9 [ 65.491938][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.497902][ T6733] RSP: 002b:00007fe33ab9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.500496][ T6733] RAX: ffffffffffffffda RBX: 00007fe339fb6090 RCX: 00007fe339d8ebe9 [ 65.502988][ T6733] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000005 [ 65.505436][ T6733] RBP: 00007fe339e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 65.507896][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.510363][ T6733] R13: 00007fe339fb6128 R14: 00007fe339fb6090 R15: 00007ffe042dbf38 [ 65.512838][ T6733] [ 65.513822][ T6733] Modules linked in: [ 65.515170][ C3] vkms_vblank_simulate: vblank timer overrun [ 65.517384][ T6733] ---[ end trace 0000000000000000 ]--- [ 65.519271][ T6737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.519407][ T6733] RIP: 0010:h5_recv+0x104/0x950 [ 65.525783][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 65.527002][ T6733] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 41 b6 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 65.529892][ T6737] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 65.541315][ T6737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.544493][ T6733] RSP: 0018:ffffc9000591fc00 EFLAGS: 00010293 [ 65.547067][ T6733] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887ad56a [ 65.550366][ T6733] RDX: ffff88805375a440 RSI: ffffffff887ad5af RDI: 0000000000000005 [ 65.554726][ T6733] RBP: ffffc9000591fd88 R08: 0000000000000005 R09: 0000000000000000 [ 65.557295][ T6733] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 65.559932][ T6733] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb478e0 [ 65.562530][ T6733] FS: 00007fe33ab9d6c0(0000) GS:ffff8880d67b9000(0000) knlGS:0000000000000000 [ 65.566601][ T6733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.568869][ T6733] CR2: 000000110c256d88 CR3: 0000000033664000 CR4: 0000000000352ef0 [ 65.571523][ T6733] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006 [ 65.574269][ T6733] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 65.576879][ T6733] Kernel panic - not syncing: Fatal exception [ 65.579565][ T6733] Kernel Offset: disabled [ 65.580930][ T6733] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:26:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000042954 RBX=0000000000000000 RCX=ffffffff8b93bc29 RDX=ffffed100d486656 RSI=ffffffff8c162880 RDI=ffffffff81913321 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4b90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31863fff CR3=0000000038fba000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=f695f4d619a80609 087ff7f3751ec095 f695f4d619a80609 087ff7f3751ec095 f695f4d619a80609 087ff7f3751ec095 f695f4d619a80609 087ff7f3751ec095 ZMM18=1c0a05d8e4ba29f1 b84720a1b798a6af 1c0a05d8e4ba29f1 b84720a1b798a6af 1c0a05d8e4ba29f1 b84720a1b798a6af 1c0a05d8e4ba29f1 b84720a1b798a6af ZMM19=fe03000000000000 0000000000000005 fe03000000000000 0000000000000004 fe03000000000000 0000000000000003 fe03000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0411 e80302080011e003 02080011d8030008 0011d0030fffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0411c00308 800411b003018004 11a0035208001198 0300040011940306 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200119203000200 1190030708001188 0301a60800118003 0004004080800800 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00040008000f0010 000a000000000000 0300000000000008 ffffff9e00000000 ZMM25=77e7f0a477e7f0a4 77e7f0a477e7f0a4 77e7f0a477e7f0a4 77e7f0a477e7f0a4 77e7f0a477e7f0a4 77e7f0a477e7f0a4 77e7f0a477e7f0a4 77e7f0a477e7f0a4 ZMM26=85ef0aee85ef0aee 85ef0aee85ef0aee 85ef0aee85ef0aee 85ef0aee85ef0aee 85ef0aee85ef0aee 85ef0aee85ef0aee 85ef0aee85ef0aee 85ef0aee85ef0aee ZMM27=96b61b6596b61b65 96b61b6596b61b65 96b61b6596b61b65 96b61b6596b61b65 96b61b6596b61b65 96b61b6596b61b65 96b61b6596b61b65 96b61b6596b61b65 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0002000000020000 0002000000020000 0002000000020000 0002000000020000 0002000000020000 0002000000020000 0002000000020000 0002000000020000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffea000195c4c0 RCX=ffffffff81f25ec2 RDX=ffff888025aba440 RSI=ffffffff81f25efa RDI=0000000000000001 RBP=ffff888054d45200 RSP=ffffc9000167f6c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=1ffff920002cfedc R13=0000000000000000 R14=0000000000000001 R15=ffffea000195c4e0 RIP=ffffffff81bb8c31 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555581ba9500 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6b325b7dac CR3=000000004d529000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef5d23c50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef5d23dd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef5d23dd6 00007ffef5d23ddc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd4012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd4012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd4012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd4012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd4012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd4012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000002e6f4 RBX=0000000000000002 RCX=ffffffff8b93bc29 RDX=ffffed100d4c6656 RSI=ffffffff8c162880 RDI=ffffffff81913321 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90ab4b90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c32877e CR3=00000000626e9000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef5d23dd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef5d23dd6 00007ffef5d23ddc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd4012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd4012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd4012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd4012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd4012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd4012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd41874a8 00007f4cd41874a0 00007f4cd4187498 00007f4cd4187470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd4ced100 00007f4cd4187460 00007f4cd4180004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd41874b8 00007f4cd41874b0 00007f4cd41874a8 00007f4cd41874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643ac5 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc9000591f570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b111060 R15=ffffffff85643a60 RIP=ffffffff85643aef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe33ab9d6c0 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe33ab9cf98 CR3=0000000033664000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe042dc446 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe042dc446 00007ffe042dc44c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe339e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe339e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe339e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe339e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe339e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe339e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe339f874a8 00007fe339f874a0 00007fe339f87498 00007fe339f87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe33aaed100 00007fe339f87460 00007fe339f87478 00007fe339f874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe339f874b8 00007fe339f874b0 00007fe339f874a8 00007fe339f874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000