last executing test programs: 1.301678339s ago: executing program 1 (id=2): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x8001, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x3) mkdir(&(0x7f0000000080)='./file0\x00', 0x1) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x100, 0x2}, 0x18) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz0\x00', {0x7, 0xc000, 0x2, 0x4}, 0x4, [0x9, 0x5, 0x6, 0x8, 0x0, 0xfffffff7, 0x7f, 0x4, 0x3, 0xd07, 0x371e, 0x6, 0x80, 0x100, 0x7, 0x3, 0x5, 0x2, 0x5, 0x10, 0x7, 0x7fffffff, 0x7, 0x2, 0x2, 0x6b, 0x8000, 0x7f, 0x7, 0x4, 0x1, 0xa, 0x8, 0xf3c, 0x5, 0x3, 0x5, 0x1, 0x8, 0x0, 0x0, 0xdcc, 0x0, 0x6, 0x4, 0x7, 0x5, 0x1, 0xdffb, 0x4, 0x3, 0xe, 0xdfc1, 0x9, 0x83, 0xfffff0ef, 0x7fffffff, 0x7ff, 0x1ff, 0xa, 0x1, 0x1, 0x91, 0x100], [0x0, 0x100, 0x7, 0xffffffff, 0x3, 0x1, 0xff, 0x0, 0xfffffffe, 0x3ff, 0x5, 0x0, 0x8, 0xc06, 0x9, 0x4, 0x9, 0x8, 0x100, 0x7, 0x3, 0x9, 0x4, 0x36, 0x1, 0x703, 0x765, 0x4, 0x101, 0x3, 0x1, 0x88, 0x4, 0x7495, 0x4, 0x7fff, 0x81, 0xf, 0x4, 0x8, 0xa, 0xe, 0x3, 0x4, 0x1, 0xfffffffd, 0xe, 0x1, 0x401, 0x6, 0x6, 0xfffffffd, 0x1, 0x2, 0x62dd, 0x1, 0x10001, 0x889, 0x4, 0x6, 0x9, 0x1, 0x8], [0x9, 0x80000000, 0xe, 0x4, 0x1, 0x4, 0x3, 0x8, 0x5, 0x10, 0x3, 0x5, 0xfffffffb, 0x3429, 0xfffffe00, 0x1, 0xffffffff, 0x5607, 0x3, 0xfffffffb, 0x4, 0x400, 0x1, 0x718, 0xff, 0x401, 0x2, 0x1, 0x4, 0xe, 0x7, 0xd518, 0x3, 0x1f6a, 0x400, 0x8, 0x95, 0x6, 0x101, 0xfffffff7, 0x1, 0x8000000, 0x7, 0x2, 0x7fff, 0x7fffffff, 0x4, 0x74, 0x7, 0x5, 0x0, 0xffff, 0x0, 0x4, 0x8001, 0x9, 0x9, 0x7, 0x2, 0x6, 0x9, 0x7ff, 0x200, 0x4800], [0x6, 0xfffff174, 0x6, 0xec, 0x5, 0x7, 0x8, 0x7fffffff, 0x0, 0x3, 0x8, 0x7, 0x6, 0x8879, 0xfffffffd, 0x18, 0x77, 0x1ff, 0x4, 0x7fff, 0xc58, 0x0, 0x3, 0x7, 0x9, 0x1, 0x5, 0x4, 0x8, 0x83, 0x5, 0x8001, 0x4, 0xd, 0x9, 0x745, 0x7, 0x0, 0x2, 0x1081, 0x18000000, 0x6, 0x5baf, 0x3, 0x7ff, 0x1ff, 0x3ff, 0xa1cde088, 0xfffff800, 0x9, 0x5, 0x8, 0x5, 0x8, 0x1, 0x43d, 0x88, 0x4, 0x7e, 0x25d8, 0x4, 0xb, 0x0, 0x6]}, 0x45c) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000640), 0x90040, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000780)={{{0x7}}, 0xe2, 0x8e2, &(0x7f0000000680)="6c9bbcf7e1716de6a69248e15723ea13111451bcc028e0959e98d9b1481388252633e8cca95b4f522ddbdafedc7e96d6ad2ba5d7cb28f91ffbe818769eb54cef056b9163cc9c55ebca21b8636606500269e135ea1fa9537b35bfe0a2613a5f1f149e7c7bc6a25a649c814f41e2e20b13e66bca825a3b32d0bb5391465a671b50eb2cee67bc5ca70277d53df80fcde547870650e24bd8c4a25bd0f1bee11027b64b62b21b03cdbf54d8835439ba617ed613ab00112558de799d4233cadc87f8f47932ff0f5057df15ab78e4629d85f090c82f0fdde8e84c049e6dbdd76c1bead9b2c1"}) symlink(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00') write(r3, &(0x7f0000000840)="4f8e2040ce316976ba02db54162a66fde68135fad95f6a766ae5c4b35c88625a4efca8a2dd9cd0761825f7992aa0590eb7298344d55383659cd8eb43509a72deee32e96be371dfa6cbfbdc626a35ab3dc5297e525ebcb5b0740d67dab7f9dfa0a80953faca636f7801c9b3850a1a873df225870381daf16375a60366629ec2791fca78a22eac5cf775fc3e68186b3c6b37c103688a91705a8b2834933d276240cc9d0008c18897629f38cebf9cd9f8a1829c03de98c7d0", 0xb7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x48004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r7, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'udp\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5e5ec50d4968855c}, 0x4) r8 = socket$l2tp(0x2, 0x2, 0x73) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2080, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000c00)={0x6, 0x5}) r10 = open$dir(&(0x7f0000000c40)='./file0\x00', 0x200, 0x81) r11 = open_tree(r10, &(0x7f0000000c80)='./file0\x00', 0x8100) ioctl$KVM_CLEAR_DIRTY_LOG(r11, 0xc018aec0, &(0x7f00000010c0)={0x2710, 0x400, 0x340, &(0x7f0000000cc0)=[0xf, 0xffffffffffffffff, 0x0, 0xa1dc, 0x3, 0x7, 0x2, 0x3, 0x100000001, 0x800, 0x8, 0x7, 0x1, 0x5, 0x2, 0x2, 0x3, 0x6, 0x8, 0x0, 0x3, 0x5, 0x5, 0x68, 0xf0f, 0x8, 0x4, 0xfffffffffffffff9, 0x9, 0x1, 0xcfa, 0x81, 0x4, 0x7, 0x0, 0x5, 0x4, 0x3, 0x200, 0x7, 0x7f, 0x4, 0x0, 0x6, 0x4f90b0ac, 0x3, 0x5e8, 0x5, 0x400000000, 0x7, 0x5, 0x8000000000000000, 0x8, 0x7, 0x8000, 0xe, 0x1ff, 0x8e, 0x7cf, 0x9, 0xf3e8, 0x2, 0x8, 0x26, 0x1, 0x8, 0x1, 0x6, 0x55b, 0x0, 0x4, 0x2, 0x8, 0x4, 0x100, 0x5, 0x0, 0x4, 0x4, 0x1, 0xd, 0x2, 0x1b0, 0x9, 0x54, 0x4, 0x7f, 0x0, 0x100000001, 0x5, 0x10000, 0x2, 0x7fffffff, 0x1, 0x8, 0x7f, 0xf6, 0x7, 0x7, 0x4, 0x9, 0xe0c20000, 0x8, 0x2, 0x80000001, 0x47, 0x2, 0x8000, 0x0, 0x4, 0x0, 0xa, 0x2, 0x9, 0x100000001, 0xfffffffffffffffb, 0x2, 0x400, 0x8, 0x5, 0x10001, 0x1000000000, 0xb, 0x1, 0xffffffffffff8000, 0x7d, 0x5]}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000001100)=0x40000000) mount$pvfs2(&(0x7f0000001140), &(0x7f0000001180)='./file1\x00', &(0x7f00000011c0), 0x818006, &(0x7f0000001200)={[{'/dev/bus/usb/00#/00#\x00'}, {'/dev/full\x00'}], [{@smackfshat={'smackfshat', 0x3d, 'TIPC\x00'}}, {@appraise}, {@flag='ro'}, {@permit_directio}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) ioctl$IOCTL_VMCI_VERSION(r11, 0x79f, &(0x7f0000001280)=0xf948f620dc63c43c) mount$cgroup(0x0, &(0x7f00000012c0)='./file2\x00', &(0x7f0000001300), 0x1000000, &(0x7f0000001340)={[{@none}], [{@smackfshat={'smackfshat', 0x3d, 'pvfs2\x00'}}]}) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000001500)={0xc, 0x8, 0xfa00, {&(0x7f0000001380)}}, 0x10) mkdir(&(0x7f0000001540)='./file0\x00', 0xa) 1.199021734s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1f0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x58}}, 0x44004) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)=ANY=[@ANYBLOB='F\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00b2007365636f6e646e616d650000"], 0x44}}, 0x0) 1.172341859s ago: executing program 2 (id=3): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000400)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) (async) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x8, 0x143400) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000002c0)={0x1, 0x8000, 0x0, 0x0, 0x1, 0x5}) (async, rerun: 32) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x42, 0x0, &(0x7f00000000c0)) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = fcntl$dupfd(r0, 0x406, r3) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000004c0)) (async, rerun: 32) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (rerun: 32) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) (async) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x8000) preadv(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x68, 0x0) accept$nfc_llcp(r4, &(0x7f0000000540), &(0x7f0000000300)=0x47) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) 1.089260599s ago: executing program 1 (id=6): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES64=r1, @ANYBLOB="0300000000001800280012800a00010310786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x404c845) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES64=r1, @ANYBLOB="0300000000001800280012800a00010310786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x404c845) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 1.088650337s ago: executing program 1 (id=7): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='1', 0x1) r5 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x4b) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) syz_pidfd_open(r8, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) 1.087734782s ago: executing program 3 (id=8): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r3, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r3, 0x5) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000a00001c"], 0x4a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000001c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r5, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async) socket$inet(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) bind(r3, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) (async) listen(r3, 0x5) (async) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000a00001c"], 0x4a) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000001c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmmsg$unix(r5, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40, 0x0) (async) 927.693093ms ago: executing program 1 (id=9): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000180)={0x0, 0xb53a, 0xc000, 0xb, 0x2bb}) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) setuid(0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r0, 0x12a, 0x14, 0x17, 0x0, 0x0) 925.241501ms ago: executing program 2 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="16000000d4820000000804000000200001800d0001007564703a73797a3293041dd86c5fd43243cfdce70a6fff96d83f08c3dca71d0ee725799d00c99f4429fc9bc183addaf51e9eb8d7a16da8a3959206aa0b5ee0ea337039453235a2c137defe5e7640ad28a82ebf84f32d53a4fc5daffe984f5d474d65530755c1e7ec4ca229b2d9118952264ab429380aefa3bbd64cdef99ac4d35d7c868901f53364cca12dfbdec846b6cf980a60441b71cbdd31f334d76249b006618faa2015f2514ea6d58051665db0ab4121a5fadf"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004040) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="16000000d4820000000804000000200001800d0001007564703a73797a3293041dd86c5fd43243cfdce70a6fff96d83f08c3dca71d0ee725799d00c99f4429fc9bc183addaf51e9eb8d7a16da8a3959206aa0b5ee0ea337039453235a2c137defe5e7640ad28a82ebf84f32d53a4fc5daffe984f5d474d65530755c1e7ec4ca229b2d9118952264ab429380aefa3bbd64cdef99ac4d35d7c868901f53364cca12dfbdec846b6cf980a60441b71cbdd31f334d76249b006618faa2015f2514ea6d58051665db0ab4121a5fadf"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2000800}, 0x4) 848.606416ms ago: executing program 2 (id=11): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x3}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ef) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r5, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/msi_bus\x00', 0x1, 0x0) write$tun(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="3019c2f718e900000000aaaaaaaaaaaa86dd694fd2cd00103afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000400020400000254000000e085e96ea917ba57021d81b70aab0c63e10bf1c223b62fd4ce365b5d61df7cacd318d27839e43a10972714f744bb80021981685ad2856cea5bb2e27ecc8cd266c9dd029a63cdacf24faa63aa84d679ec3fc4c253febc1f209f819158e0288c20fb344450c4499454d88e90f5c827986d453dd675d567de47ca0d1982ebc5405a8c49f4e0042cde32fef8324cbcdc385d000000000000100000000000000000dfffffff000000000000"], 0x4a) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000080)) 822.268664ms ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8884}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x10000, 0x6, 0x7, 0x7}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x46f83}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x40000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x2a, 0x8, 0x4, 0x7, 0x7, 0xc0, 0x1, 0x3, 0x5, 0xdf, [0x80, 0x0, 0x32, 0x7, 0x0, 0xa0, 0x10, 0x5]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xcc) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0xc02063a1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@xino_off}, {@redirect_dir_nofollow}]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0x3d29, 0x2}, {0x6, 0x5}, 0xab4, [0x0, 0x7b, 0x3, 0x4000000005, 0x42, 0x66, 0x1000, 0x5f, 0x4, 0x8, 0x11, 0x80000000011, 0x0, 0xffdffffffffffff7, 0x8, 0xe3]}) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000180)) r4 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f00000016c0)={0x15, &(0x7f0000001600)=[{0x5, '\x00', @st={0x4, [{0x2, @uvalue=0x9}, {0x3, @uvalue=0x2}, {0x3, @uvalue=0xfffffffffffffffc}, {0x2, @uvalue=0x9}]}, 0x3}]}) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r5) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r6, 0x2}, 0x0, &(0x7f0000000b80)="cb44", 0x0) recvfrom$rxrpc(r2, &(0x7f0000000200)=""/26, 0x1a, 0x10120, 0x0, 0x0) 769.477749ms ago: executing program 2 (id=14): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x1, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x9, 0xc) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x10000807, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) 260.260307ms ago: executing program 0 (id=17): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r0, 0x36) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r4, 0x110, 0x5, 0x0, 0x4) (async) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) readv(r5, &(0x7f0000002b80)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1) (async) readv(r5, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1) 259.826224ms ago: executing program 0 (id=18): r0 = shmget(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/46) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x3c, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@typed={0xf, 0xe3, 0x0, 0x0, @str='virt_wifi0\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 258.884953ms ago: executing program 0 (id=19): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f00000000c0)=0x2, 0x4) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @private=0xa010102}, 0xc) (async) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @private=0xa010102}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 160.17738ms ago: executing program 0 (id=20): r0 = socket$inet(0x2, 0x4000000000000001, 0x8) getsockopt$inet_mreqn(r0, 0x0, 0x7, 0x0, &(0x7f0000000180)) (async) r1 = socket$rds(0x15, 0x5, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async, rerun: 64) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, 0x0, 0x0) (async) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='rt1719 0', 0x8) (async) close(r3) (async) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000900)='rt1711h', 0x7) (async) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x4000, 0x18f) write(r5, &(0x7f0000000b00)='hd3ss3220 0x67', 0xe) (async) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) (async) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 32) select(0x40, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x5, 0x17, 0x6, 0x5, 0x8, 0x4}, &(0x7f00000001c0)={0x3, 0x6, 0x8004, 0x1ff, 0x2, 0x5, 0xffffffff}, &(0x7f0000000240)={0x6, 0xd, 0xc7, 0x3, 0x0, 0x0, 0x7a, 0x4}, &(0x7f0000000280)={0x0, 0x2710}) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close_range(r9, 0xffffffffffffffff, 0x2) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 156.655105ms ago: executing program 3 (id=21): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x21, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(0xc9, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x48040) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10f) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000100), 0x12) listen(r6, 0x1) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r7 = accept(r6, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x180}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x20000000, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 79.023942ms ago: executing program 0 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000500)=@userptr={0x5, 0xa, 0x4, 0x1, 0x6, {}, {0x4, 0xc, 0x10, 0x5, 0x77, 0x6, "0080ca6f"}, 0x8c6a, 0x2, {&(0x7f00000002c0)}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000050000009500000000000000fed023000000c71adb30be7d75fa1f32f08a23ce3220b0cc9505d72768b8242dd90d17e4c52505756ca2b009546a0900000000000000d3df2bd87184446d165ae3939bbca322a415a98c8801000000000000800859362ed862b3c47fa8ce7c69adfd2f16af3a00000000000000000000009a317aa34f0c50f99eedac26048ab915e1be5aa845be00de14683ee4e859d65564a9c79d20e5a011e966388cd0bb39f45d6c508b8a0f7f2d48be0e2a8137c6741775428abf2ddfd2a473f5b271701e22f8cb42198906e1107fa780c435083cac323838727a606495803509f84729f3e8a2fbfb995f99b82df3b363a9cf6ba87fdfbf5a3dd0dde49b4193520e5e946687634c04000000000000bfbcd911eba0dee5e5ce6434f86fe82ee02f0e8e3173a97d85e232e584ace13387693614f3a7ef88709f4d552c7b3a7903e14dc418e58f3e98933b2c93fae25ec2dd190231e2531e1ffeff33676a4383a918cba3ad8318ea29f164563a42cdb596f255a251add2d2ae2fac0a0e7428e4bf07fc884be5721bdffe58c6a4b57014ce976ce8b9cddfa50175c53253d7659f0e88913d4fa7f37feb40337fada4363c0698510730725e23bdad60ceaeecfeeccc397565f204b82d6d4458d77a1b4abeadf350c21027d314237a9d448b82827ff3f29cc9b46c8fcfbb30d1fc18707c252b596cdbf4e77836adc1f59f9d1280333d135fdcdcee8eb817388666e02ff1b148b6bc3c283e71c0ad9c683c6bb6fea2d2d54af3ad488f0cc2e54a70c19ceac518adbe917652c34019d7478c716ab23d4a863b4dcd08d89f6cec674e9fd379d71e06357d207984e885ace8a0dbaffef403aff01d5f2f0e644b61cd8bd72a59f2d7cf67815aeb8761412d68c40dbed08b7eeda96b3856a519a71b83c19b2e8f88d92b66abec165663819a87e7cd8c082cb011051789c283eecfe08f0799f6c7023353b6d3af7177d6b56549616bfede82c598301c98b0420b1784b53238b39c0db1da864e593d45fd297e4d34e749bc737e0bcf36fd955a40124c00d40c3f21d26e6e276152412b4ef3f52dc416bb2d7463a93ee6c0b20c5749a44677a3c3a7aa9a47c7cd7bb52fbb2c8d63166f4ad1038f33258736b2224a66726f1fd4dce0eb6043a55fbdd341baba95cc5838a860068e0f3e73d992403455b03b25bd5414628d7325a6b25986666b336851d9c623c405bf608d4bd9347c83cb693aebab072be479705b0c6c9bb9728d131f8320b966898de1a16407692b57b6f7333eac0d2ed0a7a4457d9c70089fcf9aa553929a65777f3bbf6d0bdc6a11371a138c6d4b0fefc655716e4486f5c7a88e80b2fb0efb579333bef98ded75abfb982b1fb92f003a6aefb8bf25eacb848d8ed1c1162d000000000000000000000000e87dffd60f123527781805434d210bb72ac2c097c45b27dde4980bc85b43614d266a9d403c320f80646c7df8bdd1cf380000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x60, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x100000000}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @log={{0x8}, @void}}, @NFTA_SET_TIMEOUT={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c0000110001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c3258e6248ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}}, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x3, 0x3}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x440001, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000000105050000000000000000020000053c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000108000740000000001800068014000400fe800000000008000000000000000031"], 0xac}}, 0x0) 78.486896ms ago: executing program 1 (id=23): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="8580f8c45be1aaaaaaaaaa1c08004515001c00670000000290780a010102e0008190"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974d", 0x21}], 0x1}, 0x6) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0xc0000484) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r9, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x10, 0x8000, 0x4, 0x81, {{0x2b, 0x4, 0x0, 0x25, 0xac, 0x67, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x15, 0x1, [{0x7, 0xf, "6c8da76bc0a00290cd8808806e"}]}, @cipso={0x86, 0x8, 0x3, [{0x7, 0x2}]}, @rr={0x7, 0xf, 0x74, [@local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x28}]}, @generic={0x70740c475b38eae7, 0x7, "e06e3b2f58"}, @generic={0x82, 0xf, "793cb0fee86f88d8939617ffd0"}, @generic={0x187, 0x3, "ed"}, @cipso={0x86, 0x51, 0x3, [{0x1, 0xe, "4e3eccfc73f982d0e157f28f"}, {0x2, 0x11, "88cd4bb3c1f7f6bae1e253833e457e"}, {0x7, 0x3, '3'}, {0x7, 0x10, "9145e26175af12bac149e08dace9"}, {0x7, 0xc, "d15d139b651894d075e1"}, {0x6, 0x8, "e3007e077b8f"}, {0x2, 0x5, "aa2646"}]}, @noop]}}}}}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r11, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, r12, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64=r10], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x40f00, 0x0, '\x00', r10, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 0 (id=24): fsopen(&(0x7f0000000040)='devpts\x00', 0x0) (async) r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) getsockopt(r3, 0x8, 0x0, &(0x7f0000000080)=""/46, &(0x7f00000000c0)=0x2e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001"], 0xfdef) (async) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001"], 0xfdef) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000500)=0xffff0080) (async) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000500)=0xffff0080) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:20562' (ED25519) to the list of known hosts. [ 47.787233][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 47.787252][ T42] audit: type=1400 audit(1787050798.280:141): avc: denied { mounton } for pid=5711 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.801331][ T42] audit: type=1400 audit(1787050798.300:142): avc: denied { mount } for pid=5711 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.805299][ T5711] cgroup: Unknown subsys name 'net' [ 47.815005][ T42] audit: type=1400 audit(1787050798.310:143): avc: denied { unmount } for pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.014663][ T5711] cgroup: Unknown subsys name 'cpuset' [ 48.019149][ T5711] cgroup: Unknown subsys name 'rlimit' [ 48.205389][ T42] audit: type=1400 audit(1787050798.700:144): avc: denied { setattr } for pid=5711 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.213408][ T42] audit: type=1400 audit(1787050798.710:145): avc: denied { create } for pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.220042][ T42] audit: type=1400 audit(1787050798.710:146): avc: denied { write } for pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.226611][ T42] audit: type=1400 audit(1787050798.710:147): avc: denied { read } for pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.243309][ T42] audit: type=1400 audit(1787050798.740:148): avc: denied { read } for pid=5439 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.250042][ T42] audit: type=1400 audit(1787050798.750:149): avc: denied { read } for pid=5439 comm="dhcpcd" name="n31" dev="tmpfs" ino=1888 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.256737][ T42] audit: type=1400 audit(1787050798.750:150): avc: denied { open } for pid=5439 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1888 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.261078][ T5716] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.031454][ T5711] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.107878][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 53.107897][ T42] audit: type=1400 audit(1787050803.600:156): avc: denied { execmem } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.420825][ T42] audit: type=1400 audit(1787050803.920:157): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.429150][ T42] audit: type=1400 audit(1787050803.920:158): avc: denied { read write } for pid=5724 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.451552][ T5726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.453234][ T5730] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.456699][ T42] audit: type=1400 audit(1787050803.920:159): avc: denied { open } for pid=5724 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.457415][ T5730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.465003][ T42] audit: type=1400 audit(1787050803.940:160): avc: denied { ioctl } for pid=5725 comm="syz-executor" path="socket:[2712]" dev="sockfs" ino=2712 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.467825][ T5730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.474515][ T5738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.477321][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.480945][ T5730] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.485547][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.485949][ T5739] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.486941][ T5730] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.487772][ T5741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.488635][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.489549][ T5741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.489823][ T5741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.492728][ T5731] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.493425][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.495329][ T42] audit: type=1400 audit(1787050803.990:161): avc: denied { read } for pid=5735 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.499058][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.499912][ T42] audit: type=1400 audit(1787050803.990:162): avc: denied { open } for pid=5735 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.509327][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.509718][ T42] audit: type=1400 audit(1787050803.990:163): avc: denied { mounton } for pid=5735 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.519353][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.528556][ T42] audit: type=1400 audit(1787050804.000:164): avc: denied { module_request } for pid=5735 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.532210][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.543928][ T42] audit: type=1400 audit(1787050804.040:165): avc: denied { sys_module } for pid=5735 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.086541][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.089041][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.091201][ T5735] bridge_slave_0: entered allmulticast mode [ 54.093787][ T5735] bridge_slave_0: entered promiscuous mode [ 54.101596][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.103736][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.105815][ T5724] bridge_slave_0: entered allmulticast mode [ 54.108360][ T5724] bridge_slave_0: entered promiscuous mode [ 54.111919][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.115218][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.117613][ T5724] bridge_slave_1: entered allmulticast mode [ 54.120745][ T5724] bridge_slave_1: entered promiscuous mode [ 54.128294][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.130760][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.133084][ T5735] bridge_slave_1: entered allmulticast mode [ 54.136507][ T5735] bridge_slave_1: entered promiscuous mode [ 54.167691][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.187329][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.212074][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.231469][ T5724] team0: Port device team_slave_0 added [ 54.234792][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.254377][ T5724] team0: Port device team_slave_1 added [ 54.308602][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.310858][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.318943][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.325060][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.327325][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.335628][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.341078][ T5735] team0: Port device team_slave_0 added [ 54.347679][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.350238][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.352565][ T5725] bridge_slave_0: entered allmulticast mode [ 54.355324][ T5725] bridge_slave_0: entered promiscuous mode [ 54.359906][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.362287][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.364553][ T5725] bridge_slave_1: entered allmulticast mode [ 54.367195][ T5725] bridge_slave_1: entered promiscuous mode [ 54.376040][ T5735] team0: Port device team_slave_1 added [ 54.419268][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.424565][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.435663][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.437946][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.446011][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.459667][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.461994][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.470169][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.486802][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.489298][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.491711][ T5732] bridge_slave_0: entered allmulticast mode [ 54.494329][ T5732] bridge_slave_0: entered promiscuous mode [ 54.505094][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.507482][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.510075][ T5732] bridge_slave_1: entered allmulticast mode [ 54.512703][ T5732] bridge_slave_1: entered promiscuous mode [ 54.546817][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.551453][ T5725] team0: Port device team_slave_0 added [ 54.556944][ T5724] hsr_slave_0: entered promiscuous mode [ 54.561146][ T5724] hsr_slave_1: entered promiscuous mode [ 54.576193][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.587307][ T5725] team0: Port device team_slave_1 added [ 54.633364][ T5735] hsr_slave_0: entered promiscuous mode [ 54.636590][ T5735] hsr_slave_1: entered promiscuous mode [ 54.639728][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 54.642316][ T5735] Cannot create hsr debugfs directory [ 54.646549][ T5732] team0: Port device team_slave_0 added [ 54.654795][ T5732] team0: Port device team_slave_1 added [ 54.657629][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.660178][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.668118][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.672881][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.675072][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.683104][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.743035][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.745246][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.753003][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.783064][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.785852][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.796273][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.831715][ T5725] hsr_slave_0: entered promiscuous mode [ 54.834375][ T5725] hsr_slave_1: entered promiscuous mode [ 54.836741][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 54.838978][ T5725] Cannot create hsr debugfs directory [ 54.946039][ T5732] hsr_slave_0: entered promiscuous mode [ 54.948367][ T5732] hsr_slave_1: entered promiscuous mode [ 54.951569][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 54.953383][ T5732] Cannot create hsr debugfs directory [ 55.133942][ T5724] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.144646][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.155451][ T5724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.162967][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.186378][ T5724] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.192635][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.206384][ T5724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.213778][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.256213][ T5735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.262159][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.266034][ T5735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.273312][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.279868][ T5735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.286530][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.290770][ T5735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.296724][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.360143][ T5725] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.365446][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.368869][ T5725] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.373953][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.377417][ T5725] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.383781][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.387421][ T5725] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.393212][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.461450][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.467540][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.471240][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.476001][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.497819][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.501875][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.504746][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.511321][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.552273][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.590358][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.599501][ T64] Bluetooth: hci0: command tx timeout [ 55.599501][ T5726] Bluetooth: hci2: command tx timeout [ 55.600316][ T5086] Bluetooth: hci1: command tx timeout [ 55.600529][ T5086] Bluetooth: hci3: command tx timeout [ 55.607197][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.616347][ T229] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.619106][ T229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.626291][ T229] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.628675][ T229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.634574][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.665582][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.677412][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.690220][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.692478][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.703519][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.705740][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.712240][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.714444][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.727395][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.729636][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.746308][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.757936][ T5724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.780982][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.804495][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.807484][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.826727][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.828968][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.055854][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.099270][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.103693][ T5724] veth0_vlan: entered promiscuous mode [ 56.113733][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.117609][ T5724] veth1_vlan: entered promiscuous mode [ 56.168208][ T5724] veth0_macvtap: entered promiscuous mode [ 56.173664][ T5725] veth0_vlan: entered promiscuous mode [ 56.182937][ T5724] veth1_macvtap: entered promiscuous mode [ 56.191510][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.195286][ T5735] veth0_vlan: entered promiscuous mode [ 56.209123][ T5725] veth1_vlan: entered promiscuous mode [ 56.217568][ T5735] veth1_vlan: entered promiscuous mode [ 56.246361][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.256328][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.280464][ T5735] veth0_macvtap: entered promiscuous mode [ 56.299085][ T5725] veth0_macvtap: entered promiscuous mode [ 56.306517][ T5735] veth1_macvtap: entered promiscuous mode [ 56.314673][ T5732] veth0_vlan: entered promiscuous mode [ 56.322168][ T5725] veth1_macvtap: entered promiscuous mode [ 56.339632][ T5732] veth1_vlan: entered promiscuous mode [ 56.354600][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.358276][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.375833][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.376283][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.379079][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.386000][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.412866][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.416233][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.444289][ T5732] veth0_macvtap: entered promiscuous mode [ 56.453728][ T5732] veth1_macvtap: entered promiscuous mode [ 56.459172][ T5806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.497024][ T5724] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.503113][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.520250][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.531617][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.534133][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.551919][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.559000][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.576799][ T229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.581660][ T229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.613212][ T5877] jffs2: notice: (5877) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 56.617345][ T229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.621887][ T229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.651841][ T229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.654531][ T5877] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 56.666894][ T229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.707505][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.715772][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.750601][ T5803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.753958][ T5803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.756856][ T5803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.761212][ T5803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.769413][ T5881] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 56.773298][ T5881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.788915][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.792169][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.802352][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.805227][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.808069][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.812398][ T5884] Zero length message leads to an empty skb [ 56.814961][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.820948][ T5884] tipc: Started in network mode [ 56.822935][ T5884] tipc: Node identity 7f000001, cluster identity 4711 [ 56.825780][ T5884] tipc: New replicast peer: 127.0.0.1 [ 56.831735][ T5884] tipc: Enabled bearer , priority 10 [ 56.856743][ T5892] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 56.930847][ T5905] gretap1: entered promiscuous mode [ 56.988946][ T5806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.992027][ T5806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.994756][ T5806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.997495][ T5806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.001645][ T5806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.041002][ T5910] tipc: Started in network mode [ 57.042576][ T5910] tipc: Node identity 4, cluster identity 4711 [ 57.044926][ T5910] tipc: Node number set to 4 [ 57.076857][ T5914] jffs2: notice: (5914) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 57.164347][ T5919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'. [ 57.171241][ T5921] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 57.306147][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 57.310343][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 57.314505][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'. [ 57.371026][ T5927] Bluetooth: MGMT ver 1.23 [ 57.668759][ T5726] Bluetooth: hci2: command tx timeout [ 57.668821][ T64] Bluetooth: hci3: command tx timeout [ 57.668849][ T64] Bluetooth: hci1: command tx timeout [ 57.674843][ T5937] openvswitch: netlink: Tunnel attr 16 has unexpected len 16 expected 0 [ 57.711073][ T5940] netlink: 'syz.0.19': attribute type 4 has an invalid length. [ 57.720052][ T5941] netlink: 'syz.0.19': attribute type 4 has an invalid length. [ 57.720063][ T5940] netlink: 'syz.0.19': attribute type 4 has an invalid length. [ 57.846301][ T64] Bluetooth: hci3: Malformed LE Event: 0x0d [ 57.960896][ T5827] tipc: Node number set to 2130706433 [ 57.972037][ C0] ================================================================== [ 57.974564][ C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0xa51/0xb30 [ 57.977059][ C0] Read of size 2 at addr ffff888155a1e0f4 by task syz.0.24/5961 [ 57.981159][ C0] [ 57.982336][ C0] CPU: 0 UID: 0 PID: 5961 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 57.982351][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.982365][ C0] Call Trace: [ 57.982379][ C0] [ 57.982384][ C0] dump_stack_lvl+0x100/0x190 [ 57.982403][ C0] print_report+0x13d/0x4b0 [ 57.982421][ C0] ? __virt_addr_valid+0x239/0x430 [ 57.982438][ C0] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 57.982454][ C0] kasan_report+0xdf/0x1c0 [ 57.982470][ C0] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 57.982487][ C0] qdisc_pkt_len_segs_init+0xa51/0xb30 [ 57.982505][ C0] __netif_receive_skb_core.constprop.0+0x1132/0x3530 [ 57.982519][ C0] ? __lock_acquire+0x49f/0x1a40 [ 57.982534][ C0] ? kasan_save_stack+0x30/0x50 [ 57.982547][ C0] ? kasan_save_track+0x14/0x30 [ 57.982559][ C0] ? kasan_save_free_info+0x3b/0x70 [ 57.982569][ C0] ? __kasan_check_byte+0x13/0x50 [ 57.982583][ C0] ? unwind_next_frame+0x3be/0x2090 [ 57.982595][ C0] ? rcu_is_watching+0x12/0xc0 [ 57.982612][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 57.982625][ C0] ? __kasan_check_byte+0x13/0x50 [ 57.982639][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 57.982655][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 57.982669][ C0] ? rcu_is_watching+0x12/0xc0 [ 57.982684][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 57.982698][ C0] ? lock_release+0x24d/0x310 [ 57.982711][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 57.982727][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 57.982742][ C0] __netif_receive_skb_list_core+0x353/0x940 [ 57.982757][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 57.982770][ C0] ? lock_acquire+0x1b9/0x370 [ 57.982787][ C0] netif_receive_skb_list_internal+0x722/0xd40 [ 57.982801][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 57.982815][ C0] ? __lock_acquire+0x49f/0x1a40 [ 57.982829][ C0] ? dev_gro_receive+0x238/0x3060 [ 57.982844][ C0] napi_complete_done+0x221/0x940 [ 57.982857][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 57.982869][ C0] ? find_held_lock+0x2b/0x80 [ 57.982878][ C0] ? gro_cell_poll+0x441/0x690 [ 57.982892][ C0] ? gro_cell_poll+0x441/0x690 [ 57.982907][ C0] gro_cell_poll+0x46e/0x690 [ 57.982922][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 57.982935][ C0] net_rx_action+0xa40/0xf20 [ 57.982949][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 57.982963][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 57.982975][ C0] ? sched_clock+0x38/0x60 [ 57.982988][ C0] ? sched_clock_cpu+0x6c/0x570 [ 57.983004][ C0] ? rcu_is_watching+0x12/0xc0 [ 57.983020][ C0] handle_softirqs+0x1ea/0x9b0 [ 57.983036][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 57.983050][ C0] ? irqtime_account_delta+0x9a/0x110 [ 57.983062][ C0] ? tun_rx_batched.isra.0+0x402/0x750 [ 57.983074][ C0] do_softirq+0xac/0xe0 [ 57.983088][ C0] [ 57.983091][ C0] [ 57.983095][ C0] __local_bh_enable_ip+0xf8/0x120 [ 57.983109][ C0] tun_rx_batched.isra.0+0x407/0x750 [ 57.983121][ C0] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 57.983140][ C0] ? tun_get_user+0x1cc8/0x3c20 [ 57.983152][ C0] tun_get_user+0x1e31/0x3c20 [ 57.983166][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 57.983178][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 57.983198][ C0] ? find_held_lock+0x2b/0x80 [ 57.983207][ C0] ? tun_get+0x191/0x370 [ 57.983216][ C0] ? tun_get+0x191/0x370 [ 57.983227][ C0] tun_chr_write_iter+0xdc/0x200 [ 57.983240][ C0] vfs_write+0x6ac/0x1050 [ 57.983253][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 57.983267][ C0] ? __pfx_vfs_write+0x10/0x10 [ 57.983277][ C0] ? find_held_lock+0x2b/0x80 [ 57.983295][ C0] ksys_write+0x12a/0x250 [ 57.983305][ C0] ? __pfx_ksys_write+0x10/0x10 [ 57.983317][ C0] do_syscall_64+0x115/0x870 [ 57.983331][ C0] ? clear_bhb_loop+0x70/0xc0 [ 57.983344][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.983356][ C0] RIP: 0033:0x7fbbdaf9e0d9 [ 57.983367][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.983379][ C0] RSP: 002b:00007fbbd91b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.983399][ C0] RAX: ffffffffffffffda RBX: 00007fbbdb226180 RCX: 00007fbbdaf9e0d9 [ 57.983407][ C0] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 000000000000000b [ 57.983414][ C0] RBP: 00007fbbdb035024 R08: 0000000000000000 R09: 0000000000000000 [ 57.983421][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.983428][ C0] R13: 00007fbbdb226218 R14: 00007fbbdb226180 R15: 00007ffc17648ae8 [ 57.983439][ C0] [ 57.983443][ C0] [ 58.131824][ C0] The buggy address belongs to the physical page: [ 58.133809][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x155a1e [ 58.136468][ C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 58.138606][ C0] raw: 057ff00000000000 ffffea0005568788 ffffea0005568788 0000000000000000 [ 58.141210][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 58.143897][ C0] page dumped because: kasan: bad access detected [ 58.145772][ C0] page_owner info is not present (never set?) [ 58.147591][ C0] [ 58.148314][ C0] Memory state around the buggy address: [ 58.149977][ C0] ffff888155a1df80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.152523][ C0] ffff888155a1e000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.154882][ C0] >ffff888155a1e080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.157334][ C0] ^ [ 58.159721][ C0] ffff888155a1e100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.162438][ C0] ffff888155a1e180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.164911][ C0] ================================================================== [ 58.167438][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 58.169699][ C0] CPU: 0 UID: 0 PID: 5961 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 58.172432][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.175724][ C0] Call Trace: [ 58.177046][ C0] [ 58.178206][ C0] dump_stack_lvl+0x100/0x190 [ 58.179689][ C0] vpanic+0x552/0x970 [ 58.180887][ C0] ? __pfx_vpanic+0x10/0x10 [ 58.182304][ C0] ? rcu_is_watching+0x12/0xc0 [ 58.183819][ C0] ? irqentry_exit+0x24d/0xa10 [ 58.185334][ C0] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 58.187066][ C0] panic+0xd1/0xe0 [ 58.188201][ C0] ? __pfx_panic+0x10/0x10 [ 58.189793][ C0] ? check_panic_on_warn+0x1f/0x90 [ 58.191396][ C0] check_panic_on_warn.cold+0x19/0x34 [ 58.193084][ C0] end_report.part.0+0x3a/0x90 [ 58.194554][ C0] kasan_report.cold+0xe/0x18 [ 58.195966][ C0] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 58.198143][ C0] qdisc_pkt_len_segs_init+0xa51/0xb30 [ 58.200276][ C0] __netif_receive_skb_core.constprop.0+0x1132/0x3530 [ 58.202615][ C0] ? __lock_acquire+0x49f/0x1a40 [ 58.204305][ C0] ? kasan_save_stack+0x30/0x50 [ 58.205890][ C0] ? kasan_save_track+0x14/0x30 [ 58.207478][ C0] ? kasan_save_free_info+0x3b/0x70 [ 58.209285][ C0] ? __kasan_check_byte+0x13/0x50 [ 58.211158][ C0] ? unwind_next_frame+0x3be/0x2090 [ 58.213100][ C0] ? rcu_is_watching+0x12/0xc0 [ 58.214946][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 58.217272][ C0] ? __kasan_check_byte+0x13/0x50 [ 58.218836][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 58.220485][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 58.222421][ C0] ? rcu_is_watching+0x12/0xc0 [ 58.224191][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 58.225893][ C0] ? lock_release+0x24d/0x310 [ 58.227424][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 58.229044][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 58.231278][ C0] __netif_receive_skb_list_core+0x353/0x940 [ 58.233384][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 58.235441][ C0] ? lock_acquire+0x1b9/0x370 [ 58.237144][ C0] netif_receive_skb_list_internal+0x722/0xd40 [ 58.239322][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 58.241431][ C0] ? __lock_acquire+0x49f/0x1a40 [ 58.243123][ C0] ? dev_gro_receive+0x238/0x3060 [ 58.244952][ C0] napi_complete_done+0x221/0x940 [ 58.246784][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 58.248901][ C0] ? find_held_lock+0x2b/0x80 [ 58.250507][ C0] ? gro_cell_poll+0x441/0x690 [ 58.251958][ C0] ? gro_cell_poll+0x441/0x690 [ 58.253581][ C0] gro_cell_poll+0x46e/0x690 [ 58.255106][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 58.256794][ C0] net_rx_action+0xa40/0xf20 [ 58.258334][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 58.260211][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 58.262146][ C0] ? sched_clock+0x38/0x60 [ 58.263616][ C0] ? sched_clock_cpu+0x6c/0x570 [ 58.265163][ C0] ? rcu_is_watching+0x12/0xc0 [ 58.266775][ C0] handle_softirqs+0x1ea/0x9b0 [ 58.268531][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 58.270431][ C0] ? irqtime_account_delta+0x9a/0x110 [ 58.272452][ C0] ? tun_rx_batched.isra.0+0x402/0x750 [ 58.274594][ C0] do_softirq+0xac/0xe0 [ 58.276226][ C0] [ 58.277415][ C0] [ 58.278530][ C0] __local_bh_enable_ip+0xf8/0x120 [ 58.280417][ C0] tun_rx_batched.isra.0+0x407/0x750 [ 58.282313][ C0] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 58.284143][ C0] ? tun_get_user+0x1cc8/0x3c20 [ 58.285824][ C0] tun_get_user+0x1e31/0x3c20 [ 58.287621][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 58.289243][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 58.290995][ C0] ? find_held_lock+0x2b/0x80 [ 58.292490][ C0] ? tun_get+0x191/0x370 [ 58.293874][ C0] ? tun_get+0x191/0x370 [ 58.295421][ C0] tun_chr_write_iter+0xdc/0x200 [ 58.297164][ C0] vfs_write+0x6ac/0x1050 [ 58.298575][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 58.300334][ C0] ? __pfx_vfs_write+0x10/0x10 [ 58.301847][ C0] ? find_held_lock+0x2b/0x80 [ 58.303355][ C0] ksys_write+0x12a/0x250 [ 58.304727][ C0] ? __pfx_ksys_write+0x10/0x10 [ 58.306273][ C0] do_syscall_64+0x115/0x870 [ 58.307768][ C0] ? clear_bhb_loop+0x70/0xc0 [ 58.309252][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.311140][ C0] RIP: 0033:0x7fbbdaf9e0d9 [ 58.312560][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.318531][ C0] RSP: 002b:00007fbbd91b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.321139][ C0] RAX: ffffffffffffffda RBX: 00007fbbdb226180 RCX: 00007fbbdaf9e0d9 [ 58.323788][ C0] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 000000000000000b [ 58.326505][ C0] RBP: 00007fbbdb035024 R08: 0000000000000000 R09: 0000000000000000 [ 58.328981][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.331885][ C0] R13: 00007fbbdb226218 R14: 00007fbbdb226180 R15: 00007ffc17648ae8 [ 58.334437][ C0] [ 58.336093][ C0] Kernel Offset: disabled [ 58.337646][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:00:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a41e55 RDI=ffffffff9bc08340 RBP=ffffffff9bc08300 RSP=ffffc90000007130 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b8fa20d R15=ffffffff85a41df0 RIP=ffffffff85a41e7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbbd91b46c0 ffffffff 00c00000 GS =0000 ffff8880d5bdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000020000000f000 CR3=0000000057dae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=00000000000000ff Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc17648fd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc17648fd6 00007ffc17648fdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbdb035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbdb035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbdb0357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbdb035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbdb1f25f8 00007fbbdb1f25c8 00007fbbdb1f2600 00007fbbdb1f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000004f7cd RBX=ffff88801f292580 RCX=ffffffff8bbd5345 RDX=0000000000000000 RSI=ffffffff8e3a6afe RDI=ffffffff8c601b80 RBP=ffffed1003e524b0 RSP=ffffc90000177e00 R8 =0000000000000001 R9 =ffffed100d4a678d R10=ffff88806a533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=dffffc0000000000 RIP=ffffffff8bbd38ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5cdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000022950000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bce7f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bce7f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555576429ab8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000180040100000a 080606010181c401 0000000000000000 000000000002ffaa ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffed080580030010 000010000010000e 1000010000000806 0a0106d407f7de10 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8080080005800401 c71000080c4dc200 7070702f7665642f 01ffffffffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80037180041880a3 d0fc08000100000c 0806060123c60808 0071800300040021 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 011480040880a3d1 a208000100000c08 06060123d21ffff8 8280080014800314 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80040880a3d1a208 000100000c080606 0123d2000200071f fff8828008001480 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 037180041880a3d0 fc08000100000c08 06060123c6080800 7180030004002180 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80080005800401c7 1000080c4dc20070 70702f7665642f01 ffffffffffffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000047db5 RBX=ffff88801f6b4b00 RCX=ffffffff8bbd5345 RDX=0000000000000000 RSI=ffffffff8e3a6afe RDI=ffffffff8c601b80 RBP=ffffed1003ed6960 RSP=ffffc90000187dd8 R8 =0000000000000001 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff810014b0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000020000000f000 CR3=000000005a781000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb48cf5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff30574176 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff30574176 00007fff3057417c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb48c235607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb48c235647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb48c2357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb48c235639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb48c3f2600 00007fb48c3f25e0 00007fb48c3f25e8 00007fb48c3f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb48c3f25f8 00007fb48c3f25c8 00007fb48c3f2600 00007fb48c3f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=ffff88805c160000 RCX=ffffc90004947208 RDX=0000000000000000 RSI=ffff88805c160000 RDI=ffff88805c1604c4 RBP=ffffc900049471b8 RSP=ffffc900049470a0 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90004947170 R11=0000000000000000 R12=fffff52000928e30 R13=ffffc90004947170 R14=ffffc90004947170 R15=ffffc90004947178 RIP=ffffffff81ee7526 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbbd91f66c0 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbbdae70000 CR3=0000000057dae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc17648fd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc17648fd6 00007ffc17648fdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbdb035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbdb035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbdb0357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbdb035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbdb1f25f8 00007fbbdb1f25c8 00007fbbdb1f2600 00007fbbdb1f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000