last executing test programs: 1.280199839s ago: executing program 3 (id=154): r0 = fsopen(&(0x7f0000000180)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read(r2, &(0x7f0000000100), 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) (async) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/event_source/devices/software/type\x00', 0x0, 0x0) read(r3, &(0x7f0000000600), 0x100) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x196) (async) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r6 = socket(0x11, 0x6, 0xfffffffa) sendmmsg(r6, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015) (async) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 64) r7 = gettid() (rerun: 64) prctl$PR_SCHED_CORE(0x53564d41, 0x0, r7, 0x0, 0x0) (async) r8 = getpgid(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x23d}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 1.176036814s ago: executing program 3 (id=159): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffb) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1050c0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1050c0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0xc49c6ecc1a5d2952, 0x700, 0xb0, 0x3ff, {{0x20, 0x4, 0x2, 0x9, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x89, 0x3, 0x8, [{@rand_addr=0x64010101, 0xfffffff5}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0x3, [{@multicast1, 0x5}, {@local}, {@remote, 0x6}, {@local, 0x1}, {@remote, 0x6}]}, @end, @timestamp_prespec={0x44, 0x2c, 0x40, 0x3, 0x8, [{@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@loopback}, {@private=0xa010100}, {@multicast2, 0x1}]}]}}}}}) openat$incfs(0xffffffffffffffff, &(0x7f00000003c0)='.log\x00', 0x2, 0x14) (async) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000003c0)='.log\x00', 0x2, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0xf, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xc}, [@jmp={0x5, 0x0, 0x3a5d9ed75519a917, 0x8, 0xa, 0x10, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @tail_call, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x4b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000100)='syzkaller\x00', 0xe, 0xcb, &(0x7f0000000140)=""/203, 0x41000, 0x33, '\x00', r2, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x1, 0x2, 0x9}, 0x10, 0x0, r3, 0x1, 0x0, &(0x7f0000000400)=[{0x0, 0x4, 0x3, 0x6}], 0x10, 0xfff}, 0x94) 1.175525952s ago: executing program 0 (id=160): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) r0 = getuid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000040)={0x3a, &(0x7f0000000180)}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@filename='./file0\x00', r0, 0x0) 1.089169582s ago: executing program 0 (id=163): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x40, 0x80, 0x1, 0x3, {{0x28, 0x4, 0x0, 0x1, 0xa0, 0x65, 0x0, 0xfa, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0x0, [{@private=0xa010101, 0x87d4}, {@empty, 0x2a61}, {@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ad}, {@local, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0xe0, 0x3, 0x1, [{@multicast1, 0x8}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x58b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x51}, {@empty, 0x81}]}, @timestamp={0x44, 0xc, 0x73, 0x0, 0x2, [0x8, 0xffff]}, @timestamp={0x44, 0x18, 0xc5, 0x0, 0xe, [0x7, 0x2, 0xfff, 0x183, 0x0]}]}}}}}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r0}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@canfd={{0x4}, 0x24, 0x3, 0x0, 0x0, "3e4b498c65fa7a7718530e80f4bd2555aef64d414e61a5135e89bac77c7e9309fd680dd7f17c48cdb8a80c6f5c873e674ad0e39960c43ec3496a72bc7aa817be"}, 0x48}, 0x1, 0x0, 0x0, 0x24000090}, 0x4040008) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x3102, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000300)={'erspan0\x00', r2, 0x1, 0xf8d7, 0x4, 0xb32, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x76, 0x2f, 0x0, @multicast2, @empty}}}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@private1, 0x7f, r2}) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000400)={0x8, "32204b14039042c8a5fb87065f70935a9828e25d652102daa060bc45e606e32c", 0x1, 0x4, 0x4, 0x3000000, 0x2, 0x2}) r4 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_void(r4, 0x1, 0x48, 0x0, 0x0) write$ppp(r1, &(0x7f0000000480)="708d201ae76920d39c1355e3a1889d4c0277fd405df419dcb81af44975bff09f24926f1a5df6317e0bf0fb47f477053e942ca5895c6d22351421c8e35ba95cb131e10fcc6f6fcae164b1be139fd7baa3d9abe4f912c337c4a05da47bf9bc0a5334c1f7b395f3016ccbe85ae8c40965", 0x6f) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x80c84) r5 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600)="daa1e2c7dc563a9ac5e90027199a90766fa8871e6cf7ef4365c761956ceab9ba060cd7495ba4e0154a554134bfa115480310730db3c68854303b24d47f4c26e45f7d4c7f86ef8d82e2fc441fbed85f4dd560000296ddf3dee7cf83325ecd1965fa6c9ee3d0aa578810f794b0eb396a65cfaf3f977b8e652d7bab315f00ea5a5fba62f09a313f019e4ec22c16c2db5700a49165c579f784adc45282db83ebf67071e5dca43a5e1d31", 0xa8, r5}, 0x68) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r1, 0x89e8, &(0x7f0000000740)="f717c31cdddbef5142c4e55f68c8ed0a1ffbc6c17eb50c642231f2c53f7196ec8991bf9fd1d25a37c98c508737c3c8e1993bb6e6f77cb85076bfc863181d1a6c182a1028b1dea54eaabf9a4cef080272cac52441773d746549bd6d00a073a3deee576dff72256d28e0c32563da81410dfc9c18c83ffcd015792e77481ee9d14f3f4667420d9279669ee881aba834bd29f094e22f372eb552") r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x4c, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0x6c, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x1b, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @map_fd={0x18, 0xb, 0x1, 0x0, r7}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x3, 0x1, 0x0, r8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2c86}}]}, &(0x7f0000000a40)='GPL\x00', 0x9, 0xe, &(0x7f0000000a80)=""/14, 0x41100, 0x60, '\x00', r0, @fallback=0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x0, 0xa, 0x8, 0x1}, 0x10, r9, r1, 0x4, 0x0, &(0x7f0000000b40)=[{0x2, 0x1, 0x6, 0x3}, {0x8, 0x5, 0x1, 0xc}, {0x4, 0x5, 0xd, 0x2}, {0x4, 0x2, 0xc, 0xd}], 0x10, 0x9}, 0x94) r10 = signalfd4(r6, &(0x7f0000000c40), 0x8, 0x0) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000c80)=0x8010, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000d40)={@mcast2, 0x0}, &(0x7f0000000d80)=0x14) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}]}, 0x3c}}, 0x40004) pipe2(&(0x7f0000000e80)={0xffffffffffffffff}, 0x84080) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x0, '\x00', r0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) r14 = syz_open_dev$vcsu(&(0x7f00000011c0), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001340)=@bpf_tracing={0x1a, 0x23, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x88}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x40000000}, @call={0x85, 0x0, 0x0, 0xa9}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x66}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd0d}}, @ldst={0x1, 0x2, 0x0, 0x7, 0x4, 0x30, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001000)='GPL\x00', 0x80000000, 0x7a, &(0x7f0000001040)=""/122, 0x41100, 0x8, '\x00', 0x0, 0x18, r1, 0x8, &(0x7f00000010c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001100)={0x1, 0x9, 0x11, 0x1ff}, 0x10, 0x201f2, r10, 0x2, &(0x7f00000012c0)=[r13, r10, r8, r14, r1, 0xffffffffffffffff, r10, r8, r1], &(0x7f0000001300)=[{0x5, 0x5, 0x3, 0x7}, {0x0, 0x3, 0xe, 0x8}], 0x10, 0x7}, 0x94) 1.028383506s ago: executing program 0 (id=164): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_deladdr={0x34, 0x15, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x38, 0xa4, 0xfe}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x7ff}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x20004080) r1 = socket$inet6(0xa, 0x4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x1f0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x300, 0x20a, 0x278, 0x300, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000], 'ipvlan0\x00', 'caif0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0xff, 0xff], 0x4e21, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x4, 0x4, 0x6, 0x9}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x9, 0x8, 0x6, 'snmp_trap\x00', 'syz1\x00', {0x87bf}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r11 = socket$inet(0x2, 0x2, 0x0) r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000dc0)=@newtfilter={0x21c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xfff2}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x1ec, 0x2, [@TCA_BASIC_ACT={0x1e8, 0x3, [@m_simple={0x9c, 0x20, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '/dev/kvm\x00'}, @TCA_DEF_DATA={0x6, 0x3, ':\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xbb4, 0x7, 0x20000000, 0x7ff, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, '/dev/kvm\x00'}, @TCA_DEF_DATA={0x6, 0x3, '{\x00'}]}, {0x28, 0x6, "9607bc647dec0dbd1635730f032011e8821cb3ec5c1607dc96303613b17703b438d1a7f7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x148, 0x0, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x2, 0xffffffffffffffff, 0x5, 0x2d5}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe5, 0xfffffffe, 0x20000000, 0xffffccfc, 0x3}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x52, 0x7, 0x7, 0x32fb7e63}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0x7, 0x7, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x0, 0x2, 0x3, 0x9}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x80000001, 0x6, 0x2, 0x2a4e}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xba, 0x10000000, 0x2, 0x6}, 0x8dd9a2294ddc82c0, r10}}]}, {0x3a, 0x6, "816b1eb5828e3f3d54cf48d59c2096492ca777a13af4e706c6bc19fca3473850e577dcd065586981b6713e5d608bbdbd35089f2fb098"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x21c}}, 0x0) write$tun(r7, &(0x7f0000000500)=ANY=[], 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f20e035100000000f22e00f20d835200000000f22d8f30fc7b6ee480000f0214000b8060000000f23d00f21f835200000000f23f866b8fe008ec0c7442400a304ececc74424020b000000c7442406000000000f0114240f0178000f013cc475b1", 0x61}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 937.833608ms ago: executing program 3 (id=166): mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0xc8621000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x20, 0x80, 0x2, 0x10, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010101, @multicast1}}}}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="020500030a0000000000000000000000030006006c0c000002000000000000000000000000000000020001000000ebffffffa08fd191efdb866082baa5c4232d5a27253e262629ed2200000005000000000000ecd597152f4e921e322211a6764df885f92b1e9f9f2607f01ac686d38d5f3cfaa0f72f7a371000000000000000003d0aacb572d24047e935293680fc89ce2910f74a13306f60157a30506461f111c8826273f2f0360000000000"], 0x50}, 0x1, 0x7}, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x48) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) recvmmsg(0xffffffffffffffff, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0xfffe}], 0x1) socket$packet(0x11, 0x3, 0x300) bind$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r7, @ANYBLOB="1000a2040800010000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffb}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500005c000000000011907800004000e000000100004e200048907803000000000000005f74e99cc1163601ac4bbb4e072da7f91e370b2db21c688853448e0a2ca03e169955df119f9c5e8e9415d331e3f2aadbd3a62c2a9ed93448951400c5a3d93a"], 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000940)='securityfs\x00', 0x0, 0x0) 664.067406ms ago: executing program 1 (id=170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x489, 0x0, 0xffff}]}) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x0) write$P9_RUNLINKAT(r2, &(0x7f00000001c0)={0x7, 0x4d, 0x2}, 0x7) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000240)) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) (async) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x3, 0x0, &(0x7f0000000040)) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0) r8 = getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r7, 0x25, 0x2, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=[0xffc, 0xf, 0x9b, 0x7fff], &(0x7f0000000180)=[0x3], 0x4e27, 0x4, 0x1, r8}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r7, 0x25, 0x2, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=[0xffc, 0xf, 0x9b, 0x7fff], &(0x7f0000000180)=[0x3], 0x4e27, 0x4, 0x1, r8}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000000400)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x7, 0x0, 0x0, 0x16, 0x15, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000132900", "2809e8dbe108598948224add4afac11d875397bdb22d0000b420a1a93c52cdec5f819e01177d3d458dd4992861abffe3000000000000000000000000ffff00", "f42205000000000000000000000000000000002000", [0x9, 0x2000000000001]}}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000640)) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r7, @ANYBLOB="5d68138eb095e9f5d479317da4d429106c559ec87d6673881603c5b514b22f24450000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) 663.938687ms ago: executing program 2 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/Loopback.usb0\x00') 600.551208ms ago: executing program 0 (id=172): socket$inet6(0xa, 0x6, 0x11) r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0xa, 0x4, 0x4002, @dev={0xfe, 0x80, '\x00', 0x26}, 0x6}, 0x1c) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRES8=r3, @ANYBLOB="01000000000000000000010000001c0001800600010100020800060006000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x20044010) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) (async) r7 = socket(0x28, 0x5, 0x0) (async) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r8, 0x4) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) (async) ppoll(&(0x7f0000000100)=[{r7, 0x4559}], 0x1, 0x0, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) (async) listen(r7, 0x2) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r11, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="06000f0000000000", @ANYRES16=r12, @ANYBLOB="00012abd7000fddbdf251200000008001300", @ANYRES32=r13], 0x24}, 0x1, 0x0, 0x0, 0x200108c1}, 0x40040) 599.755175ms ago: executing program 2 (id=173): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0401, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000100)) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x401, 0x20000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_PHYS_PORT_ID={0x9, 0x22, "098b6509dc"}, @IFLA_PHYS_SWITCH_ID={0x19, 0x24, "7990a14bd942e5b8b3bb571541edcce2721ae410ba"}]}, 0x6c}}, 0x0) 469.624441ms ago: executing program 0 (id=174): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum={0x2, 0x3, 0x0, 0xf, 0x4, [{0x9, 0xfffffffe}, {0xb, 0x800}, {0x2, 0x3ff}]}]}}, 0x0, 0x3e}, 0x28) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 394.530878ms ago: executing program 1 (id=175): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xe}, @l2cap_cid_le_signaling={{0xa}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x6}, {0xffbd, 0xff46, [0x7]}}}}, 0x13) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={{{}, {}, @device_b}, @ntf_ch_w}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2800}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 392.781246ms ago: executing program 2 (id=176): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000150001ba266f9c00150000010c00000008000100", @ANYRES8=r0], 0x1c}}, 0x4000000) 390.84464ms ago: executing program 0 (id=177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') lseek(r2, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00e00095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/7, 0x7, 0x1, &(0x7f0000000300)=""/239, 0xef}, &(0x7f0000000500)=0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b0800014000000003080003000000008920000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0xa4}}, 0x0) 330.975786ms ago: executing program 2 (id=178): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 330.63806ms ago: executing program 1 (id=179): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000002a40), 0x4a0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x200111, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000002a80)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) read(r2, &(0x7f0000000000)=""/149, 0xaa) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0xc8, 0x4) 230.166862ms ago: executing program 2 (id=180): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x101940) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000280)={{0x16, 0x0, 0x3, 0x8, 'syz0\x00', 0x4002}, 0x0, 0x4, 0xffffffb8, 0x0, 0x0, 0x3, 'syz1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x6, 0x4, 0xb, 0x2}, {0x4, 0x2, 0x9}, {0x3ff, 0x3}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000040)={0x2, r6}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x2, r6, 0x1}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'pim6reg\x00', 0x0}) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000180)={r7, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="1400018008000100000001000500060002000000"], 0x2c}}, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 229.938427ms ago: executing program 1 (id=181): r0 = io_uring_setup(0x65fa, &(0x7f00000002c0)={0x0, 0x5b5b, 0x8, 0x3, 0x191}) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000b00)=[@ip_retopts={{0x10}}], 0x10}, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@random="6248428b4bfb", @local, @val={@void, {0x8100, 0x6}}, {@can={0xc, {{0x3, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "bcf8fe3ac723f3d0"}}}}, &(0x7f00000000c0)={0x1, 0x1, [0xfef, 0x91e, 0x778, 0x2d5]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002f00090027bd7000eddbdf250400000008001a8004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 64.533957ms ago: executing program 3 (id=182): r0 = socket(0x1a, 0x3, 0x10001) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) 56.636041ms ago: executing program 1 (id=183): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x4) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000091f000/0x1000)=nil) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000ce2000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="0f300f009c8400000000f3260f21fb0fc71ec744240000800000c744240207000000c7442406000000000f011c240fc73866b839018ee80f00910555ed9f0f01d10fc7be00400000", 0x48}], 0x1, 0x44, &(0x7f00000002c0)=[@dstype3={0x7, 0xc}], 0x1) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x12) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0xa}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d6c8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x1, 0x9, 0x0) (async) mremap(&(0x7f00003d6000/0x8000)=nil, 0x8000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 56.163952ms ago: executing program 3 (id=184): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x2}}, @struct={0xc, 0x1, 0x0, 0x4, 0x0, 0x7fff, [{0x10, 0x7, 0x8de}]}, @func={0x3, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f0000000080)=""/147, 0x69, 0x93, 0x1, 0x5}, 0x28) (async) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x40054) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xc0, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x2, 0xfffffe00, 0x6, 0x5e4d, 0x0, 0x100]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000001}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4010}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xe}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x414}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xfffffbff, 0x3, 0x1]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x68f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x9}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x1, 0x8000, 0x5, 0x100, {{0x22, 0x4, 0x2, 0x6, 0x88, 0x64, 0x0, 0xc, 0x4, 0x0, @broadcast, @multicast1, {[@end, @timestamp_addr={0x44, 0x44, 0x74, 0x1, 0x5, [{@broadcast, 0x5}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@local, 0x6}, {@remote, 0x54da}, {@multicast1, 0x8}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x6}]}, @timestamp_addr={0x44, 0x1c, 0xb0, 0x1, 0x4, [{@rand_addr=0x64010101, 0xffffffff}, {@empty, 0x9}, {@multicast1, 0x2}]}, @lsrr={0x83, 0x13, 0x47, [@dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @private=0xa010101]}]}}}}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x200, '\x00', r2, r0, 0x2, 0x1, 0x2}, 0x50) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x20004845) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r6) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x84, r1, 0x10a, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="2d20c7878c539fb0b63714dc53a67a8b4320ec43f20511"}, @NL80211_ATTR_PMKID={0x14, 0x55, "8646dd26bd53f33086f026886c0aebe0"}, @NL80211_ATTR_PMKID={0x14, 0x55, "cbfd82b7fbf0e7e19380ec9cc3cae9f7"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0xcdc0dbee582d6158) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a80), 0x200442, 0x0) poll(&(0x7f0000000ac0)=[{r8, 0x1002}, {r4, 0x60a4}, {r4, 0x2220}, {r9, 0x20}, {r10, 0x408}], 0x5, 0x0) (async) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000b00)={0x0, 0x3}, &(0x7f0000000b40)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x4e24, 0xfffffe06, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x8, 0x8001}, &(0x7f0000000c40)=0x90) getsockopt$inet_sctp_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f0000000c80)={r12, 0x1c, 0x6d, 0xb74, 0x5, 0x87cb, 0x800, 0x26b, {r13, @in={{0x2, 0x4e24, @remote}}, 0x3, 0x6, 0x3ac8, 0x3, 0xc41}}, &(0x7f0000000d40)=0xb0) (async) setsockopt$inet_mreqsrc(r11, 0x0, 0x26, &(0x7f0000000d80)={@remote, @broadcast, @empty}, 0xc) (async) ioctl$DVB_DVR_DMX_EXPBUF(r10, 0xc00c6f3e, &(0x7f0000000dc0)={0x1, 0x0, r8}) ioctl$EXT4_IOC_MIGRATE(r14, 0x6609) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000000e00)=0x0) connect$nfc_llcp(r14, &(0x7f0000000e40)={0x27, r15, 0xffffffffffffffff, 0x4, 0x80, 0x2, "cd178f12a0554d1f76cb10f1b82d7191444a62d8bcb6d2116053cbc01e4f47c5abdbb3c677ae13c5422b640ca586b1d693e8fb36103117e319122360c022b3", 0x10}, 0x60) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r8, 0x80811501, &(0x7f0000000ec0)={0x80}) 992.51µs ago: executing program 2 (id=185): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x6f1dd9aa, 0x301002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x6}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0x30c}, 0x1c) ioctl(r1, 0xe, &(0x7f0000000100)="25bb625116b644fd4a2a09c9738fdeb4eea65c1aa033a242ee1c3c30f80b9195a049d34f3f4976c1333c775b") r3 = socket$inet6(0xa, 0x80000, 0x3) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') fchdir(r4) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001f00)='usbip-vudc.0', 0xc) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) 459.676µs ago: executing program 1 (id=186): close(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xb8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}]}, 0xb8}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=187): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x22, 0x0) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c00000000dc6c0ce05e00003178d1ccffffffff00119078000019ab0000000000ed4d200008907840bc997ed47f74445563cafeb94a496dc5fb792c645f16df3cf5e60f54fa41063de5a01bc0e84034a7a0836d4a1d908cfd79b1a7240e31a3a0dc96ca624a19bf7b883624eb1fa98f7064f8cbb4fa373664be45f4f9ac67e2929e302d3b15a6b452db6c87c9bad18dcf3667a00e7810d452815354edd44aef5bf1af59ab2cc7"], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x1ca5, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000340)={0x3, r5, 0xfffffff8, 0x2, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000001880)={0x3, r5, 0xfff, 0x3ff, 0x2, 0x944}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000805"], 0xa) r6 = openat$selinux_status(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) read(r6, 0x0, 0x0) write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:53471' (ED25519) to the list of known hosts. [ 55.031207][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 55.031229][ T42] audit: type=1400 audit(1785628139.346:138): avc: denied { name_bind } for pid=5729 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.075839][ T42] audit: type=1400 audit(1785628139.386:139): avc: denied { execute } for pid=5730 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.084647][ T42] audit: type=1400 audit(1785628139.386:140): avc: denied { execute_no_trans } for pid=5730 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 58.546599][ T42] audit: type=1400 audit(1785628142.856:141): avc: denied { mounton } for pid=5730 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.557970][ T42] audit: type=1400 audit(1785628142.876:142): avc: denied { mount } for pid=5730 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.562934][ T5730] cgroup: Unknown subsys name 'net' [ 58.569973][ T42] audit: type=1400 audit(1785628142.886:143): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.710750][ T5730] cgroup: Unknown subsys name 'cpuset' [ 58.717271][ T5730] cgroup: Unknown subsys name 'rlimit' [ 58.921179][ T42] audit: type=1400 audit(1785628143.236:144): avc: denied { setattr } for pid=5730 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.929885][ T42] audit: type=1400 audit(1785628143.236:145): avc: denied { create } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.936960][ T42] audit: type=1400 audit(1785628143.236:146): avc: denied { write } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.944683][ T42] audit: type=1400 audit(1785628143.236:147): avc: denied { read } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.994361][ T5734] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.927333][ T5730] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.239041][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 65.239062][ T42] audit: type=1400 audit(1785628149.556:158): avc: denied { execmem } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 65.525265][ T42] audit: type=1400 audit(1785628149.836:159): avc: denied { create } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.534245][ T42] audit: type=1400 audit(1785628149.836:160): avc: denied { create } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.542706][ T42] audit: type=1400 audit(1785628149.836:161): avc: denied { read write } for pid=5742 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.550732][ T42] audit: type=1400 audit(1785628149.836:162): avc: denied { open } for pid=5742 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.558635][ T42] audit: type=1400 audit(1785628149.856:163): avc: denied { ioctl } for pid=5742 comm="syz-executor" path="socket:[6055]" dev="sockfs" ino=6055 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.575601][ T5756] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.579993][ T5758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.581046][ T5757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.581808][ T5756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.582413][ T5756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.584226][ T5758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.587941][ T5756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.589533][ T5759] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.591437][ T5757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.591856][ T5757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.594733][ T5757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.595290][ T5756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.596127][ T5759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.599247][ T5757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.603894][ T5756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.606239][ T5757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.607534][ T42] audit: type=1400 audit(1785628149.916:164): avc: denied { read } for pid=5742 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.607580][ T42] audit: type=1400 audit(1785628149.916:165): avc: denied { open } for pid=5742 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.611231][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.614102][ T5758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.619185][ T42] audit: type=1400 audit(1785628149.926:166): avc: denied { mounton } for pid=5742 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 65.621221][ T5757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.624245][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.626521][ T42] audit: type=1400 audit(1785628149.936:167): avc: denied { module_request } for pid=5742 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 66.542140][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.546991][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.550461][ T5743] bridge_slave_0: entered allmulticast mode [ 66.554760][ T5743] bridge_slave_0: entered promiscuous mode [ 66.586063][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.589322][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.592235][ T5745] bridge_slave_0: entered allmulticast mode [ 66.595669][ T5745] bridge_slave_0: entered promiscuous mode [ 66.600149][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.603366][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.606272][ T5745] bridge_slave_1: entered allmulticast mode [ 66.609717][ T5745] bridge_slave_1: entered promiscuous mode [ 66.614295][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.617266][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.619878][ T5743] bridge_slave_1: entered allmulticast mode [ 66.623007][ T5743] bridge_slave_1: entered promiscuous mode [ 66.723417][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.726381][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.729463][ T5744] bridge_slave_0: entered allmulticast mode [ 66.732828][ T5744] bridge_slave_0: entered promiscuous mode [ 66.740025][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.746095][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.750261][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.753140][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.756033][ T5742] bridge_slave_0: entered allmulticast mode [ 66.760441][ T5742] bridge_slave_0: entered promiscuous mode [ 66.765039][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.767724][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.770506][ T5742] bridge_slave_1: entered allmulticast mode [ 66.773689][ T5742] bridge_slave_1: entered promiscuous mode [ 66.778018][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.780668][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.783476][ T5744] bridge_slave_1: entered allmulticast mode [ 66.786697][ T5744] bridge_slave_1: entered promiscuous mode [ 66.802728][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.818945][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.861656][ T5745] team0: Port device team_slave_0 added [ 66.885616][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.891109][ T5745] team0: Port device team_slave_1 added [ 66.895133][ T5743] team0: Port device team_slave_0 added [ 66.899397][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.904697][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.909734][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.923737][ T5743] team0: Port device team_slave_1 added [ 66.982866][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.985719][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.995594][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.023232][ T5742] team0: Port device team_slave_0 added [ 67.027957][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.030787][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.041680][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.048444][ T5744] team0: Port device team_slave_0 added [ 67.051473][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.054054][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.063107][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.071035][ T5742] team0: Port device team_slave_1 added [ 67.082756][ T5744] team0: Port device team_slave_1 added [ 67.085420][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.088217][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.097767][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.134580][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.137287][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.146800][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.153035][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.155618][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.165680][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.211088][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.214030][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.225307][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.231834][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.234777][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.245403][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.295127][ T5745] hsr_slave_0: entered promiscuous mode [ 67.299492][ T5745] hsr_slave_1: entered promiscuous mode [ 67.308499][ T5743] hsr_slave_0: entered promiscuous mode [ 67.311958][ T5743] hsr_slave_1: entered promiscuous mode [ 67.314897][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 67.317714][ T5743] Cannot create hsr debugfs directory [ 67.369637][ T5742] hsr_slave_0: entered promiscuous mode [ 67.372271][ T5742] hsr_slave_1: entered promiscuous mode [ 67.375856][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 67.378230][ T5742] Cannot create hsr debugfs directory [ 67.395363][ T5744] hsr_slave_0: entered promiscuous mode [ 67.398526][ T5744] hsr_slave_1: entered promiscuous mode [ 67.401075][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 67.403032][ T5744] Cannot create hsr debugfs directory [ 67.678819][ T5754] Bluetooth: hci2: command tx timeout [ 67.678896][ T64] Bluetooth: hci3: command tx timeout [ 67.682633][ T5747] Bluetooth: hci1: command tx timeout [ 67.685504][ T64] Bluetooth: hci0: command tx timeout [ 67.846563][ T5745] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.859533][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.863324][ T5745] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.869749][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.879513][ T5745] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.887363][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.891051][ T5745] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.898574][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.957587][ T5743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.963953][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.967612][ T5743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.973900][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.977276][ T5743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.984384][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.988196][ T5743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.993707][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.064898][ T5742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.071581][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.074737][ T5742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.082301][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.090750][ T5742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.096704][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.101147][ T5742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.108542][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.188118][ T5744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.194338][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.198424][ T5744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.203864][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.210441][ T5744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.216221][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.220785][ T5744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.226257][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.286330][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.321336][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.340906][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.366721][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.369734][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.391952][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.401859][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.405172][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.425905][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.429083][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.437261][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.448682][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.451297][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.478064][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.494009][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.502954][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.505735][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.528315][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.531160][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.556382][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.587636][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.590961][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.621914][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.624654][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.924458][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.938887][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.001003][ T5745] veth0_vlan: entered promiscuous mode [ 69.020581][ T5745] veth1_vlan: entered promiscuous mode [ 69.041051][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.044732][ T5743] veth0_vlan: entered promiscuous mode [ 69.067933][ T5743] veth1_vlan: entered promiscuous mode [ 69.097781][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.102327][ T5745] veth0_macvtap: entered promiscuous mode [ 69.114606][ T5745] veth1_macvtap: entered promiscuous mode [ 69.155198][ T5743] veth0_macvtap: entered promiscuous mode [ 69.161221][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.168432][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.181212][ T5742] veth0_vlan: entered promiscuous mode [ 69.215652][ T5743] veth1_macvtap: entered promiscuous mode [ 69.222414][ T5742] veth1_vlan: entered promiscuous mode [ 69.237992][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.250144][ T5744] veth0_vlan: entered promiscuous mode [ 69.260902][ T5744] veth1_vlan: entered promiscuous mode [ 69.297589][ T5799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.308081][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.334310][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.342126][ T5742] veth0_macvtap: entered promiscuous mode [ 69.381292][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.385013][ T5744] veth0_macvtap: entered promiscuous mode [ 69.388318][ T5742] veth1_macvtap: entered promiscuous mode [ 69.388405][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.415178][ T5744] veth1_macvtap: entered promiscuous mode [ 69.458153][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.463074][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.467499][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.479344][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.482521][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.485096][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.501703][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.526932][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.530023][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.536939][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.557326][ T5745] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.673555][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.682515][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.709196][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.716493][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.749163][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.754561][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.758076][ T64] Bluetooth: hci0: command tx timeout [ 69.758100][ T64] Bluetooth: hci1: command tx timeout [ 69.758117][ T64] Bluetooth: hci2: command tx timeout [ 69.758148][ T64] Bluetooth: hci3: command tx timeout [ 69.766947][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.783957][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.797150][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.807487][ T5799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.811647][ T5799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.882834][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.894909][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.938821][ T5799] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.951354][ T5799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.967197][ T5799] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.970985][ T5799] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.972802][ T5904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 69.981852][ T5799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.028441][ T5799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.034236][ T5799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.042749][ T5799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.079242][ T5799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.217591][ T5919] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3108460079 (12433840316 ns) > initial count (4732552468 ns). Using initial count to start timer. [ 70.250896][ T5919] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1462839683 (46810869856 ns) > initial count (35198749888 ns). Using initial count to start timer. [ 70.274227][ T42] kauditd_printk_skb: 57 callbacks suppressed [ 70.274243][ T42] audit: type=1400 audit(1785628154.586:225): avc: denied { allowed } for pid=5925 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.289603][ T42] audit: type=1400 audit(1785628154.596:226): avc: denied { ioctl } for pid=5925 comm="syz.3.9" path="/dev/comedi0" dev="devtmpfs" ino=1301 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.311413][ T5936] comedi comedi4: comedi_config --init_data is deprecated [ 70.340039][ T42] audit: type=1400 audit(1785628154.656:227): avc: denied { perfmon } for pid=5937 comm="syz.1.12" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.363160][ T42] audit: type=1400 audit(1785628154.676:228): avc: denied { prog_run } for pid=5937 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.455068][ T42] audit: type=1400 audit(1785628154.766:229): avc: denied { create } for pid=5944 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.471763][ T42] audit: type=1400 audit(1785628154.786:230): avc: denied { ioctl } for pid=5944 comm="syz.2.13" path="socket:[10347]" dev="sockfs" ino=10347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.533167][ T42] audit: type=1400 audit(1785628154.846:231): avc: denied { write } for pid=5944 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.562162][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15'. [ 70.565251][ T42] audit: type=1400 audit(1785628154.876:232): avc: denied { create } for pid=5958 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.665519][ T42] audit: type=1400 audit(1785628154.976:233): avc: denied { ioctl } for pid=5968 comm="syz.1.20" path="socket:[8977]" dev="sockfs" ino=8977 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.690381][ T42] audit: type=1400 audit(1785628154.996:234): avc: denied { write } for pid=5969 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.741177][ T5899] IPVS: starting estimator thread 0... [ 70.837882][ T5982] IPVS: using max 30 ests per chain, 72000 per kthread [ 70.996207][ T5994] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 71.053000][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 71.150362][ T5913] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 71.291727][ T5996] Zero length message leads to an empty skb [ 71.460992][ T6006] bridge_slave_0: left allmulticast mode [ 71.471309][ T6006] bridge_slave_0: left promiscuous mode [ 71.480170][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.509838][ T6006] bridge_slave_1: left allmulticast mode [ 71.512608][ T6006] bridge_slave_1: left promiscuous mode [ 71.519105][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.594108][ T6011] evm: overlay not supported [ 71.681448][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.684859][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.842131][ T5747] Bluetooth: hci3: command tx timeout [ 71.842199][ T64] Bluetooth: hci2: command tx timeout [ 71.845493][ T5754] Bluetooth: hci1: command tx timeout [ 72.281945][ T6006] bond0: (slave bond_slave_0): Releasing backup interface [ 72.982208][ T6006] bond0: (slave bond_slave_1): Releasing backup interface [ 72.993085][ T6006] team0: Port device team_slave_0 removed [ 72.999784][ T6006] team0: Port device team_slave_1 removed [ 73.002937][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.005925][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.011170][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.014198][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.021090][ T6006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 73.144077][ T6024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.217355][ T6024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.288354][ T6024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.361218][ T6045] overlayfs: missing 'lowerdir' [ 73.406433][ T6047] dlm: no local IP address has been set [ 73.408918][ T6047] dlm: cannot start dlm midcomms -107 [ 73.447331][ T6049] hpfs: hpfs_map_sector(): read error [ 73.553604][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 73.570238][ T848] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 73.596206][ T6060] netlink: 'syz.1.46': attribute type 10 has an invalid length. [ 73.603796][ T6061] team0: Port device veth0 added [ 73.652497][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 73.659690][ T6063] netlink: 'syz.1.47': attribute type 1 has an invalid length. [ 73.676639][ T6063] team0: Port device vlan2 added [ 73.686079][ T6063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6063 comm=syz.1.47 [ 73.728153][ T848] usb 8-1: Using ep0 maxpacket: 8 [ 73.735748][ T848] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 73.739879][ T848] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.745067][ T848] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.751322][ T848] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.755435][ T848] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.761994][ T848] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.766014][ T848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.917934][ T5754] Bluetooth: hci1: command tx timeout [ 73.918201][ T64] Bluetooth: hci2: command tx timeout [ 73.919890][ T5747] Bluetooth: hci3: command tx timeout [ 73.983927][ T848] usb 8-1: usb_control_msg returned -32 [ 73.987285][ T848] usbtmc 8-1:16.0: can't read capabilities [ 74.184385][ T6091] netlink: 'syz.1.56': attribute type 1 has an invalid length. [ 74.245339][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.56'. [ 74.514600][ T6098] XFS (loop2): SB validate failed with error -5. [ 74.692436][ T6108] usbtmc 8-1:16.0: CHECK_CLEAR_STATUS returned 5 [ 74.968638][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 74.981725][ T40] usb 8-1: USB disconnect, device number 2 [ 75.087846][ T6135] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 75.153110][ T64] Bluetooth: hci3: Malformed Event: 0x2f [ 75.201016][ T6143] IPVS: dh: FWM 3 0x00000003 - no destination available [ 75.204690][ T1483] IPVS: starting estimator thread 0... [ 75.213423][ T6142] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 75.221840][ T6141] ima: policy update completed [ 75.228261][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.231555][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.295174][ T42] kauditd_printk_skb: 98 callbacks suppressed [ 75.295192][ T42] audit: type=1400 audit(1785628159.606:333): avc: denied { watch_mount } for pid=6148 comm="syz.2.73" path="/22/file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.327378][ T6145] IPVS: using max 26 ests per chain, 62400 per kthread [ 75.356419][ T42] audit: type=1800 audit(1785628159.666:334): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 75.420181][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.424619][ T42] audit: type=1400 audit(1785628159.736:335): avc: denied { read } for pid=6158 comm="syz.1.77" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.430907][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.451653][ T42] audit: type=1400 audit(1785628159.736:336): avc: denied { open } for pid=6158 comm="syz.1.77" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.468714][ T42] audit: type=1800 audit(1785628159.746:337): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 75.483674][ T42] audit: type=1400 audit(1785628159.756:338): avc: denied { ioctl } for pid=6158 comm="syz.1.77" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.499663][ T42] audit: type=1400 audit(1785628159.786:339): avc: denied { create } for pid=6160 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.507699][ T42] audit: type=1400 audit(1785628159.786:340): avc: denied { write } for pid=6160 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.518038][ T42] audit: type=1400 audit(1785628159.816:341): avc: denied { read } for pid=6160 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.554140][ T42] audit: type=1400 audit(1785628159.866:342): avc: denied { ioctl } for pid=6160 comm="syz.2.78" path="socket:[11461]" dev="sockfs" ino=11461 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.555453][ T6165] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 75.589088][ T6165] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 75.595530][ T6165] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 75.610646][ T6168] tmpfs: Bad value for 'mpol' [ 75.781825][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.947238][ T5824] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.951050][ T5824] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.954433][ T5824] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.961101][ T5824] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.599729][ T6206] sctp: [Deprecated]: syz.2.84 (pid 6206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 76.599729][ T6206] Use struct sctp_sack_info instead [ 76.614428][ T6206] netlink: 'syz.2.84': attribute type 8 has an invalid length. [ 76.626820][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 76.880865][ T6163] Set syz1 is full, maxelem 65536 reached [ 76.893217][ T5754] Bluetooth: hci4: sending frame failed (-49) [ 76.899151][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 76.987321][ T6232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.93'. [ 77.059998][ T6236] process 'syz.2.94' launched '/dev/fd/6' with NULL argv: empty string added [ 77.577640][ T5824] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.586331][ T5824] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.590631][ T5824] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.594530][ T5824] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.874795][ T6305] tmpfs: Unknown parameter 'usrqude_harhsCû×dlimit' [ 77.984389][ T6313] netlink: 36 bytes leftover after parsing attributes in process `syz.3.117'. [ 78.217167][ T1483] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.387339][ T1483] usb 5-1: Using ep0 maxpacket: 8 [ 78.391509][ T1483] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.396456][ T1483] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.400784][ T1483] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.403433][ T1483] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 78.407530][ T1483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.413871][ T1483] usb 5-1: config 0 descriptor?? [ 78.637251][ T1483] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 78.640871][ T1483] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 78.643699][ T1483] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 78.646565][ T1483] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 78.649548][ T1483] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 78.653462][ T1483] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 78.985939][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 79.174037][ T6360] gadgetfs: bound to dummy_udc driver [ 79.352892][ T6375] FAT-fs (nullb0): bogus number of reserved sectors [ 79.356401][ T6375] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 79.497114][ T6386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.134'. [ 79.500096][ T6385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.134'. [ 79.817329][ T55] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 79.905247][ T1483] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 79.934065][ T6408] (syz.3.140,6408,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 79.937590][ T6408] (syz.3.140,6408,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 79.941922][ T6408] (syz.3.140,6408,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 79.945544][ T6408] (syz.3.140,6408,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 79.977660][ T55] usb 6-1: Using ep0 maxpacket: 8 [ 79.982432][ T55] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 79.985668][ T55] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.989976][ T55] usb 6-1: config 0 has no interfaces? [ 79.992217][ T55] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.995345][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.004777][ T55] usb 6-1: config 0 descriptor?? [ 80.369009][ T42] kauditd_printk_skb: 181 callbacks suppressed [ 80.369068][ T42] audit: type=1800 audit(1785628164.686:524): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 80.386832][ T42] audit: type=1400 audit(1785628164.696:525): avc: denied { setopt } for pid=6417 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.411124][ T6393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.419659][ T6393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.420324][ T42] audit: type=1800 audit(1785628164.736:526): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 80.423797][ T6393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.435145][ T6393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.488930][ T42] audit: type=1800 audit(1785628164.806:527): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 80.523871][ T42] audit: type=1800 audit(1785628164.836:528): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 80.543646][ T6424] capability: warning: `syz.3.145' uses deprecated v2 capabilities in a way that may be insecure [ 80.547150][ T42] audit: type=1400 audit(1785628164.856:529): avc: denied { execute } for pid=6423 comm="syz.3.145" name="file1" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.556371][ T42] audit: type=1804 audit(1785628164.856:530): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.145" name="/newroot/33/file1" dev="tmpfs" ino=192 res=1 errno=0 [ 80.576021][ T42] audit: type=1800 audit(1785628164.886:531): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 80.599148][ T6428] validate_nla: 1 callbacks suppressed [ 80.599179][ T6428] netlink: 'syz.3.146': attribute type 21 has an invalid length. [ 80.604726][ T6428] netlink: 156 bytes leftover after parsing attributes in process `syz.3.146'. [ 80.674918][ T42] audit: type=1800 audit(1785628164.986:532): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=115468 res=0 errno=0 [ 80.715590][ T42] audit: type=1400 audit(1785628165.026:533): avc: denied { shutdown } for pid=6427 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.597200][ T6388] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 81.602632][ T848] usb 6-1: USB disconnect, device number 2 [ 81.762772][ T40] usb 5-1: USB disconnect, device number 2 [ 82.369392][ T6441] syzkaller0: entered promiscuous mode [ 82.371754][ T6441] syzkaller0: entered allmulticast mode [ 82.743219][ T6449] ntfs3(sr0): Primary boot signature is not NTFS. [ 82.746460][ T6449] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 83.084310][ T6412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.216311][ T6459] netlink: 156 bytes leftover after parsing attributes in process `syz.1.155'. [ 83.255413][ T6479] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 83.278640][ T6484] can: request_module (can-proto-0) failed. [ 83.587972][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 83.763945][ T6536] netlink: 'syz.1.170': attribute type 1 has an invalid length. [ 83.772433][ T6538] netlink: 'syz.1.170': attribute type 1 has an invalid length. [ 83.856791][ T6549] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 83.863417][ T6538] bond1: option mode: invalid value (7) [ 83.890837][ T6538] bond1 (unregistering): Released all slaves [ 83.920277][ T6536] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 84.190677][ T6579] Cannot find add_set index 65532 as target [ 84.233335][ T6566] syz.0.177 (6566): drop_caches: 2 [ 84.261270][ T6513] syz.3.166 (6513): drop_caches: 2 [ 84.492732][ T6606] ================================================================== [ 84.499219][ T6606] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 84.502150][ T6606] Read of size 192 at addr ffffffff9ba57400 by task syz.2.185/6606 [ 84.506904][ T6606] [ 84.507973][ T6606] CPU: 2 UID: 0 PID: 6606 Comm: syz.2.185 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.508006][ T6606] Tainted: [L]=SOFTLOCKUP [ 84.508019][ T6606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.508048][ T6606] Call Trace: [ 84.508071][ T6606] [ 84.508079][ T6606] dump_stack_lvl+0x100/0x190 [ 84.508194][ T6606] print_report+0x13d/0x4b0 [ 84.508240][ T6606] ? __virt_addr_valid+0x239/0x430 [ 84.508310][ T6606] ? usb_copy_descriptors+0x18d/0x320 [ 84.508336][ T6606] kasan_report+0xdf/0x1c0 [ 84.508384][ T6606] ? usb_copy_descriptors+0x18d/0x320 [ 84.508407][ T6606] kasan_check_range+0x10f/0x1e0 [ 84.508432][ T6606] __asan_memcpy+0x23/0x60 [ 84.508449][ T6606] usb_copy_descriptors+0x18d/0x320 [ 84.508495][ T6606] usb_assign_descriptors+0xd2/0x470 [ 84.508523][ T6606] f_audio_bind+0x243a/0x3950 [ 84.508595][ T6606] ? __pfx_f_audio_bind+0x10/0x10 [ 84.508625][ T6606] usb_add_function+0x219/0x890 [ 84.508653][ T6606] configfs_composite_bind+0xd83/0x1960 [ 84.508682][ T6606] ? kernfs_create_link+0x1bd/0x240 [ 84.508732][ T6606] gadget_bind_driver+0x28c/0xbf0 [ 84.508755][ T6606] ? __pfx_gadget_bind_driver+0x10/0x10 [ 84.508777][ T6606] really_probe+0x241/0xa60 [ 84.508854][ T6606] __driver_probe_device+0x20e/0x450 [ 84.508879][ T6606] driver_probe_device+0x4a/0x140 [ 84.508904][ T6606] __driver_attach+0x21f/0x5b0 [ 84.508931][ T6606] ? __pfx___driver_attach+0x10/0x10 [ 84.508956][ T6606] bus_for_each_dev+0x13e/0x1d0 [ 84.508977][ T6606] ? __pfx_bus_for_each_dev+0x10/0x10 [ 84.509000][ T6606] ? bus_add_driver+0x2b5/0x5b0 [ 84.509031][ T6606] bus_add_driver+0x305/0x5b0 [ 84.509054][ T6606] driver_register+0x1e2/0x360 [ 84.509083][ T6606] usb_gadget_register_driver_owner+0x132/0x210 [ 84.509118][ T6606] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 84.509146][ T6606] configfs_write_iter+0x302/0x4e0 [ 84.509170][ T6606] vfs_write+0x6ac/0x1050 [ 84.509211][ T6606] ? __pfx_configfs_write_iter+0x10/0x10 [ 84.509235][ T6606] ? __pfx_vfs_write+0x10/0x10 [ 84.509273][ T6606] ksys_write+0x12a/0x250 [ 84.509304][ T6606] ? __pfx_ksys_write+0x10/0x10 [ 84.509335][ T6606] do_syscall_64+0x115/0x870 [ 84.509423][ T6606] ? clear_bhb_loop+0x40/0x90 [ 84.509448][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.509470][ T6606] RIP: 0033:0x7f00c399e019 [ 84.509487][ T6606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.509508][ T6606] RSP: 002b:00007f00c1bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.509547][ T6606] RAX: ffffffffffffffda RBX: 00007f00c3c25fa0 RCX: 00007f00c399e019 [ 84.509561][ T6606] RDX: 000000000000000c RSI: 0000200000001f00 RDI: 0000000000000007 [ 84.509574][ T6606] RBP: 00007f00c3a3500c R08: 0000000000000000 R09: 0000000000000000 [ 84.509587][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.509600][ T6606] R13: 00007f00c3c26038 R14: 00007f00c3c25fa0 R15: 00007ffe7ccbd058 [ 84.509619][ T6606] [ 84.509626][ T6606] [ 84.619941][ T6606] The buggy address belongs to the variable: [ 84.621971][ T6606] ac_header_desc+0x0/0x40 [ 84.623520][ T6606] [ 84.624329][ T6606] The buggy address belongs to the physical page: [ 84.626544][ T6606] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ba57 [ 84.629406][ T6606] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 84.631886][ T6606] raw: 00fff00000002000 ffffea00006e95c8 ffffea00006e95c8 0000000000000000 [ 84.634620][ T6606] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 84.637342][ T6606] page dumped because: kasan: bad access detected [ 84.639389][ T6606] page_owner info is not present (never set?) [ 84.641288][ T6606] [ 84.642068][ T6606] Memory state around the buggy address: [ 84.643843][ T6606] ffffffff9ba57300: 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 [ 84.646366][ T6606] ffffffff9ba57380: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 84.648999][ T6606] >ffffffff9ba57400: 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 84.651990][ T6606] ^ [ 84.653466][ T6606] ffffffff9ba57480: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 84.656211][ T6606] ffffffff9ba57500: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 84.658906][ T6606] ================================================================== [ 84.676628][ T6606] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.679447][ T6606] CPU: 2 UID: 0 PID: 6606 Comm: syz.2.185 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.683214][ T6606] Tainted: [L]=SOFTLOCKUP [ 84.684728][ T6606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.688159][ T6606] Call Trace: [ 84.689288][ T6606] [ 84.690244][ T6606] dump_stack_lvl+0x100/0x190 [ 84.691730][ T6606] vpanic+0x552/0x970 [ 84.692911][ T6606] ? __pfx_vpanic+0x10/0x10 [ 84.694303][ T6606] ? mark_held_locks+0x40/0x70 [ 84.696058][ T6606] ? usb_copy_descriptors+0x18d/0x320 [ 84.697806][ T6606] panic+0xd1/0xe0 [ 84.699003][ T6606] ? __pfx_panic+0x10/0x10 [ 84.700426][ T6606] ? usb_copy_descriptors+0x18d/0x320 [ 84.702282][ T6606] ? preempt_schedule_common+0x42/0xc0 [ 84.704444][ T6606] check_panic_on_warn.cold+0x19/0x34 [ 84.706421][ T6606] end_report.part.0+0x3a/0x90 [ 84.708389][ T6606] kasan_report.cold+0xe/0x18 [ 84.710386][ T6606] ? usb_copy_descriptors+0x18d/0x320 [ 84.712507][ T6606] kasan_check_range+0x10f/0x1e0 [ 84.714669][ T6606] __asan_memcpy+0x23/0x60 [ 84.716434][ T6606] usb_copy_descriptors+0x18d/0x320 [ 84.718378][ T6606] usb_assign_descriptors+0xd2/0x470 [ 84.720537][ T6606] f_audio_bind+0x243a/0x3950 [ 84.722508][ T6606] ? __pfx_f_audio_bind+0x10/0x10 [ 84.724584][ T6606] usb_add_function+0x219/0x890 [ 84.726661][ T6606] configfs_composite_bind+0xd83/0x1960 [ 84.728983][ T6606] ? kernfs_create_link+0x1bd/0x240 [ 84.731150][ T6606] gadget_bind_driver+0x28c/0xbf0 [ 84.733241][ T6606] ? __pfx_gadget_bind_driver+0x10/0x10 [ 84.735542][ T6606] really_probe+0x241/0xa60 [ 84.737448][ T6606] __driver_probe_device+0x20e/0x450 [ 84.739467][ T6606] driver_probe_device+0x4a/0x140 [ 84.741298][ T6606] __driver_attach+0x21f/0x5b0 [ 84.743008][ T6606] ? __pfx___driver_attach+0x10/0x10 [ 84.744890][ T6606] bus_for_each_dev+0x13e/0x1d0 [ 84.746836][ T6606] ? __pfx_bus_for_each_dev+0x10/0x10 [ 84.748790][ T6606] ? bus_add_driver+0x2b5/0x5b0 [ 84.750831][ T6606] bus_add_driver+0x305/0x5b0 [ 84.752840][ T6606] driver_register+0x1e2/0x360 [ 84.754814][ T6606] usb_gadget_register_driver_owner+0x132/0x210 [ 84.756816][ T6606] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 84.758622][ T6606] configfs_write_iter+0x302/0x4e0 [ 84.760374][ T6606] vfs_write+0x6ac/0x1050 [ 84.761760][ T6606] ? __pfx_configfs_write_iter+0x10/0x10 [ 84.763516][ T6606] ? __pfx_vfs_write+0x10/0x10 [ 84.765031][ T6606] ksys_write+0x12a/0x250 [ 84.766427][ T6606] ? __pfx_ksys_write+0x10/0x10 [ 84.767970][ T6606] do_syscall_64+0x115/0x870 [ 84.769468][ T6606] ? clear_bhb_loop+0x40/0x90 [ 84.770960][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.772807][ T6606] RIP: 0033:0x7f00c399e019 [ 84.774232][ T6606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.780245][ T6606] RSP: 002b:00007f00c1bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.782838][ T6606] RAX: ffffffffffffffda RBX: 00007f00c3c25fa0 RCX: 00007f00c399e019 [ 84.785288][ T6606] RDX: 000000000000000c RSI: 0000200000001f00 RDI: 0000000000000007 [ 84.788158][ T6606] RBP: 00007f00c3a3500c R08: 0000000000000000 R09: 0000000000000000 [ 84.790749][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.793201][ T6606] R13: 00007f00c3c26038 R14: 00007f00c3c25fa0 R15: 00007ffe7ccbd058 [ 84.795717][ T6606] [ 84.797362][ T6606] Kernel Offset: disabled [ 84.798757][ T6606] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:49:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff91c9a201 RDX=0000000000000000 RSI=ffffffff8e29e5e6 RDI=ffffffff8c402680 RBP=ffffffff81b866be RSP=ffffc9000ceaf510 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000f472 R12=ffff88802e082540 R13=ffffc9000ceaf5f8 R14=0000000000000202 R15=ffffc9000ceaf62c RIP=ffffffff8bbbca7c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6adde1ae9c CR3=000000003d71e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=00007f537c198300 RCX=00007f537baa7407 RDX=00007fff78485100 RSI=0000000000000007 RDI=000055c44468bce0 RBP=00007fff78485170 RSP=00007fff784850c0 R8 =0000000000000008 R9 =0000000000000000 R10=00007fff78485200 R11=0000000000000202 R12=0000000000000001 R13=00007fff78485200 R14=0000000000000054 R15=0000000000000004 RIP=00007f537baa7407 RFL=00010202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f537c198300 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055cb183f3000 CR3=000000002e83a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffa7081080 0308100004800401 000004080606015e ca0280080004e003 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030302f73656369 7665642f6963702f 7375622f73797379 6d2f2e01ffffffff ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002080010800401 c70800080646ee00 656c62616e652f30 2e32303a30303a30 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8640800800738003 0210001480040100 0006080606017b90 3102081480030004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000017380043380 040008000c080001 00000608060a010d 8640800800738003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0210001480040100 0006080606017b90 3102081480030004 0002080010800401 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c70800080646ee00 656c62616e652f30 2e32303a30303a30 3030302f73656369 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7665642f6963702f 7375622f73797379 6d2f2e01ffffffff ffffffffa7081080 ZMM25=4d98eae64d98eae6 4d98eae64d98eae6 4d98eae64d98eae6 4d98eae64d98eae6 4d98eae64d98eae6 4d98eae64d98eae6 4d98eae64d98eae6 4d98eae64d98eae6 ZMM26=c587c630c587c630 c587c630c587c630 c587c630c587c630 c587c630c587c630 c587c630c587c630 c587c630c587c630 c587c630c587c630 c587c630c587c630 ZMM27=5ecbcd5f5ecbcd5f 5ecbcd5f5ecbcd5f 5ecbcd5f5ecbcd5f 5ecbcd5f5ecbcd5f 5ecbcd5f5ecbcd5f 5ecbcd5f5ecbcd5f 5ecbcd5f5ecbcd5f 5ecbcd5f5ecbcd5f ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1d0200001d020000 1d0200001d020000 1d0200001d020000 1d0200001d020000 1d0200001d020000 1d0200001d020000 1d0200001d020000 1d0200001d020000 info registers vcpu 2 CPU#2 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a39335 RDI=ffffffff9ba0bb40 RBP=ffffffff9ba0bb00 RSP=ffffc9000685f1b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6666666666666620 R12=0000000000000000 R13=0000000000000074 R14=ffffffff9b6fe224 R15=ffffffff85a392d0 RIP=ffffffff85a3935f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f00c1bf66c0 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c40ed7c CR3=0000000026551000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7ccbd546 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7ccbd546 00007ffe7ccbd54c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c3a355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c3a3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c3a35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c3a35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c3bf25f8 00007f00c3bf25c8 00007f00c3bf2600 00007f00c3bf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000010 RBX=0000000000000001 RCX=ffffc90006fe2000 RDX=0000000000000000 RSI=ffffffff819d26db RDI=ffffffff8bc5fb34 RBP=0000000000000000 RSP=ffffc900066af4f0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff888059c98000 R13=0000000000006808 R14=ffff88805a52e8a8 R15=ffff88805a52eb80 RIP=ffffffff819d272b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f4fd81c16c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d60d8000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000059f6a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 317a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdcc8a5f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdcc8a5f6 00007fffdcc8a5fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4fd74355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4fd743562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4fd7435793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4fd7435621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000