last executing test programs: 1.382849964s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000a00018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.29528476s ago: executing program 1 (id=5): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000005c0)={0x80000000, @multicast}) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0xb}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_CLOSE(r7, 0x40086409, &(0x7f0000000900)={r9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000200)="0f20de66b9010b00000f3266b99d0900000f32baf80c66b89e2b198866edefeffc0ced0f352e67660fd30eceb87e000f00d8baf80c66b840771c83bafc0cb8fb52ef0f013d", 0x45}], 0x1, 0x60, 0x0, 0x0) 1.154923728s ago: executing program 2 (id=7): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000040)={0xa1, 0x3, 0xfe}) unlink(&(0x7f0000000300)='.\x00') 1.085708313s ago: executing program 2 (id=8): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap$snddsp_control(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000009, 0x810, 0xffffffffffffffff, 0x83000000) (async) mmap$snddsp_control(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000009, 0x810, 0xffffffffffffffff, 0x83000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000d05000000070000000000000e0100000000000000000000000000000d02000000000000000000000d000000000000000000a37aeb4e000000000000000000005f00"], 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="080027000000000008002600b40900000800a10079"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) (async) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0xa0800, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000048a000/0x4000)=nil, 0x4000}, 0x2}) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) syz_open_procfs(0x0, &(0x7f0000000100)='net/rt6_stats\x00') (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/rt6_stats\x00') 1.085365745s ago: executing program 3 (id=4): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x44, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x44}, [@nested={0x30, 0xe, 0x0, 0x1, [@nested={0x2c, 0x151, 0x0, 0x1, [@typed={0xc, 0x120, 0x0, 0x0, @u64}, @typed={0x8, 0xde, 0x0, 0x0, @pid}, @generic="d5938376f408f47c06aa365b797aafe2660b18ee"]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x2) r2 = syz_io_uring_setup(0x4e92, &(0x7f0000017ec0)={0x0, 0xdef, 0x1000, 0x0, 0x189}, &(0x7f0000017f40), &(0x7f0000017f80)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2}) sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x24008881) r6 = io_uring_setup(0x4606, &(0x7f0000017fc0)={0x0, 0xd71, 0x1934, 0x3, 0x224, 0x0, r2}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRES16=r6, @ANYRES32=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setrlimit(0x6, &(0x7f0000000000)={0x0, 0x6}) r9 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r9, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r9, 0x6e2, 0x3900, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000180)="23000000010006", 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r12}}, 0x58) r13 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r13) r14 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r14}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x9, &(0x7f00000004c0)=""/146, 0x92) 1.08510158s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r0, &(0x7f0000000200)='net/ip_vs_stats\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000140)='./file0\x00', 0x33f, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0103fffffc985b4155"], 0x82) r3 = open$dir(&(0x7f0000000080)='./file1\x00', 0x1cc00, 0x16c) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'wg0\x00'}}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x8, 0x0) fanotify_mark(r7, 0x1, 0x8000020, r6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0xc0189436, &(0x7f0000000140)) 1.025478229s ago: executing program 2 (id=9): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) r2 = dup3(r0, r1, 0x80000) mkdir(&(0x7f0000000080)='./file0\x00', 0x120) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x3, 0x4}, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x803, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000001c0)) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000200)={0x1, 0x0, {0x1, 0xfffff000, 0x9, 0x5}}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000240)=0xffffffff) rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder0\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={[&(0x7f0000000400)='./binderfs2/binder0\x00', &(0x7f0000000440)=')-]^@\xfa)@\x00']}, &(0x7f0000000540)={[&(0x7f00000004c0)='-\x00', &(0x7f0000000500)='\'\x00']}) chdir(&(0x7f0000000580)='./file0\x00') r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$inet6(r7, &(0x7f00000005c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000600)=0x1c) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x50, r2, 0x80000000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000640)={0x0, 0x6, 0x9}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000a40)={{r5}, {@val={r8}, @max}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/../file0\x00', 0x0, 0x3) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fchownat(r2, &(0x7f0000000ac0)='./file0\x00', r9, 0xee01, 0x800) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fstat(r6, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000e00)='./file0/../file0\x00', &(0x7f0000000e40), 0x40806, &(0x7f0000000f00)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r11}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x31, 0x30, 0x63, 0x37, 0x35, 0x61, 0x33], 0x2d, [0x38, 0x31, 0x66, 0x38], 0x2d, [0x61, 0x33, 0x35, 0x37], 0x2d, [0x32, 0x34, 0x38, 0x32], 0x2d, [0x31, 0x30, 0x36, 0x65, 0x62, 0x33, 0x35, 0x53]}}}, {@subj_role={'subj_role', 0x3d, '{'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, ','}}, {@obj_type={'obj_type', 0x3d, '\xe9\xbd-\']{'}}]}}) 974.436089ms ago: executing program 2 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="811927bd7000fcdbdf2568800000"], 0x14}}, 0x4048090) 967.391431ms ago: executing program 2 (id=11): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r3, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x10, 0xffffffffffffffff, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x4010, 0xffffffffffffffff, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x4, 0x1, &(0x7f00000002c0)="b0e8dc1f6838a39f6e0f20b5818ff367adf408125b8a13f320d814e0cf274e919e80692636d3292ae31700c7369c80e4afebb3af21b03e9791908f14ac94b092cbe6b3cc3d94b41dc60568c65ab316185b8a3586c632a13660a89b70b09826131cdd0ea64e1bf3d24349ceb0820e7be95186c044c70d8b0eac82a7e630630b04e60ac75f07c9e3a3c078b57f01ea83283f6ea929b1876d31b976b8864da8aa9bd3394c887f61", 0x10, 0x0, 0x0, {0x3, r7}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x1) 940.62903ms ago: executing program 0 (id=12): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000001780)=@gcm_256={{0x304}, "3bd97a949bc96f1d", "8825ccb0fded307c9fc0822af28cddd73f36dded6b2207476bf12be9775139b5", "feef5c96", "a1554b1661704b63"}, 0x38) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x1, 0x70bd2d, 0xa5dfdbfb, {0x0, 0x0, 0x0, r8, 0x4808, 0x16201}}, 0x20}, 0x1, 0x0, 0x0, 0x404c000}, 0x2dfeaa5417216b53) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6fa30000006e662c6163638173733d323030302e75", @ANYBLOB="a60ce15ea7235f75cbe180cf30e5870961c2ad5487100d9bcd0c954228d1bd23d9f1409f069f153ac6ae3ba77922fee90ae4c8ae896ac94510f97942e510966b0c825f9eb4c6a662909cbcdcca4fd28020b3c2421546ee2ad02869cfea29a003db3b730e373dd9351d3f93436cf4f16f2ffbbfe6aee0a8cb0805ed088af44c9b4a514a1c31018a56d925adad42b87dcb2b81498f33dd49a89257b67c787880393654b9b9526511a40ff7890e28707c51909a10f66511e787b792481811b3db1f7129ec933e10ad", @ANYRESHEX=r5]) chdir(&(0x7f0000000100)='./file0\x00') (async) unlink(&(0x7f0000000000)='./file0\x00') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x400, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r9, 0xc01464a6, &(0x7f0000000180)={r10}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000040)={r10}) (async) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000240)={0x88, 0x5, 0x4, "eb89e6ebe80e900d03dc3d3a6746c2d38b00096150f6622c4535d80dd80d718be67ad0806132144018278b9b1971225ebad71b571549a1f060dcc2e7065ca6a495fee99eb870e99621eab8b5bdc41a272ea1293c6890d0af5b40af99ac2a3c4a08f2e18e246f3f9973945a1e157e08d104ac9a9263076ef17bf45f8185d3b0504c730e2476a7b736"}) read$FUSE(r11, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000400)={0xb0, 0xfffffffffffffff5, 0x3, [{{0x5, 0x1, 0x5, 0x5, 0x2, 0xdf7, {0x3, 0x6, 0x28, 0x0, 0x2b26f94500000000, 0xca, 0x8, 0xff, 0x7, 0x1000, 0x3, 0x0, r12, 0xe5, 0x6}}, {0x0, 0xd70b, 0x1, 0x1, '-'}}]}, 0xb0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmmsg$sock(r0, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000) 794.356759ms ago: executing program 0 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000a40)={@void, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @empty, @multicast1}, {0xa000, 0x8100, 0xc, 0x0, @opaque="18ab8014"}}}}}}, 0x2e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000a80)={0xaf0, r2, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @beacon=[@NL80211_ATTR_IE={0xe9, 0x2a, [@measure_req={0x26, 0xe, {0x3, 0x0, 0x7, "877b09291bcb20a0c5f9e7"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x6, 0xc8, "99abe3a1b6597e3cd291b291f15b1c41631ac04a064c1b698d0a157cff2080efe3ad1588a8f0c1638b74d90b809caf34a5f5b036060c6ac8b78136f5669d061a1b0f670cc1db745d765545d6901d6c0dae499c0a10f5985de095e5cbb6a1be07d318fc516c882ceed4c87806c01b8eff1fc0337f5bc682ef09cefecf29289f20bbf98b01bd3f63fd14b987dc4571181482052759e4a89e1df3b10ccb40bc36ed006ec362506a68c6a80be74aa1fe5dbcbe8691652f9174aa5b4b4b2a2fdb8f93b05654d4adeb6e58"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xf7, 0x80, [@channel_switch={0x25, 0x3, {0x1, 0xae, 0xff}}, @random_vendor={0xdd, 0xec, "b74f6d265ce34f7662793a5cba3e70c93c3e5585034d62c399320b4e199afe90c7d3022cdeb506a3208149c53e61f87099cc72b848c4b3d64b0716b58bc3b91ff6ce9f98366334ddc5731a9c516bfa04e8af7f4b091e2781334f0ad28fce0a9e75480df649d0a498bc2af45e38cb29289f4c61596ff22a7eef769cfd080c0653e0aa4d6a4b59fbcac6abbe5b10eb3498009c12ee41589ea3aa89d3e345f435646fee666ba855d7fed51a9a0771e6445e1ed1ccf8e04bac6776b41f7e628c885e64471b78f4d3a3b482cc1431aa5879f4574fa892b71a81934ef94e3d912feec147cee718827c624895fee456"}]}, @NL80211_ATTR_FTM_RESPONDER={0xec, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x9f, 0x2, "dc2031ad99d437e09864ffe148bde00d2196ff20f5fe337d9c3f8c32ffa224229f4a2438eb03657a416809dea6dae9f143f35c1a0d6a9acae608587ba0101d96003d849b008ca942d4108d1edbac4364e843813787300c06b104df88e49793a92624cc75241fb4d01f1102059447e4f364cfd96e471a87d9a933fefdf0053753e6b2d1760dc956a5e0954184dc10e1d2b93f6c27c79ee6f768d3d8"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x43, 0x3, "4af4984a20a88dd451cdcc77af2a258317ebeae59a75fbd13360d60df43bb7a0218cf6ac6be0ad405656a1f23d07d28c8c10d52469753db4d6d5688980386e"}]}, @NL80211_ATTR_BEACON_TAIL={0xa, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE={0x246, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0xb8}}, @random={0x0, 0x48, "4a44227f5c09aac95032f6efebc45429d009c481d7a3b36ee11785383ff2db2528bbaad51538a24d2de310ec68031ef80aca0212b93401efd79e3362955355ea5dd1f064649496b1"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0xd5, @device_b, 0x87c0, @value, 0x1, 0xf, @device_b, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xa, 0x78, 0x9}}, @dsss={0x3, 0x1, 0x6}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x2, 0x0, {0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xe605421660118b1c, 0x8, 0x8}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x59, 0x8, @device_a, 0x100, @value=@device_b, 0x8, 0x2, @device_a, 0x7fff}}, @gcr_ga={0xbd, 0x6}, @random={0x8, 0x89, "282e469c888bc53200e155ffe57be7149981b3af4acaf297384b796b4d0de927b460f1e2db83d518ec622dd3a40e9f29c398ca07c3d176850e7c74ec4a4cdcd817eb9812d92aff22543b73efc853f80f80713a899c809917ddb6a2dc4a1aa088b895266918dbd5d0e504bc10d9dbb23c094e3a16e3abcfba1c101f7bc424c413480fdadeb480bc2a9b"}, @random={0xe, 0xea, "e920691836c9bf0599f80d96e3bb1dcb8ec06aa4e707529f429fc8feca8cd04cc1e2587eec9eadd05eb85ce5723a934447bf59029cc61fb36171e3e7f5ff7ede7356b637199f2d03e7f997deb7a8f10a45bc58afd40c78419e95ed7f5c3353e7236068b25a0eee2e1f5ae760d374a512e9169d6a105ac308aabbe38d6b29fa66c40dfed1890ad561e1e1df15f62977bf649f6c0b942ca25405b7af25a84e38d8da3e6b64b5005aabe8279107a79f78896d3d98c42f658e32cc9d3960d9755bfa2f80bc814ec03a9f5c87e39e3c3100cd433366d1cc0dcca1663074eaaa4c3a6cca1c87bded561d43aeec"}]}, @NL80211_ATTR_BEACON_TAIL={0x1ce, 0xf, [@tim={0x5, 0xed, {0x2a, 0x8b, 0xde, "85d6623f491fac92ec1a7fd2cd8e709d2c795f97d4e816c81c99f8f685c19bc0b0dae4bd3b4cc71e18f704f332bafb8c52197787400c0897113dd2dcef401bf4ebba189b6849571c29236cd8b0d60d361f7c36f95e97b35d432ccf1c86583f501a1997272668f623bf32d8f7617f942b21aff4eb503ad84f3da54dcc6d21f0e3d0da4aea18ccffa9b8d3db7e112a3b230281106e6283e884493178fe7db2a26a613390d82bd86ee5a29422b8cc128ec913a00af333202e78b9026fd9b5d3613be18dd9d1f48807bcf882bb46ef812f153a84d76ef737bee5af180e25fe09188638ef73199c9f0a3e1d47"}}, @sec_chan_ofs={0x3e, 0x1}, @random={0x4, 0xd6, "2fb7e82e3ff4c36e7694467aae6ea139dfc6ac97d1ed4e2a5b4eca91e71b899b19e9aa4512797793001f8d7e3d313475cec76ac658d18ab597f9449b0135fca3d3ad4eca1a07163e3c9b891be376c5be8f068b309e0140a6665796d1de054a8d850e7a9612d0188acddd19b57feb049673048daadf93b9e295f1b23842e4a28b56e4002c658ada0bd95e8ace1d97fdff50683340a34542bd32df174bdd1c0f8a1297b0573e0bfc18ee250a74f2c9068928d2892ae308f72110345e2c560903fdd413da00bce96e886bc6a7c64061cfa0dae90f966ae5"}]}, @NL80211_ATTR_IE_PROBE_RESP={0xbb, 0x7f, [@fast_bss_trans={0x37, 0x90, {0x5, 0x4, "5791f61c63ed6521ae7d494f8419ba2a", "f09f99c2ead7e3185bb3b2a8a003fb6b1979c533c83f8f1e24c0095f1d77610c", "4f0aa274ddef5ebb2d86e6362d7531c89780ca5f2b4fef6ce6f677e679aaeb7e", [{0x4, 0x1e, "880907bd89b805e023ff74ee2d7c857856423da1d26dcbb1e5e3f2566916"}, {0x1}, {0x2, 0x13, "8c30af5eb6f3e2d119e4fb1b349f4e5ab97877"}, {0x4, 0x5, "8c7f7e0162"}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2}}, @ht={0x2d, 0x1a, {0x8000, 0x3, 0x5, 0x0, {0x2, 0x2, 0x0, 0x10, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x300, 0x200, 0x4}}]}, @NL80211_ATTR_BEACON_TAIL={0x36, 0xf, [@chsw_timing={0x68, 0x4, {0x0, 0x1}}, @tim={0x5, 0x9, {0xf, 0xa9, 0x6, "3c5d9b20bb05"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @val=0x2, @void, @val="db0ba079f1c449b17f0b900a27b81ee4"}}, @supported_rates={0x1, 0x7, [{0x6c, 0x1}, {0x5}, {0x4}, {0x12}, {0x36, 0x1}, {0x1a}, {0x51, 0x1}]}]}, @NL80211_ATTR_FTM_RESPONDER={0x2cc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x12, 0x2, "f6b47fb7b890450fd3913c5953bc"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf5, 0x3, "6dfedf3410fab16d668e1438de5f800d90fc77b7b86274bb8e01e5ff03403c7e38aa026367a17f1ae34bcb6e1b42104a29562bf6b0d1e4406ffe38eb1f8bf7409c04c12dfd289e86d97d740f2659c5f3538623e1d254aca2a2c73267e785732b3df5604da00edac547a07726064894ee923d1ef2494aafd3afc9fc532f18216a0aa176868671f598c33fe508e9fcdf060c926b8a7d7abe9bae2ee7c27e02dc16c3dd027a677156ba3d42e3e764b5a8b964ed3668564e85771794360085fb7c3f0b3a259edb3bb41f3863c3c06ee00e04fedd6e271451857c2ff57b5942bc631d3835682a08aebae43cef0e2fe445047797"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe9, 0x3, "0a0ec0dbe82276cb4143e83fa4c5c7730e7237b7d240c7ec85aae576fc16c9cb02a74f24d248beecff8b915ec39d1f855416f9dbd491876868dd968828de9ed5f41b6d330657c02a88056b4ca27c89399c600821486b31653b3d3c2309a628aa890fba77d364ce5fe85f31e1fb87714cb08851633f62c179db706e7ce981ddd51607a32408df1166ed0199c7e46297efa7827116fe1f8cad2f0b276a40f8b7416f10fe5365cd2067f6a2829f1770dfbbb72d3b2c5d9f3f5a3505a940f3d1bf38f1b1d6783224c151c97469d15f68acb300ef5009247583792d16f8feacbc91e699518ea41f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc7, 0x3, "2720a71fe28fa3e71360bff673ae23e34dcfde4e0d0d6969263df1677c7c7c374cbab162262951a25fe0ed7b085c7b63190f90f9f8881401ea7a583bbf0b6b1af4e85e9384d250840b67de23b9809548cf5c989e691ef92ff2bb4e52a991d4e25abde42bb310b3a97c2abbd677e2184a7a2034b9e38c58161449e69622d23a1c7034045895101724f25632e4dbefe5d6e89a5efc2ddbb16e5167809e40b28572d1e38b00f7b962d311404bef5b90442d8f78b547d85ea6bb5c368a16cc4a34cc556769"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0xaf0}}, 0x0) 793.043633ms ago: executing program 1 (id=14): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) (async) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x71) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c81c}, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001180)) 725.532515ms ago: executing program 1 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2b, 0x5b160aec71f53caa, 0x100000, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r4, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r6, r6, 0x2) 215.473697ms ago: executing program 3 (id=16): msgrcv(0xffffffffffffffff, &(0x7f0000000080)={0x0, ""/37}, 0x2d, 0x2, 0x3800) (async) r0 = mq_open(&(0x7f0000000100)='+^,%^\x00:\xc6\xbe\x81y\xfd\x8d\xeb:\xaa\xd9pbc\xed\xc3G\xe5~\xf1\xd2\x16\bF\xb1\xfed\xc54l@\\\x1a\x1e\x91i\x9c', 0x1, 0x84, &(0x7f0000000040)={0x5, 0x10000, 0x2, 0x6}) close(r0) (async) r1 = socket(0xa, 0x2, 0x0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) 214.790839ms ago: executing program 3 (id=17): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$CDROMRESET(r1, 0x5312) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000200)={r2}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE2(r3, 0x0, 0x1b) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r5, r4, 0x0) sendto$inet(r5, &(0x7f0000000400)="290699e7e3c89d04245b738c20eda763be4733782275470b1fe9b12f417605cda4402bf3e8c8c7018f372813dc6cfa2d62f579bf3af44e13d8f6bf23e2d959b89657eac066791577dc4bd98b9c3463c794c3243cd976e0a147bf39a39b02ca92841bbf32be33a59d15089a06b6e326311b1da0d550", 0x75, 0x20040094, &(0x7f00000002c0)={0x2, 0x4e20, @broadcast}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x4}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8c, 0x0, &(0x7f00000004c0)=[@acquire={0x40046305, 0x3}, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x9, 0x1, 0x11}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/133, 0x85, 0x1, 0x15}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000140)={0x0, 0x20, 0x48}}, 0x400}, @request_death={0x400c630e, 0x1}, @register_looper, @acquire_done, @decrefs={0x40046307, 0x3}], 0xd1, 0x0, &(0x7f0000000580)="87fc7286f30beeaf2ead8cf7674f3b7c2c8c14de78dabc416c2ee3ec463c7e221a4212907ac00d35c7327e100be7732a43171f2bff8c21064f28b9ededce8b6e146cee5abe69031c530abb871e04f9ec63c3f6add6d0b58696e32077e3a5de5ff9822b31b4351e69d6a2dcacd66ccfbc9fbc7d6326c1176f915b0edf2684c6d75cc8f7ca26ddb674a12f7fb864a21e0d72f8cdd858358167e71ca2063c2386c5f0140fd3e366ad23f4fd1473d8cf834f816e87c24a10f20bb0d0410cbf4e096c54aa4c65c608c694f1ad542eab384b4062"}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x8, 0xffffffff8da63b7e) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x700}, @clear_death], 0xfc, 0x1000000, 0x0}) 73.537442ms ago: executing program 1 (id=18): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r5, 0x1, 0x70bd29, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}}, {0x14, 0x2, @in={0x2, 0xfffc, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)={0x54, r5, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbf7, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, r5, 0x400, 0x8, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x266}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf77}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8800}, 0x5) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x30, r0, 0x101, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x800) 73.102062ms ago: executing program 2 (id=19): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = epoll_create1(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x76, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}]}, 0x18}], 0x1}, 0x0) r7 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="11"], 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="11"], 0x11) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r11 = syz_open_dev$dri(0x0, 0x407, 0x2000) ioctl$DRM_IOCTL_UNLOCK(r11, 0x4008642b, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r14 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r14, 0xab00, r15) ioctl$NBD_SET_FLAGS(r14, 0xab0a, 0xbdf) ioctl$NBD_DO_IT(r14, 0xab03) ioctl$NBD_CLEAR_SOCK(r14, 0xab04) stat(&(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)) write$FUSE_INIT(r3, &(0x7f00000002c0)={0x50, 0x0, r12, {0x7, 0x1f, 0x7fff, 0x4503230, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x1}}, 0x50) syz_fuse_handle_req(r9, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x2, {0x4, 0x0, 0x0, {0x0, 0x4b4a, 0xfffffffffffffffc, 0xf21, 0xfffffffffffffffa, 0x0, 0x0, 0x5, 0x0, 0x8001, 0x0, 0x0, r13, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NBD_DO_IT(r8, 0xab03) 5.136796ms ago: executing program 1 (id=20): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xf8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0xffffffffffffffda, r5, {0x7, 0x2b, 0x3240, 0x12408800, 0x5, 0x1, 0xfc, 0x6, 0x0, 0x0, 0x4, 0x1b5}}, 0x50) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000100)={0x900}) write$uinput_user_dev(r4, &(0x7f0000000480)={'syz0\x00', {0xa4d, 0x9, 0x5, 0x3}, 0x20, [0x3, 0x10001, 0x3, 0x4, 0x8000, 0x9, 0xd, 0x1, 0xb, 0x4, 0xfffffffb, 0xf9, 0x14, 0x1, 0x0, 0x8001, 0x5, 0x401, 0x8, 0x177c, 0x0, 0x8, 0x2, 0x9, 0x31274328, 0x3, 0xf, 0x7, 0x10004a24, 0x666816e8, 0x40, 0x101, 0x8, 0x2a, 0x401, 0x7, 0x8, 0x6, 0x3, 0x2, 0x0, 0x200, 0x8, 0x3, 0x81, 0x3, 0x7, 0x8001, 0x644, 0x6, 0xf, 0x4, 0x5, 0x89, 0x71, 0x7f, 0xd, 0x1, 0x5, 0x9, 0x7fff, 0xc, 0x200000, 0x7], [0x4f, 0x7ff, 0x0, 0xfffffff9, 0x401, 0x800, 0x4, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x2, 0x2, 0x4, 0x7fffffff, 0x7f, 0x68, 0xfff, 0x56c, 0x41ed, 0xfffffff7, 0x8, 0x1, 0x8, 0xbd, 0x0, 0x70000000, 0x0, 0x20004, 0x8807, 0x80000000, 0x3, 0x7, 0x4, 0xe, 0x4, 0x8, 0x101, 0x7fffffff, 0x3, 0xd, 0x0, 0x0, 0x0, 0x1, 0x7, 0x6, 0x7, 0x6, 0x5, 0x5, 0x5, 0x1, 0x8, 0x1000, 0x84, 0x3, 0xe, 0x4, 0x8000, 0x1, 0xffffff01, 0x2], [0xfffffff9, 0x8, 0x77f1, 0xa0c, 0xffffffff, 0x1, 0xb891, 0x3ff, 0x7, 0x6, 0x9, 0x1, 0x6, 0x4, 0x1, 0x13, 0x800, 0x5, 0x9, 0x7, 0x9, 0xdf, 0x1, 0xfffffffc, 0x4, 0x8, 0x1, 0x6, 0x5, 0x5000, 0xffffff81, 0xffffffff, 0x94, 0x8, 0x10000, 0xfffffff8, 0x9, 0xffff, 0x3, 0x7, 0x8, 0x7, 0x3, 0x7ff5, 0x3, 0x8, 0xfffffffe, 0x1, 0x10001, 0x8, 0x6, 0xb, 0x7e, 0x3, 0x400, 0x1, 0xd, 0x6, 0x9, 0x5e4, 0x13f, 0xfffffffc, 0x7, 0x80000000], [0x5, 0xfffffff9, 0xffff, 0x8, 0x101, 0x4, 0x3, 0x4, 0x1, 0xd, 0x7, 0xffffffff, 0x10001, 0xffffffff, 0x4, 0x5, 0x1, 0x5, 0x7, 0xf10, 0x6, 0x0, 0xfffffffe, 0x5, 0xfffffff3, 0x8, 0xffffffff, 0x4, 0x200, 0x0, 0x9, 0x5b, 0x1000, 0x4, 0xf4, 0x9, 0x8000, 0x9, 0x4, 0x8, 0x6, 0x1fa2, 0x4, 0x800, 0x9d19, 0x8, 0x0, 0x800, 0x8000, 0x132b, 0x4, 0x5, 0x7e, 0x4, 0x1, 0x6, 0x0, 0x8, 0x3, 0xff, 0x9, 0xa36f, 0x1, 0x2]}, 0x45c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x88) chmod(&(0x7f0000000240)='./file0\x00', 0x1) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmsg(r8, &(0x7f0000000440)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0}, 0x1) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x8, &(0x7f0000000140)={0x1, "96e67ad2d329458afe83c910c40800000000000000000000000000f000"}}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 0s ago: executing program 0 (id=21): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xa7fb, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(r4, &(0x7f0000000240)=' ', 0x1) close(r4) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r5, 0xc0109207, &(0x7f0000000d80)={&(0x7f0000002180), &(0x7f00000031c0)=""/4099, 0x1003}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r7, &(0x7f0000000000)=""/35, 0x6f) r8 = fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000180)='./file0\x00', 0xa7) getdents64(r7, 0x0, 0x43) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000800)=r7, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="400000001400b59929bd7000fedbdf250a0008ff", @ANYRESDEC=r4, @ANYBLOB="14000287ec7b2c65b221d5da9ba57dddd064b53b382a022001002500000065319312306bfe7b13c561d5b5b0d653d9aa879ae7dd0000000012"], 0x40}, 0x1, 0x0, 0x0, 0x2000c804}, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r9, 0x6, 0x23, &(0x7f0000003340)=""/4096, &(0x7f0000000380)=0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x1b, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000e80)={&(0x7f0000000780)=@phonet={0x23, 0x3, 0x7, 0x10}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000840)="93ae42d44cc3eb7f9256f9704dc40517e1f0b44baeecbe2bf30776fc6a2fced6a724b23d0e7646c65e4567d4d9b621b3aa1fa8fd6b37e5b8e719b5ef30b518bf63bd6f5839ed69855b7ac5228d788092339472e3dcc3035e425e686443fe1d09f3f587929b7a9f5af237a86790d26eb16c5ecbdb59c918d58efded3a076ed188ce142b2b67226f3b0f8b0574bb1dec8815247d9481b3c1b8add9a0f487833427c5107252d8801fe0d0952e2617261c51f721c2548baba0f6434a75dcac742311a81278d5a57328972ccd5a9dd6be66b42ab48292285c859b5f08118f5972", 0xde}, {&(0x7f0000000940)="5324f0308be9a1d1505343cc43b767ef1a18bc42b220ec074cebd93b5f402efa3dbdfbbed4c05d8e26ebfc2a498f24401f487bdc324460fc5789bd0e823a9c9c4581a071c7e42092af439ef33a1c30c743de5bcf408f489cd249f92874d4d24d5283f2", 0x63}, {&(0x7f00000009c0)="160fa2c7968d733c90e0cce60e2a10c941f23d137d65afc579370e1f446043ac3e0e3036216521f118f6d195f91bb1d546cc9326b8c16fd3a683fb4d2bcf67da48766fa3a34721126c7a29a88a6393b694c292fc80c23d", 0x57}, {&(0x7f0000000a40)="f44892ce43b7b0545aa33c426f49e45c1a6224bfd6e848f91f8bbbcf1d46b1cd59e99ed156502e9d2e160618b2a2737b3606de88c7480333d14a386d3a73a1ed55dde83cad80141b730e7e1a653d7666da08d5c6836594286b3731be2417ca83770694e8c6bcd2077fb21c6d4d8fac2c7550835d93f0649c61a93504fb934ea504bba6b064460615b71ec26a58e063ebc6cbb60565081d135434f828ff86b482011e739cd5d254fb64bfc71e20b292f42994bf88166e63b540585e9a2652d03e23a032d2158f5c98ecad60416bc6a769eb59cd311e6e9f", 0xd7}], 0x4, &(0x7f0000000b40)}}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000300)={0x5, 0x1, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000400)=""/205, 0xcd}], &(0x7f0000000240)=[0x5, 0xcf, 0x3, 0x1, 0x80000001, 0x86e6, 0x5]}, 0x20) io_uring_enter(r0, 0x3516, 0x483, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x2f, 0xb6, 0x9, 0x4cd6, 0x73, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x740, 0x80, 0x3, 0xff}}) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x400080, 0x0) kernel console output (not intermixed with test programs): [ 43.523098][ T40] audit: type=1400 audit(1746821604.126:63): avc: denied { write } for pid=5883 comm="sh" path="pipe:[4972]" dev="pipefs" ino=4972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 43.532849][ T40] audit: type=1400 audit(1746821604.126:64): avc: denied { rlimitinh } for pid=5883 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.541661][ T40] audit: type=1400 audit(1746821604.126:65): avc: denied { siginh } for pid=5883 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:1909' (ED25519) to the list of known hosts. [ 45.550425][ T40] audit: type=1400 audit(1746821606.166:66): avc: denied { name_bind } for pid=5913 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.570535][ T40] audit: type=1400 audit(1746821606.186:67): avc: denied { write } for pid=5914 comm="sh" path="pipe:[4994]" dev="pipefs" ino=4994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.596809][ T40] audit: type=1400 audit(1746821606.216:68): avc: denied { execute } for pid=5914 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.604038][ T40] audit: type=1400 audit(1746821606.216:69): avc: denied { execute_no_trans } for pid=5914 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.608104][ T40] audit: type=1400 audit(1746821608.226:70): avc: denied { mounton } for pid=5914 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.619959][ T5914] cgroup: Unknown subsys name 'net' [ 47.778863][ T5914] cgroup: Unknown subsys name 'cpuset' [ 47.785313][ T5914] cgroup: Unknown subsys name 'rlimit' [ 48.018928][ T5920] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.694483][ T5914] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.678917][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.678932][ T40] audit: type=1400 audit(1746821612.296:84): avc: denied { execmem } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.884094][ T40] audit: type=1400 audit(1746821612.496:85): avc: denied { create } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.897585][ T40] audit: type=1400 audit(1746821612.506:86): avc: denied { read write } for pid=5928 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.905239][ T40] audit: type=1400 audit(1746821612.506:87): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.912607][ T40] audit: type=1400 audit(1746821612.516:88): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="socket:[2949]" dev="sockfs" ino=2949 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.945802][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.948627][ T5932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.951694][ T5932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.955107][ T5932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.957607][ T5932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.960795][ T5932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.961793][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.964744][ T5932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.967398][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.969500][ T5932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.970581][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.971343][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.971412][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.972127][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.972582][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.984892][ T40] audit: type=1400 audit(1746821612.596:89): avc: denied { read } for pid=5928 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.985524][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.985528][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.985985][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.991564][ T40] audit: type=1400 audit(1746821612.596:90): avc: denied { open } for pid=5928 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.994945][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.997219][ T40] audit: type=1400 audit(1746821612.596:91): avc: denied { mounton } for pid=5928 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.999819][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.224840][ T40] audit: type=1400 audit(1746821612.846:92): avc: denied { module_request } for pid=5928 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.271441][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 52.276833][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 52.400991][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 52.470301][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.473342][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.477372][ T5928] bridge_slave_0: entered allmulticast mode [ 52.481311][ T5928] bridge_slave_0: entered promiscuous mode [ 52.566864][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.569883][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.572582][ T5928] bridge_slave_1: entered allmulticast mode [ 52.575414][ T5928] bridge_slave_1: entered promiscuous mode [ 52.615955][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.618173][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.620389][ T5939] bridge_slave_0: entered allmulticast mode [ 52.622939][ T5939] bridge_slave_0: entered promiscuous mode [ 52.682419][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.685512][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.687722][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.689910][ T5939] bridge_slave_1: entered allmulticast mode [ 52.692609][ T5939] bridge_slave_1: entered promiscuous mode [ 52.707949][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.710196][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.712441][ T5931] bridge_slave_0: entered allmulticast mode [ 52.715059][ T5931] bridge_slave_0: entered promiscuous mode [ 52.718997][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.763956][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.766297][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.768578][ T5931] bridge_slave_1: entered allmulticast mode [ 52.771273][ T5931] bridge_slave_1: entered promiscuous mode [ 52.787933][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 52.813650][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.835124][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.845506][ T5928] team0: Port device team_slave_0 added [ 52.849771][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.904528][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.909519][ T5928] team0: Port device team_slave_1 added [ 52.941450][ T5939] team0: Port device team_slave_0 added [ 52.985308][ T5939] team0: Port device team_slave_1 added [ 53.061996][ T5931] team0: Port device team_slave_0 added [ 53.065200][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.068007][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.079027][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.099454][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.101835][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.110762][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.130424][ T5931] team0: Port device team_slave_1 added [ 53.133613][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.136761][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.147565][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.152627][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.156012][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.164067][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.223524][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.226530][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.237298][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.243573][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.246793][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.256627][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.279051][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.281308][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.283632][ T5935] bridge_slave_0: entered allmulticast mode [ 53.286774][ T5935] bridge_slave_0: entered promiscuous mode [ 53.355456][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.358282][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.361227][ T5935] bridge_slave_1: entered allmulticast mode [ 53.365034][ T5935] bridge_slave_1: entered promiscuous mode [ 53.463219][ T5939] hsr_slave_0: entered promiscuous mode [ 53.465929][ T5939] hsr_slave_1: entered promiscuous mode [ 53.487770][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.497548][ T5928] hsr_slave_0: entered promiscuous mode [ 53.500411][ T5928] hsr_slave_1: entered promiscuous mode [ 53.503323][ T5928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.506489][ T5928] Cannot create hsr debugfs directory [ 53.524086][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.598244][ T5931] hsr_slave_0: entered promiscuous mode [ 53.602099][ T5931] hsr_slave_1: entered promiscuous mode [ 53.604789][ T5931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.607644][ T5931] Cannot create hsr debugfs directory [ 53.626915][ T5935] team0: Port device team_slave_0 added [ 53.667613][ T5935] team0: Port device team_slave_1 added [ 53.768077][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.771060][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.781722][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.817228][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.820179][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.830781][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.000506][ T5935] hsr_slave_0: entered promiscuous mode [ 54.003016][ T5935] hsr_slave_1: entered promiscuous mode [ 54.005175][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.007576][ T5935] Cannot create hsr debugfs directory [ 54.014976][ T5936] Bluetooth: hci3: command tx timeout [ 54.014982][ T5940] Bluetooth: hci0: command tx timeout [ 54.014989][ T5943] Bluetooth: hci1: command tx timeout [ 54.104770][ T5943] Bluetooth: hci2: command tx timeout [ 54.137252][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.157492][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.188047][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.193680][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.232254][ T5928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.237852][ T5928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.243993][ T5928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.249066][ T5928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.295440][ T5931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.301546][ T5931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.307800][ T5931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.318989][ T5931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.390040][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.393510][ T5935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.398260][ T5935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.402693][ T5935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.408711][ T5935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.430021][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.441448][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.443853][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.453649][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.459635][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.461893][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.483503][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.504098][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.506830][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.537352][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.540065][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.567590][ T40] audit: type=1400 audit(1746821615.186:93): avc: denied { sys_module } for pid=5939 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.568035][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.594614][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.600071][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.609618][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.611931][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.628300][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.630933][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.634656][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.645138][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.647420][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.659604][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.662655][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.707574][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.745777][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.759366][ T5939] veth0_vlan: entered promiscuous mode [ 54.770077][ T5939] veth1_vlan: entered promiscuous mode [ 54.808962][ T5928] veth0_vlan: entered promiscuous mode [ 54.817633][ T5939] veth0_macvtap: entered promiscuous mode [ 54.825274][ T5928] veth1_vlan: entered promiscuous mode [ 54.829175][ T5939] veth1_macvtap: entered promiscuous mode [ 54.844554][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.849650][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.867857][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.875749][ T5928] veth0_macvtap: entered promiscuous mode [ 54.884684][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.889778][ T5928] veth1_macvtap: entered promiscuous mode [ 54.900426][ T5939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.903334][ T5939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.906563][ T5939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.909810][ T5939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.923351][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.928457][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.932440][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.937168][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.940804][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.944950][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.950891][ T5928] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.953650][ T5928] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.956745][ T5928] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.959641][ T5928] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.979799][ T5935] veth0_vlan: entered promiscuous mode [ 54.990732][ T5931] veth0_vlan: entered promiscuous mode [ 55.002027][ T5935] veth1_vlan: entered promiscuous mode [ 55.015897][ T5931] veth1_vlan: entered promiscuous mode [ 55.067727][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.071036][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.077150][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.080562][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.098503][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.098835][ T5935] veth0_macvtap: entered promiscuous mode [ 55.101800][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.111171][ T5935] veth1_macvtap: entered promiscuous mode [ 55.124704][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.126798][ T5931] veth0_macvtap: entered promiscuous mode [ 55.127386][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.137834][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.141466][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.145560][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.148881][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.153293][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.158351][ T5931] veth1_macvtap: entered promiscuous mode [ 55.166218][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.169167][ T5928] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.170413][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.179865][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.183955][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.189776][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.206740][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.211166][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.216243][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.219823][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.224012][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.229084][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.236223][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.240992][ T5935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.246690][ T5935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.250370][ T5935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.253906][ T5935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.271425][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.276324][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.280239][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.284085][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.287733][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.291449][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.296522][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.308863][ T5931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.312583][ T5931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.316814][ T5931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.320104][ T5931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.372886][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.384406][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.390130][ T6000] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 55.394967][ T6000] netlink: 'syz.2.6': attribute type 3 has an invalid length. [ 55.398051][ T6000] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6'. [ 55.407585][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.411573][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.426659][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.429300][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.434195][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.438055][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.579499][ T6017] Bluetooth: MGMT ver 1.23 [ 55.800573][ T6033] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 56.094801][ T5943] Bluetooth: hci0: command tx timeout [ 56.095282][ T5936] Bluetooth: hci3: command tx timeout [ 56.097141][ T5943] Bluetooth: hci1: command tx timeout [ 56.174597][ T5943] Bluetooth: hci2: command tx timeout [ 56.518203][ T6051] tipc: Started in network mode [ 56.520362][ T6051] tipc: Node identity ac141425, cluster identity 4711 [ 56.526791][ T6051] tipc: New replicast peer: 0.0.0.0 [ 56.529644][ T6051] tipc: Enabled bearer , priority 10 [ 56.533092][ T6051] tipc: New replicast peer: 172.20.20.170 [ 56.572837][ T6055] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65498 sclass=netlink_xfrm_socket pid=6055 comm=syz.1.20 [ 56.684975][ T6053] [ 56.686031][ T6053] ====================================================== [ 56.688785][ T6053] WARNING: possible circular locking dependency detected [ 56.691411][ T6053] 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 Not tainted [ 56.695572][ T6053] ------------------------------------------------------ [ 56.698216][ T6053] syz.2.19/6053 is trying to acquire lock: [ 56.700524][ T6053] ffff888025efc058 (&q->elevator_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x4a9/0x1370 [ 56.704276][ T6053] [ 56.704276][ T6053] but task is already holding lock: [ 56.706528][ T6053] ffff888025efbb28 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x263/0x1370 [ 56.710151][ T6053] [ 56.710151][ T6053] which lock already depends on the new lock. [ 56.710151][ T6053] [ 56.713287][ T6053] [ 56.713287][ T6053] the existing dependency chain (in reverse order) is: [ 56.716025][ T6053] [ 56.716025][ T6053] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 56.718680][ T6053] blk_alloc_queue+0x619/0x760 [ 56.720347][ T6053] blk_mq_alloc_queue+0x179/0x290 [ 56.722020][ T6053] __blk_mq_alloc_disk+0x29/0x120 [ 56.723752][ T6053] nbd_dev_add+0x49d/0xbb0 [ 56.725269][ T6053] nbd_init+0x181/0x320 [ 56.727163][ T6053] do_one_initcall+0x120/0x6e0 [ 56.728967][ T6053] kernel_init_freeable+0x5c2/0x900 [ 56.730813][ T6053] kernel_init+0x1c/0x2b0 [ 56.731223][ T6061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21'. [ 56.732483][ T6053] ret_from_fork+0x45/0x80 [ 56.737658][ T6053] ret_from_fork_asm+0x1a/0x30 [ 56.739365][ T6053] [ 56.739365][ T6053] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 56.741538][ T6053] fs_reclaim_acquire+0x102/0x150 [ 56.743212][ T6053] kmem_cache_alloc_noprof+0x53/0x3b0 [ 56.745095][ T6053] __kernfs_new_node+0xd2/0x8a0 [ 56.746781][ T6053] kernfs_new_node+0x13c/0x1e0 [ 56.748467][ T6053] kernfs_create_dir_ns+0x4c/0x1a0 [ 56.750216][ T6053] sysfs_create_dir_ns+0x13a/0x2b0 [ 56.752003][ T6053] kobject_add_internal+0x2c4/0x9b0 [ 56.753795][ T6053] kobject_add+0x16e/0x240 [ 56.755366][ T6053] elv_register_queue+0xd3/0x2a0 [ 56.757158][ T6053] blk_register_queue+0x3c4/0x560 [ 56.758919][ T6053] add_disk_fwnode+0x911/0x13a0 [ 56.760588][ T6053] nbd_dev_add+0x78e/0xbb0 [ 56.762142][ T6053] nbd_init+0x181/0x320 [ 56.763623][ T6053] do_one_initcall+0x120/0x6e0 [ 56.765267][ T6053] kernel_init_freeable+0x5c2/0x900 [ 56.767036][ T6053] kernel_init+0x1c/0x2b0 [ 56.768577][ T6053] ret_from_fork+0x45/0x80 [ 56.770122][ T6053] ret_from_fork_asm+0x1a/0x30 [ 56.771779][ T6053] [ 56.771779][ T6053] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 56.774191][ T6053] __lock_acquire+0x1173/0x1ba0 [ 56.775896][ T6053] lock_acquire+0x179/0x350 [ 56.777469][ T6053] __mutex_lock+0x199/0xb90 [ 56.779041][ T6053] blk_mq_update_nr_hw_queues+0x4a9/0x1370 [ 56.781013][ T6053] nbd_start_device+0x172/0xcd0 [ 56.782687][ T6053] nbd_ioctl+0x219/0xda0 [ 56.784211][ T6053] blkdev_ioctl+0x274/0x6d0 [ 56.785790][ T6053] __x64_sys_ioctl+0x190/0x200 [ 56.787462][ T6053] do_syscall_64+0xcd/0x260 [ 56.789081][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.791105][ T6053] [ 56.791105][ T6053] other info that might help us debug this: [ 56.791105][ T6053] [ 56.794232][ T6053] Chain exists of: [ 56.794232][ T6053] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 56.794232][ T6053] [ 56.798385][ T6053] Possible unsafe locking scenario: [ 56.798385][ T6053] [ 56.800809][ T6053] CPU0 CPU1 [ 56.802450][ T6053] ---- ---- [ 56.804079][ T6053] lock(&q->q_usage_counter(io)#51); [ 56.805763][ T6053] lock(fs_reclaim); [ 56.807797][ T6053] lock(&q->q_usage_counter(io)#51); [ 56.810248][ T6053] lock(&q->elevator_lock); [ 56.811709][ T6053] [ 56.811709][ T6053] *** DEADLOCK *** [ 56.811709][ T6053] [ 56.814208][ T6053] 4 locks held by syz.2.19/6053: [ 56.815781][ T6053] #0: ffff888025fdc198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x150/0xda0 [ 56.818741][ T6053] #1: ffff888025fdc0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x8e/0x1370 [ 56.822025][ T6053] #2: ffff888025efbb28 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x263/0x1370 [ 56.825621][ T6053] #3: ffff888025efbb60 (&q->q_usage_counter(queue)#3){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x263/0x1370 [ 56.829280][ T6053] [ 56.829280][ T6053] stack backtrace: [ 56.831139][ T6053] CPU: 1 UID: 0 PID: 6053 Comm: syz.2.19 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 56.831154][ T6053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.831160][ T6053] Call Trace: [ 56.831165][ T6053] [ 56.831169][ T6053] dump_stack_lvl+0x116/0x1f0 [ 56.831185][ T6053] print_circular_bug+0x275/0x350 [ 56.831202][ T6053] check_noncircular+0x14c/0x170 [ 56.831219][ T6053] __lock_acquire+0x1173/0x1ba0 [ 56.831236][ T6053] ? __kasan_kmalloc+0xaa/0xb0 [ 56.831253][ T6053] lock_acquire+0x179/0x350 [ 56.831268][ T6053] ? blk_mq_update_nr_hw_queues+0x4a9/0x1370 [ 56.831283][ T6053] ? __pfx___might_resched+0x10/0x10 [ 56.831297][ T6053] __mutex_lock+0x199/0xb90 [ 56.831312][ T6053] ? blk_mq_update_nr_hw_queues+0x4a9/0x1370 [ 56.831325][ T6053] ? blk_mq_update_nr_hw_queues+0x4a9/0x1370 [ 56.831339][ T6053] ? __pfx___mutex_lock+0x10/0x10 [ 56.831355][ T6053] ? blk_mq_update_nr_hw_queues+0x4a9/0x1370 [ 56.831368][ T6053] blk_mq_update_nr_hw_queues+0x4a9/0x1370 [ 56.831380][ T6053] ? __mutex_lock+0x1ca/0xb90 [ 56.831394][ T6053] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 56.831409][ T6053] nbd_start_device+0x172/0xcd0 [ 56.831420][ T6053] ? bpf_lsm_capable+0x9/0x10 [ 56.831429][ T6053] nbd_ioctl+0x219/0xda0 [ 56.831438][ T6053] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 56.831454][ T6053] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 56.831470][ T6053] ? __pfx_nbd_ioctl+0x10/0x10 [ 56.831478][ T6053] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 56.831496][ T6053] ? __pfx_nbd_ioctl+0x10/0x10 [ 56.831505][ T6053] blkdev_ioctl+0x274/0x6d0 [ 56.831515][ T6053] ? __pfx_blkdev_ioctl+0x10/0x10 [ 56.831524][ T6053] ? selinux_file_ioctl+0x180/0x270 [ 56.831539][ T6053] ? selinux_file_ioctl+0xb4/0x270 [ 56.831554][ T6053] ? __pfx_blkdev_ioctl+0x10/0x10 [ 56.831564][ T6053] __x64_sys_ioctl+0x190/0x200 [ 56.831577][ T6053] do_syscall_64+0xcd/0x260 [ 56.831592][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.831602][ T6053] RIP: 0033:0x7fac0398e969 [ 56.831611][ T6053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.831620][ T6053] RSP: 002b:00007fac0475d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.831630][ T6053] RAX: ffffffffffffffda RBX: 00007fac03bb5fa0 RCX: 00007fac0398e969 [ 56.831636][ T6053] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 000000000000000b [ 56.831642][ T6053] RBP: 00007fac03a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 56.831648][ T6053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.831653][ T6053] R13: 0000000000000000 R14: 00007fac03bb5fa0 R15: 00007ffd5f4e7c18 [ 56.831662][ T6053] [ 56.831693][ C1] vkms_vblank_simulate: vblank timer overrun [ 56.918664][ C1] vkms_vblank_simulate: vblank timer overrun [ 56.927827][ T5943] block nbd2: Receive control failed (result -107) [ 56.965771][ T6056] block nbd2: shutting down sockets [ 57.361946][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 57.361957][ T40] audit: type=1400 audit(1746821617.976:191): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 57.644437][ T5990] tipc: Node number set to 2886997029 [ 58.174379][ T5936] Bluetooth: hci0: command tx timeout [ 58.174492][ T5943] Bluetooth: hci1: command tx timeout [ 58.176675][ T5936] Bluetooth: hci3: command tx timeout [ 58.254411][ T5936] Bluetooth: hci2: command tx timeout [ 60.254761][ T5936] Bluetooth: hci3: command tx timeout [ 60.264362][ T5936] Bluetooth: hci1: command tx timeout [ 60.264606][ T5940] Bluetooth: hci0: command tx timeout [ 60.334397][ T5940] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 20:13:37 Registers: info registers vcpu 0 CPU#0 RAX=000000000002f39c RBX=0000000000000000 RCX=ffffffff8b6cc419 RDX=ffffed100d4865be RSI=ffffffff8bf482a0 RDI=ffffffff81918901 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff9084f110 R15=0000000000000000 RIP=ffffffff8b6cacaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdbc0d72720 CR3=000000002a593000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ced611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ced611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ced611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ced611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ced611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ced611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ced783488 00007f2ced783480 00007f2ced783478 00007f2ced783450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2cee2ed100 00007f2ced783440 00007f2ced780004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ced783498 00007f2ced783490 00007f2ced783488 00007f2ced783480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a579915682de13c 2e0158ced43de42f cf6da84a01f64431 d5b9498324d5da64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f2ff8feb3d847467 ba68a28bde3378df 4804441149c514ef 15752ac582602060 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ac24e7dfbe34f9c1 b0e82b03b47f91a6 66dc5e363fdd0113 2847de1b0e041efd ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c1587bc58719b05c 581f9a95ff3b6a59 e1e06809dd808a57 9915682de13c2e01 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 58ced43de42fcf6d a84a01f64431d5b9 498324d5da64d2b6 a1531c8853145852 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f4d75 RDI=ffffffff9adf74e0 RBP=ffffffff9adf74a0 RSP=ffffc900041e73a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e35312e36 R12=0000000000000000 R13=000000000000002d R14=ffffffff9adf74a0 R15=ffffffff854f4d10 RIP=ffffffff854f4d9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fac0475d6c0 ffffffff 00c00000 GS =0000 ffff8880d6ae1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2cee391f98 CR3=0000000038b1f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00307265646e6962 2f73667265646e69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60ece11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60ece11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60ece11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60ece11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60ece11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60ece11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e8bceededb9284f 06218cff2b1f1743 2a73e70b107e32c7 350dc07a9012421a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5fdea5e37720e396 86b5d0d6adf6c363 ecf9041e87bb0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d7c68426df0e5b91 6f17c126637dbc9f bccf6cd6acdca2d6 691e35b4312b82f9 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 62404b38ab2e54ad f194c608c6654caa 546c094ebf0c41d0 b00bf2104ac2876e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 814f83cfd87314fd f423ad66e3d30f14 f0c586233c06a21c e767813558d8cdf8 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 720d1ea264b87f2f a174b6dd26caf7c8 5cd7c68426df0e5b 916f17c126637dbc ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9fbccf6cd6acdca2 d6691e35b4312b82 f95fdea5e37720e3 9686b5d0d6adf6c3 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000004df75 RBX=0000000000000002 RCX=ffffffff8b6cc419 RDX=0000000000000000 RSI=ffffffff8dbe181f RDI=ffffffff8bf48320 RBP=ffffed1003ad0910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d684880 R14=ffffffff9084f110 R15=0000000000000000 RIP=ffffffff8b6cacaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6be1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc945f6d08 CR3=0000000022c9f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000001fc0000 Opmask02=0000000001ffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055eac8131c40 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055eac812ff10 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed54df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b5181bfa7a96f4a 7373269ce5ccea22 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373a2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38656565692f6d69 7377685f34353132 303863616d2f6d72 6f6674616c702f73 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a756b733a322e 392d3533712d6370 7276633a3174633a 554d45516e76633a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313032302c394631 302c324331302c38 4231302c46413130 2c454131302c4341 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000001 RBX=00000000fffffe00 RCX=ffffffff81c2e77f RDX=0000000000000000 RSI=ffffffff8bf482a0 RDI=ffffffff8b3a2604 RBP=ffffffff8b3a2604 RSP=ffffc90000a3faa0 R8 =0000000000000000 R9 =fffffbfff2109e22 R10=ffffffff9084f117 R11=0000000000000000 R12=ffffffff8b3a29b0 R13=ffff888033cf40c0 R14=ffff8880273e0d80 R15=0000000000000000 RIP=ffffffff817cb76e RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ce1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c3f9936 CR3=0000000012e40000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc0e11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc0e11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc0e11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc0e11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc0e11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc0e11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc0f83488 00007fdbc0f83480 00007fdbc0f83478 00007fdbc0f83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc1aed100 00007fdbc0f83440 00007fdbc0f80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbc0f83498 00007fdbc0f83490 00007fdbc0f83488 00007fdbc0f83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000