last executing test programs: 16.739868283s ago: executing program 2 (id=7): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x7fffffff, 0x200) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000040)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000000100)=@hrpcs={0xb, 0xd4}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xa}}, './file0\x00'}) clock_gettime(0x0, &(0x7f00000001c0)) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {r4, r5+60000000}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {r4, r5+60000000}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4000005) close(r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r2) sendmsg$NL802154_CMD_SET_CCA_MODE(r11, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r12, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r6) sendmsg$NBD_CMD_RECONFIGURE(r13, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, r14, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3281}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffff}]}, 0x60}}, 0x20000845) (async) sendmsg$NBD_CMD_RECONFIGURE(r13, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, r14, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3281}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffff}]}, 0x60}}, 0x20000845) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r7, 0x800, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r7, 0x800, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) r15 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r15, 0x6b, 0x4, &(0x7f0000000900)=0x1, 0x4) r16 = syz_open_dev$evdev(&(0x7f0000000940), 0x2, 0x301000) write$evdev(r16, &(0x7f0000000a00)=[{{}, 0x12, 0x6, 0x38}, {{}, 0x11, 0x3, 0xfffffffe}, {{0x0, 0x2710}, 0x15, 0x2, 0xffffff01}, {{0x0, 0x2710}, 0x0, 0x6}], 0x60) 16.59864157s ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x0, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0xffffffffffffffff, 0x4]}}) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 32) rmdir(&(0x7f0000000200)='./file0/file1\x00') (async, rerun: 32) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x1804008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16.597773964s ago: executing program 2 (id=10): r0 = socket$kcm(0xa, 0x2, 0x73) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69c020000000000000031b838059f96bd206d4776368ed2a92432e5af716f5b186042a5967398c27f316aa60d1b3fc3cd2f3acdd0257ea84a060e65e5d01afb3be5ec553d3a736f101f", 0x5f}], 0x2, &(0x7f0000001240)=[@ip_retopts={{0x7c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x95, [@empty, @empty]}, @generic={0x7, 0x9, "354ffadb61f533"}, @generic={0x4a651693fa78f643, 0xa, "2a0243875391108a"}, @cipso={0x86, 0x3c, 0x3, [{0x5, 0xf, "7d8b6912cb4f422d405c08d32b"}, {0x5, 0xb, "9b230271d923c9b5cb"}, {0x0, 0xb, "8c608c9a933a34335e"}, {0x2, 0x5, 'fUr'}, {0x6, 0x7, "4647de0d2c"}, {0x1, 0x5, '*B9'}]}, @generic={0x82, 0xf, "77dc6fe79812fda90c2210f057"}]}}}, @ip_tos_u8={{0x11, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0xb8}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r2, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000001140)) write$binfmt_misc(r2, &(0x7f0000001040)="ab858f7180dd2cc206e98641ca082bc54a5f6f02ba9757dc2c57d256f7e878ea27e4dc7cb8c1ba5a78a423db13b6324d5ff8916503e4d020c971e4c5dc2fd21d", 0x40) 16.469899054s ago: executing program 2 (id=13): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) open_by_handle_at(r3, &(0x7f0000000280)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x8000000401, 0xfffffffffffffffd, 0x3, 0x101, 0x4, 0x8}}, 0x101002) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0xc0) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f137fb1f20f70a3207638bad004ed0f21660f01cb66660f217f0f01cf650fc72ab837008ec0ea2f788800", 0x2b}], 0x1, 0x5, &(0x7f0000000100)=[@cr0={0x0, 0x8000}], 0x1) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0xfff, @dev={0xfe, 0x80, '\x00', 0x13}}, 0x1c) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000000c0)=0x800, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e27, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e1e, 0x2, @remote, 0x806}, 0x1c) 16.396181734s ago: executing program 2 (id=17): mkdir(&(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dbg\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dbg/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x1, 0x0) write(r0, 0x0, 0x3f00) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r1, &(0x7f0000001400)=""/4076, 0xfffffeea) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./dbg\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000300)='./dbg\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dbg/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x1, 0x0) (async) write(r0, 0x0, 0x3f00) (async) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) (async) read(r1, &(0x7f0000001400)=""/4076, 0xfffffeea) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) (async) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 16.17945818s ago: executing program 2 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @private=0xa010102}}}, 0x118) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="0000000000000000240012800900010069706970000000001400028008000100", @ANYRES32=r4, @ANYBLOB="0802001800000000"], 0x44}}, 0xc48c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010428bd7000fedbdf2500000000539dd2d9574def551509919b7b5a1ece6beba3974e929e8a952397eb0e4645065b3c9001865de83741b30e4e3ec16a1876b9ddc5379d3e5aee08e55957f61204c59c9be794f8fe2c71a09a58edd5e55243e7d76bfdea2994758ef6e1c356c43cc85e80bb8039a4d7ba7f6f252b3f0e6ccd2d3ce74c73629f69dc36b6268bc2006fa99ff294669f5e9f10160ba3198695bb210990be3274f22fff0001765f60389cd49ed414a6c366f5eb4675039f1eca061165edae4ba08c25b1cfd01d8ba9", @ANYRES32=r4, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c00028008000300ffffffff"], 0x3c}}, 0x24004801) socket$nl_route(0x10, 0x3, 0x0) 14.089480797s ago: executing program 0 (id=46): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="02002abd7000ffdbdf25020000008f6e4da297001dd0f1dbc852f34506f50869a3d95fee629fb2991f3e8357b9f9859bdd86a3c93a0a9b8ecf93c8285fca763b5ae5041602ca1f3babae2569424aa1a6893f4fef0b371a687d33456a91a0e13ce0746a0ba97e9cdbd52dd692fa6db44837384cbc9654d823faec8f5d1768ab47be94ae6185e2c09ed7d77a63dacbb1f6ac790ae55e5735a791bdad9c812428ccdb9d74bf0b90c4996dad4723ac98db155467f30316e3915bfbbcd34c56fc26d783fcd01ae9e115de51ab327e9fb9e73dec21a5034358b54bd68df5726033591a0b9c649878a51120a46b98d9"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000980)) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x40000) (async) r2 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x4, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001b80)=[{0x0}, {&(0x7f0000001c00)=""/4109, 0x100d}, {0x0}, {0x0}], 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f0000000640)={&(0x7f0000000580)=[{0x968, 0x7fff, 0x2}, {0x96cf, 0x0, 0x2}, {0x1}, {0x7, 0x7, 0x1}], 0x4, 0x10, 0xd, 0x1}) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) (async, rerun: 64) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000440)=""/123, &(0x7f00000003c0)=0x7b) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x15) ioctl(r4, 0x4048aec9, &(0x7f00000000c0)="030000000000000001000000") (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x0, &(0x7f0000000100)}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000af40)=ANY=[@ANYBLOB="9c2c00004400010029bd70000400000003"], 0x2c9c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r9, &(0x7f00000000c0)=ANY=[], 0xffffff6a) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r9, &(0x7f0000000280)={0x10000012}) splice(r8, 0x0, r6, 0x0, 0xfffd, 0x0) (async) r10 = signalfd4(r5, &(0x7f0000000000)={[0x24]}, 0x8, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r10, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="0ade8e24", 0x4}) recvmsg(r10, &(0x7f0000002cc0)={&(0x7f00000005c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000000640)}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000780)=""/82, 0x52}, {&(0x7f0000000800)=""/45, 0x2d}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/231, 0xe7}, {&(0x7f0000001ac0)=""/90, 0x5a}], 0x7}, 0x40000121) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r11, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 14.088477254s ago: executing program 0 (id=47): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x810, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = syz_pidfd_open(0x0, 0x0) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000380)=0x100, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4001) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)) (async) r4 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e"], 0x60}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f00000003c0)={0x43, &(0x7f00000002c0)="6e7204f14c203d695792afb72335ac11f411fd24fe3d1bbb46380ecbb973a0a07db5120616e1d8f10abdc6387b58dec3f738c49d6924c1f7885ca12affc0218f24eefa"}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x1, 0x8000000000000000, 0x2000000005, 0x0, 0x4, 0x3fd, 0x4, 0x5, 0x8d], 0xeeee8000, 0x284e97}) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x52282, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket(0xf, 0x800, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001980)=@newtfilter={0x13e8, 0x2c, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {}, {0x7, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xc31}, @filter_kind_options=@f_cgroup={{0xb}, {0x13b0, 0x2, [@TCA_CGROUP_POLICE={0xca0, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xfffffff9, 0x1, 0x5, 0x1, 0x22c, 0x5, 0x9e8, 0x7e, 0x800, 0x8, 0x40, 0xff, 0x8, 0x8, 0x3, 0xfff, 0x0, 0xd, 0x4, 0x46, 0xb739, 0x8001, 0x4, 0x6, 0x2, 0xc8c2, 0x87, 0x7f, 0x4, 0xf8f, 0x4, 0x4000000, 0x0, 0x0, 0x4, 0x7, 0x7, 0x8, 0x1, 0xffff, 0x10, 0xff, 0x40, 0x3, 0x0, 0x2, 0x9, 0xb2, 0x8, 0x9, 0x54, 0x5, 0x1, 0x6, 0x4ba9, 0xfb05, 0x0, 0x7fffffff, 0x4, 0x1, 0xff, 0x1, 0x1ff, 0x4, 0x0, 0x7, 0x400, 0x5, 0x2, 0xb, 0xfff, 0x1, 0x93, 0x8000, 0x2, 0x2, 0x8, 0x81, 0x77b850f2, 0x1, 0x5, 0x0, 0x3, 0x0, 0x80, 0x0, 0x9, 0x8, 0x5, 0x4, 0x0, 0x6f, 0x9, 0x10, 0x98000000, 0x2f800, 0x2, 0x2, 0x4, 0x0, 0x5, 0xa, 0x176c, 0x80, 0x2, 0x0, 0x2, 0x8, 0x9, 0x0, 0x16, 0xc07f, 0x2, 0x7fffffff, 0x6e, 0x80000001, 0x9, 0x7, 0xf, 0x7, 0x8f, 0x7, 0x69d97bf9, 0x9, 0x3ff, 0x6, 0x4, 0x5, 0x3ff, 0x100, 0x9237, 0x6, 0x6a0aedb2, 0x3c3, 0x6, 0x9b57, 0x10000, 0x3, 0x2, 0x81, 0x3, 0x1, 0xc, 0x35, 0x1, 0x1, 0x1, 0x71d9, 0x3, 0x3e68, 0x3, 0x3, 0x2, 0xd, 0x1, 0xfffffc00, 0x2, 0x44a0870c, 0x9, 0x1ff, 0x9fec, 0x4, 0x41, 0x0, 0x9c2, 0x4, 0x301, 0x0, 0x0, 0x4, 0x7fffffff, 0x0, 0xc874, 0x6, 0x0, 0x8000, 0x7, 0xff, 0x101, 0x8, 0x0, 0x2, 0x4, 0x6, 0x1, 0x9, 0xb468, 0x0, 0x8, 0x5, 0x4, 0x200, 0x6, 0x8, 0x7ff, 0x9, 0x4, 0x5, 0x400, 0x3, 0x2, 0xfffffffd, 0x2, 0xc3, 0xfffffffa, 0x4, 0x3, 0x1, 0x0, 0xfb, 0x5, 0x3, 0x0, 0x0, 0x9, 0x4, 0xd7, 0x5, 0x3, 0x70a, 0x1, 0x2, 0x80, 0x861, 0x2, 0x5, 0x80000000, 0x3ff, 0x8001, 0x6, 0x7fffffff, 0x98b, 0x6, 0x5, 0xfffffff8, 0xce4, 0x3, 0x5908, 0x0, 0x7, 0xa, 0x10000, 0x10, 0x418626d, 0x4, 0x2, 0x800, 0x53, 0x0, 0x6c93, 0x5, 0x7, 0xc0, 0x9, 0xfffffffb]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x3, 0x2, 0x7, 0x0, {0x6, 0x0, 0x2, 0xf, 0x2, 0x2}, {0x4, 0x1, 0x2, 0x5, 0x1, 0x548000}, 0x5, 0x20, 0xffffffc0}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd3, 0x7, 0xfff, 0x7, 0x3, {0x8, 0x0, 0xfff, 0xf0a0, 0x5, 0x81}, {0x7, 0x1, 0x4, 0x25, 0x7, 0x7}, 0x50, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x5, 0x5, 0x1, 0x1, 0x400, 0xcd6c, 0xfffff000, 0x8, 0x2, 0xe56, 0x5, 0x4, 0x6, 0x3, 0x0, 0x2, 0x3, 0x3, 0x4, 0x0, 0x0, 0x8, 0x6835, 0xc, 0xfffff5e1, 0x83f, 0x81, 0x81, 0xa, 0x100, 0x7ff, 0x7, 0xffff, 0x4, 0x96c, 0x7, 0xfffffffd, 0x6, 0x9, 0x0, 0xffff, 0x9, 0x0, 0x2b, 0x4, 0x88dd, 0x0, 0x80000000, 0x10001, 0xc15, 0x6, 0x2, 0x3ff, 0x3, 0xff, 0xc, 0x800, 0xffff0001, 0x1, 0x5, 0xa, 0x9, 0x8, 0x80, 0x8, 0x7, 0x518d, 0x4, 0x7, 0x411, 0x0, 0xbaf1, 0x1, 0xff, 0x5, 0x4, 0x1, 0x4, 0x80000001, 0x8, 0x5, 0x4, 0x0, 0x652, 0x1ff, 0x0, 0x5, 0x200, 0x1000, 0x62c, 0x40, 0x24, 0x2, 0x800, 0x10001, 0xfffffffa, 0x518b, 0x1, 0x380, 0x7, 0x0, 0x10001, 0x7, 0x4ce0, 0x7, 0x401, 0xff2, 0x5, 0x80, 0x0, 0x101, 0x4, 0x8, 0x7, 0x2, 0x5, 0x1, 0x0, 0x3, 0xc60, 0x71b, 0x0, 0x5, 0x4, 0x8, 0x41, 0x4, 0x1ff, 0x7, 0xd28, 0x8, 0xb, 0x1, 0x0, 0x0, 0x80, 0x9, 0x51327f2d, 0x0, 0x0, 0x3, 0x6, 0x2, 0x6, 0x10, 0x7, 0x9, 0x7, 0x2, 0x8, 0x4, 0x74d, 0x6, 0x10, 0x9, 0x1, 0x1, 0xaf2, 0xd, 0x1, 0x3, 0x5, 0x0, 0x5, 0x2, 0x3, 0x80000001, 0x0, 0xb34, 0x1, 0x0, 0x2, 0x5, 0x8000, 0x7ff, 0x6, 0x8, 0x3a345bc0, 0xa0, 0x3, 0x9, 0x80, 0xfff, 0x35, 0x0, 0x200, 0x91d, 0x1, 0x1ff, 0x29, 0x200, 0x400, 0x7fff, 0xc, 0x8000, 0x1ff, 0x4, 0x80000001, 0x4f97, 0x3, 0x10000, 0x7fff, 0x0, 0x8000, 0x0, 0x3, 0x206, 0xd7ae, 0x9, 0x1, 0x7, 0x7, 0x7, 0x400, 0x25, 0x5, 0x6, 0x5, 0x101, 0x2, 0xab3, 0x9, 0x0, 0x9, 0x1, 0x9, 0x773a052b, 0xffff, 0x6, 0x9, 0x10000, 0x1, 0xfff, 0xfef, 0xfffffff7, 0x80, 0x2, 0xb5, 0x6, 0x3, 0xfffffffc, 0x7, 0x6, 0xc, 0x20c, 0x1, 0xffff, 0x1, 0x7, 0x8001, 0x5, 0x8, 0x9, 0xfffffffa, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x1, 0x7, 0x1ff, 0x4072, 0x4, 0x1ff, 0xfffffffb, 0x640778e1, 0x3, 0x8, 0x2, 0xc, 0x44ac, 0x1, 0x8, 0x6, 0xffffffff, 0x8, 0x0, 0x96d, 0xffff, 0xfffffffb, 0xd, 0x9, 0x5c, 0x800, 0x7, 0xa, 0x10000, 0x8, 0x40, 0x9, 0x0, 0x7, 0xb, 0x2, 0x8, 0x8000, 0x5, 0x5a09, 0x7, 0xd, 0xbb4, 0x5, 0x81, 0x8, 0xb13b, 0x90b5636a, 0xfffffffc, 0x10001, 0xda, 0x800, 0x8, 0x4, 0xc8, 0x4, 0x6d8, 0x6, 0x6, 0x7, 0x0, 0xb79, 0x99, 0x19a, 0xffffffff, 0x5, 0xf54, 0x8, 0x7, 0x9, 0x400, 0x5, 0x5, 0x9, 0x5, 0x47de, 0x7f, 0x80, 0x0, 0xc, 0x3, 0x0, 0x7, 0xe3, 0xa, 0x1ff, 0x7ff, 0x0, 0x400, 0x2, 0x0, 0xd, 0x3, 0x1000, 0xffffff4c, 0x8, 0x44, 0xffff, 0x8, 0x6, 0x2, 0x7fffffff, 0x6, 0x8, 0x7, 0x3, 0x10001, 0x3, 0x7fff, 0x0, 0x9, 0x7, 0x7f, 0x4, 0xc, 0x6, 0x9, 0x1, 0x35f, 0x1d1, 0x5, 0xffffffff, 0x2, 0x10000, 0x4554, 0x2, 0x100, 0x8, 0x0, 0x0, 0x2, 0x2, 0x3ff, 0x43, 0x8, 0x81, 0xb6, 0xfffffa44, 0x2, 0x3, 0x7, 0x70, 0x1ff, 0x81, 0x81, 0xf, 0xc13, 0xcd21, 0x4, 0x7ff, 0x4, 0x1, 0x8, 0x10001, 0x3, 0x8, 0x2, 0x0, 0xff, 0xa, 0x1fbf, 0x9, 0xd, 0xfffffffa, 0x5, 0x2, 0x83, 0x9, 0x0, 0x4, 0xe9, 0x3, 0x401, 0x4, 0x2, 0x2, 0x7, 0x4, 0x0, 0x0, 0x93, 0x2, 0xf52a, 0x9, 0x5a, 0x3, 0xb1d6, 0xfff, 0x6, 0x800, 0x2, 0x100, 0x6, 0x3, 0xfffffffa, 0x1b0, 0x3253, 0x9, 0x1000000, 0xfffffffa, 0x101, 0xd88, 0x2, 0x5, 0xd387, 0xffff, 0x0, 0x3, 0x120, 0x7f4, 0xa8ea, 0xf, 0x0, 0x9, 0x8, 0xfffffffc, 0x0, 0x5, 0x1, 0x36, 0x5bc, 0x3, 0x9, 0xf157, 0x2f7, 0x5e693d54, 0x7, 0xffffc696, 0xe5ccbbe0, 0x8, 0x3ff, 0x1, 0x7, 0x80000000, 0x8, 0x8, 0x3042, 0x3, 0x9a77, 0x7, 0x8, 0x13, 0x10, 0x9, 0xa896, 0x6, 0x7fffffff, 0x7f, 0x5, 0x34a, 0x90, 0xffff, 0x9, 0x8, 0xd757]}]}, @TCA_CGROUP_EMATCHES={0x314, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc8, 0x2, 0x0, 0x0, {{0x2008, 0x0, 0x30c}, "20f1d5779987ee99df6b7eabd747b93d229da428c656f47f53d04df4f0d8adeb600af999f4ba87d56128be56b5bffdb7373cc1b707919ccbb8f2b72270caf3594f192fa81a26141394289e255740470ad752dcda42adcd731792be70135a8f43e3444b7a5fcc48cd706eb1db83d868b37dc7886bc87ac37c63178b33894a7c493425fdaeb174e9c676bce921fd6eb643d00bfb592e74141f6d6894dc95acf967152ccf0b08f6cdb416e5eae8cd862b3756b930f24552a7c16e"}}, @TCF_EM_NBYTE={0x18, 0x0, 0x0, 0x0, {{0x5}, {0x401, 0x5, 0x1, "4c15918936"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xa, 0x7, 0x4}, {{0x2, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2a0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xff, 0x3, 0x520006f3d1054c56}, {0x4, 0x76}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x1dc2}, {0xfffffffd, 0x39f, 0x0, 0x4}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x9}, {0x40, 0x7, 0xfff9, 0x1, 0x0, 0x2}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x401}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x91}, {0xc, 0x4, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4b7c, 0x1, 0x6}, {0x4, 0x10, 0xf, 0x2, 0x2, 0x1, 0x1}}}, @TCF_EM_IPT={0x18, 0x2, 0x0, 0x0, {{0x8000, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0xffff}, {0x2, 0x4, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x8}, {0x10, 0x6, 0x2, "a0437d54058b"}}}, @TCF_EM_IPT={0x124, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xc}, @TCA_EM_IPT_MATCH_DATA={0xfd, 0x5, "d548f04fe02bbcdc12478016690aa37cb11cceb2464683526edf1d220aac6ffc195fd599ceae09b622182b782c74a7b0338a968f34365d4077d28e36b2f4ae3d26c1502fb6118f38ff31a1faad898ea076fce8e088add1f463fb115ee767169d0bc52cfcf159f4dca08e44347b1c1e527c78a1368851b9ad5871589a55f012e82685a5939b63da509cceb8736afe6be5a24f634e07ba849bea2495f85c86c3a57532e86eabfc7978a975b8f48db7e3f1a1d2e1055fcad72b45f2e1a0ecf8b4fc7e079b9f91f69da42cc0c7f29787d3a86e6ac5c38b9864f9e637f77f8e32be7f738f7fc5bbad5936509d83d4d1d5d6d5bf19c100d72aa9fc08"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x10}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3, 0x8, 0x400}, {0x3, 0x6, 0x3}}}]}]}, @TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_CGROUP_ACT={0x3ec, 0x1, [@m_csum={0x120, 0x8, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x10000000, 0x6, 0x9e6d}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3ff, 0x8, 0x5, 0x80}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1000, 0x6, 0x2, 0x7}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xf9f, 0x4, 0xfffffff7, 0xfffffff5}, 0x7c}}]}, {0x82, 0x6, "ea7d8ed2da2758eb20b2f191dd3c634f64e8ffe790b26319f6f5873ec78b99788e94ec2526ab40b0b1f23912954f901fc651274fc03a6f8e5a60179c5d3c147b2269b847b38ad4db67acebd8ebd779d816d83c5f3c05b22fd63197e4c7a5e404d86089a9a571bc98062c7b602710288694e54602879d1698829cdb278e8d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x17c, 0x20, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x80000001, 0x7, 0xd, 0x7}, 0x44f3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0xfc9, 0x3, 0x40b, 0x5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0xffffffffffffffff, 0x7}, 0xa9}}]}, {0xf5, 0x6, "a8148e9456c9a0d389675f97fd9027cfbd293da54f5bdfbcae7ee81f1cb7fc9d2db48a05fe49a7def3f8ee02eae0dc570a954bcbbfed8c198960a99b816decb0158076e193edf2a58e95bacc6fafa85a0459e9ed11e5c7f3634e81432fa801ead96deb3ae14425c018972ddddd05a932f882c27578c31d180d07858ba19428cfca2cd39c969f89c96a57ea8a6df551edce4ae1e484e94ab2aaa77100bda6f2e252f46a5b74025d2bfbad5f946d37f120c4ad70b1598d62c34ce095c6ecf66fb782551889aa94b3f8c39027eedeca9dccd69fab2c50904d9f263a2422b47714358878a26c927e8a7122bfa4feb393dc56d9"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x14c, 0x1b, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4eaf, 0x80, 0x3, 0x1, 0x2}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xde, 0x6, "360b723414ff747c413d517af8343c6231056030a6f28ef47a62e64773a52b2ec077a7ede86f3176797fff49a342abd9f6dc8e7c992e1c2151bcf7d1d323426e2d8ebb6f42ad9e7b1ece030ad8894fa1778afb429430fb6f94c57e102222fd98a34b04ed07203ec0fa5cb7cbd58b6943f45a892d4b292451ec57475ab2c56500bf9bc32d9be682302a1f86011e0086364b5e6750aab894a8664c8318c0549dde81d0dbb1ca97d64ea94fa86f99552144c9bd71cf51d57afb8cdd25c5107f12cc7cdc439ab23cf021f8ba0b2e07c9f2f4745bd9d44fcbf44b9ae1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x13e8}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "ff0300", "e2b768b4bb9e0d9b"}, 0xffb1) (async) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) (async) fcntl$setflags(r0, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x3, 0x39) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r7) 13.848992168s ago: executing program 0 (id=54): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x10880, 0x0) mkdirat(r0, &(0x7f0000000000)='./config\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x1, 0x70bd25, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000040) (async, rerun: 32) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00') ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) (async) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000240)=@abs, &(0x7f0000000300)=0x6e, 0x80800) (async) write$cgroup_pid(r2, &(0x7f0000000180)=r3, 0xfffffe35) (async, rerun: 32) lseek(r2, 0xb, 0x0) (rerun: 32) getdents64(r2, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x0, 0x0) 13.777329875s ago: executing program 0 (id=57): mknod$loop(&(0x7f0000000140)='./file1\x00', 0xfff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x8, 0xbb, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='befs\x00', 0x18, &(0x7f0000000340)='debug') 13.710426417s ago: executing program 0 (id=58): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) io_uring_setup(0x5fcf, &(0x7f0000000000)={0x0, 0x901e, 0x8000, 0x8, 0x214}) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peekuser(0x3, r1, 0x388) syz_open_procfs(0x0, &(0x7f0000000440)='ns\x00') 13.280634326s ago: executing program 0 (id=66): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{}, {@dyn}]}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xffff, 0x1, @mcast2, 0x7}, 0x1c) getdents64(r0, &(0x7f0000000040)=""/24, 0x18) write(r1, &(0x7f0000000200)="89", 0xffe3) 3.015621795s ago: executing program 1 (id=172): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x69c4, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00906, 0x8, '\x00', @p_u8=&(0x7f0000000000)=0x6}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in6=@local}}, &(0x7f0000000680)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x24000, &(0x7f0000000900)={[{@clone_children}, {@cpuset_v2_mode}, {@nofavordynmods}, {@nofavordynmods}, {@none}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_measure}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@euid_eq={'euid', 0x3d, r1}}, {@euid_gt={'euid>', r2}}]}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) r3 = epoll_create1(0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x3ffffffd, 0x240) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000780)={r8, 0x2, 0x40000004, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0xfffffffc, 0x0, 0xfffffffc], [0x1, 0x0, 0x7, 0x401]}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r8, 0x9, 0xec, 0x3, 0x0, [], [0x4, 0x9, 0x40, 0x8c6a], [0x5, 0x0, 0x1, 0xb], [0x8, 0xf, 0x7fffffff, 0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) r11 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r11, &(0x7f0000000200)) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x2, {0x0, 0x2710}, {0x1, 0xc, 0xc, 0x6, 0x77, 0x6, '\t\x00\x00\b'}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) 2.109632482s ago: executing program 1 (id=177): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x63, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x5) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000200)={0x3, 0x0, [{0x80000001, 0x1, 0x6, 0x6, 0x0, 0xfffffff3, 0x7b}, {0x40000000, 0x200, 0x1, 0x6, 0x0, 0x1, 0x1}, {0x1, 0x8, 0x2, 0xe83, 0x100, 0x5, 0x3c7}]}) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000010180c20000000800450000200200000010119078ff"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) close(r3) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) file_setattr(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x3000, 0x6, 0xb, 0x1, 0x1}, 0x18, 0x1000) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.739438013s ago: executing program 1 (id=178): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000080)='/dev/mapper/control', 0x13) lseek(r2, 0x0, 0x0) read(r2, &(0x7f0000000100), 0x14) openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='cramfs\x00', 0x2020481, &(0x7f0000000200)=',,\'*+-,&]\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010100}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 1.18089628s ago: executing program 32 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @private=0xa010102}}}, 0x118) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="0000000000000000240012800900010069706970000000001400028008000100", @ANYRES32=r4, @ANYBLOB="0802001800000000"], 0x44}}, 0xc48c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010428bd7000fedbdf2500000000539dd2d9574def551509919b7b5a1ece6beba3974e929e8a952397eb0e4645065b3c9001865de83741b30e4e3ec16a1876b9ddc5379d3e5aee08e55957f61204c59c9be794f8fe2c71a09a58edd5e55243e7d76bfdea2994758ef6e1c356c43cc85e80bb8039a4d7ba7f6f252b3f0e6ccd2d3ce74c73629f69dc36b6268bc2006fa99ff294669f5e9f10160ba3198695bb210990be3274f22fff0001765f60389cd49ed414a6c366f5eb4675039f1eca061165edae4ba08c25b1cfd01d8ba9", @ANYRES32=r4, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c00028008000300ffffffff"], 0x3c}}, 0x24004801) socket$nl_route(0x10, 0x3, 0x0) 858.392769ms ago: executing program 1 (id=187): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) 579.985658ms ago: executing program 1 (id=190): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000140)='FROZEN\x00', 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@empty, @dev, 0x0}, &(0x7f0000000200)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@private, @local, 0x0}, &(0x7f0000000280)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x1, 0x5, {{0xa, 0x4, 0x2, 0x0, 0x28, 0x64, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x5e, 0x3, 0x7, [{@multicast2, 0x9}, {@multicast2, 0xa}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf4, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4008090}, 0x40) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000ac0)={&(0x7f00000005c0)=0xc40, 0x43f1, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000a80)}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) write(r9, &(0x7f0000000b00)="c7c8038455630cd96f24530f3e1ec09b662091c1dea26d2f88c5e32ddd3b75e2a00e49969a2724c210349025b8b91ec5bdce1e3d7d57659ff0d5a08d297c5aef7e290a2928cf53769f081159208205f10cb78b334a635bfd6a8e3fbbd80e61f992dd4a58c9d604a2139592c515615973ccaecc305e1c4c4684da874bb30014dc4462f4", 0x83) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000bc0), 0xe400, 0x0) ioctl$PPPIOCSACTIVE(r10, 0x40107446, &(0x7f0000000c40)={0x6, &(0x7f0000000c00)=[{0x6, 0x9, 0x8, 0x7}, {0x9, 0x1, 0x2, 0x1}, {0xb, 0xb5, 0x8, 0xb6000000}, {0x4, 0x5, 0xed, 0x1}, {0xf, 0x7, 0x61, 0x38}, {0x6, 0x8, 0x6, 0x5}]}) getsockname$unix(r1, &(0x7f0000000c80)=@abs, &(0x7f0000000d00)=0x6e) clock_nanosleep(0x6, 0x1, &(0x7f0000000d40), &(0x7f0000000d80)) pipe2$9p(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLOPEN(r11, &(0x7f0000000e00)={0x18, 0xd, 0x2, {{0x80, 0x0, 0x4}, 0x8}}, 0x18) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000e40)={0x0, 0x2, 0x6, 0x2}) ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f0000000e80)=0xb661000) write$cgroup_freezer_state(r2, &(0x7f0000000ec0)='FREEZING\x00', 0x9) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$PPPOEIOCSFWD(r12, 0x4008b100, &(0x7f0000000f40)={0x18, 0x0, {0x3, @remote, 'rose0\x00'}}) r13 = geteuid() getsockopt$PNPIPE_IFINDEX(r12, 0x113, 0x2, &(0x7f0000000fc0)=0x0, &(0x7f0000001000)=0x4) sendmsg$nl_xfrm(r12, &(0x7f0000001280)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)=@report={0x1cc, 0x20, 0x300, 0x70bd2b, 0x25dfdbfc, {0x2b, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@private=0xa010102, 0x4e22, 0x6000, 0x4e21, 0xfffe, 0xa, 0x80, 0x0, 0x6c, r6, r13}}, [@migrate={0x9c, 0x11, [{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6c, 0x3, 0x0, 0x3502, 0x2, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, @in=@empty, @in=@multicast1, @in=@private=0xa010101, 0xff, 0x3, 0x0, 0x0, 0xa, 0xa}]}, @algo_auth={0xd6, 0x1, {{'wp512\x00'}, 0x470, "e1475546191b12df23201db78adff44be729bad0ef1bade62554b0821727b8a0281e0412d94604ab1ceb160049638b6ad0f4f7b4da7818771340169a5592fec56bb33d480c641540c73a470acefbd906d79d1577582967ec02c16515c69ecd5b9688483bbd7493290be37047a7c512f43c177b2fc7532df2a7f8f6fcbf7a489bbbe9900eb6f3d8a23780f685264f"}}, @offload={0xc, 0x1c, {r14, 0x1}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 579.374757ms ago: executing program 1 (id=192): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @remote, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 487.951393ms ago: executing program 3 (id=193): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) setuid(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/test/cgroup.procs\x00', 0x0, 0xd) write(r5, &(0x7f0000000280)='0', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="60000000150000022abd7000fbdbdf25021f5100", @ANYRES32=r8, @ANYBLOB="08000100e000000208000100ac14141c08000a0002000000080004006401010008000200e00000010800722cc597fc3edcef99710200ac14143d080008002002000008000200ffffffff0800080004000000"], 0x60}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x5a, 0x0, 0x6, 0xfe, 0x10d2, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) write(r11, &(0x7f0000000200)='196\n\x00', 0x4) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48081) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) 487.01406ms ago: executing program 3 (id=194): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005"], 0x178}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x92948bafffb62bb3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r4, 0x4018aee3, &(0x7f0000000100)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0xa0a}) write(r1, &(0x7f0000000000)="41000200010007", 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x6) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 320.405359ms ago: executing program 3 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000040a800800140000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000800)={'batadv_slave_1\x00', &(0x7f00000007c0)=@ethtool_wolinfo={0xa, 0x0, 0x0, "2d51305d39af"}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000040a800800140000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000800)={'batadv_slave_1\x00', &(0x7f00000007c0)=@ethtool_wolinfo={0xa, 0x0, 0x0, "2d51305d39af"}}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) 215.645522ms ago: executing program 3 (id=196): r0 = socket$inet6(0xa, 0x1, 0x84) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x200, &(0x7f0000000640)={[{@gid}], [{@fsname={'fsname', 0x3d, '\\{&-)'}}]}) (async) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x200, &(0x7f0000000640)={[{@gid}], [{@fsname={'fsname', 0x3d, '\\{&-)'}}]}) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e24, 0x0, @empty, 0xfffffffc}, 0x1c) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x6, 0xd, 0x1, 0x0, "be2f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x6, 0xd, 0x1, 0x0, "be2f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0xffff7ffc}, 0x1c) close(r0) (async) close(r0) 100.103849ms ago: executing program 3 (id=197): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) unshare(0x8000000) 0s ago: executing program 3 (id=198): r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x20, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = epoll_create(0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x48, 0x0, r4, r4}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, r7, 0x801, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8040) shutdown(r5, 0x1) writev(r5, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) 0s ago: executing program 3 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myconfig/usb_gadget/g1/UDC\x00', 0x72) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="563cb6b7c7ae5fbd3030302c38383230302c3936303430302c3139323030302c33", 0x21) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') (async) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000000203030000000000000000000100000808000101000006090002000000000902000000"], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x6, 0x5, 0x6, 0x7, 0x6, 0x80000000, 0x3}) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) (async) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) kernel console output (not intermixed with test programs): [ 37.999545][ T42] audit: type=1400 audit(1786279917.431:117): avc: denied { siginh } for pid=5635 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.132492][ T42] audit: type=1400 audit(1786279917.581:118): avc: denied { write } for pid=5638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.192941][ T42] audit: type=1400 audit(1786279917.641:119): avc: denied { write } for pid=5643 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.298799][ T42] audit: type=1400 audit(1786279917.751:120): avc: denied { write } for pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:42629' (ED25519) to the list of known hosts. [ 42.341029][ T5684] cgroup: Unknown subsys name 'net' [ 42.508822][ T5684] cgroup: Unknown subsys name 'cpuset' [ 42.513815][ T5684] cgroup: Unknown subsys name 'rlimit' [ 42.699749][ T5714] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.475251][ T5684] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.811155][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 46.811174][ T42] audit: type=1400 audit(1786279926.261:158): avc: denied { execmem } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.976530][ T42] audit: type=1400 audit(1786279926.431:159): avc: denied { create } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.985756][ T42] audit: type=1400 audit(1786279926.431:160): avc: denied { read write } for pid=5722 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.993090][ T42] audit: type=1400 audit(1786279926.431:161): avc: denied { open } for pid=5722 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.000176][ T42] audit: type=1400 audit(1786279926.441:162): avc: denied { ioctl } for pid=5722 comm="syz-executor" path="socket:[1538]" dev="sockfs" ino=1538 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.014595][ T5739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.014840][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.015247][ T5737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.015969][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.017054][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.017518][ T5737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.019129][ T5739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.019699][ T5741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.019963][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.021892][ T5739] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.023460][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.025336][ T5738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.025998][ T5739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.026287][ T5739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.027892][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.032464][ T5738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.033436][ T5741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.033798][ T5741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.044935][ T42] audit: type=1400 audit(1786279926.481:163): avc: denied { read } for pid=5724 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.047005][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.048451][ T42] audit: type=1400 audit(1786279926.481:164): avc: denied { open } for pid=5724 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.051589][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.056769][ T42] audit: type=1400 audit(1786279926.491:165): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.093659][ T42] audit: type=1400 audit(1786279926.491:167): avc: denied { module_request } for pid=5725 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.100855][ T42] audit: type=1400 audit(1786279926.491:166): avc: denied { module_request } for pid=5724 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.625374][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.627716][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.629984][ T5724] bridge_slave_0: entered allmulticast mode [ 47.632961][ T5724] bridge_slave_0: entered promiscuous mode [ 47.655606][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.659515][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.662173][ T5724] bridge_slave_1: entered allmulticast mode [ 47.664977][ T5724] bridge_slave_1: entered promiscuous mode [ 47.728596][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.730968][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.733407][ T5722] bridge_slave_0: entered allmulticast mode [ 47.736187][ T5722] bridge_slave_0: entered promiscuous mode [ 47.740918][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.751947][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.756189][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.758557][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.760843][ T5725] bridge_slave_0: entered allmulticast mode [ 47.763502][ T5725] bridge_slave_0: entered promiscuous mode [ 47.767400][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.769775][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.773311][ T5722] bridge_slave_1: entered allmulticast mode [ 47.776323][ T5722] bridge_slave_1: entered promiscuous mode [ 47.790058][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.792354][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.795162][ T5725] bridge_slave_1: entered allmulticast mode [ 47.797945][ T5725] bridge_slave_1: entered promiscuous mode [ 47.837977][ T5722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.850688][ T5724] team0: Port device team_slave_0 added [ 47.853844][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.857894][ T5722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.875304][ T5724] team0: Port device team_slave_1 added [ 47.878359][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.919251][ T5722] team0: Port device team_slave_0 added [ 47.921154][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.923904][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.926466][ T5723] bridge_slave_0: entered allmulticast mode [ 47.929680][ T5723] bridge_slave_0: entered promiscuous mode [ 47.933148][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.935575][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.938300][ T5723] bridge_slave_1: entered allmulticast mode [ 47.941009][ T5723] bridge_slave_1: entered promiscuous mode [ 47.945720][ T5725] team0: Port device team_slave_0 added [ 47.948644][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.951038][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.959639][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.965249][ T5722] team0: Port device team_slave_1 added [ 47.981821][ T5725] team0: Port device team_slave_1 added [ 47.995065][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.997624][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.005987][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.016870][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.019607][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.029173][ T5722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.041165][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.043363][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.051500][ T5722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.071152][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.075927][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.079205][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.081415][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.089422][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.093724][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.096030][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.103925][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.149424][ T5723] team0: Port device team_slave_0 added [ 48.152647][ T5723] team0: Port device team_slave_1 added [ 48.157806][ T5724] hsr_slave_0: entered promiscuous mode [ 48.160107][ T5724] hsr_slave_1: entered promiscuous mode [ 48.176654][ T5722] hsr_slave_0: entered promiscuous mode [ 48.178915][ T5722] hsr_slave_1: entered promiscuous mode [ 48.181008][ T5722] debugfs: 'hsr0' already exists in 'hsr' [ 48.182947][ T5722] Cannot create hsr debugfs directory [ 48.199582][ T5725] hsr_slave_0: entered promiscuous mode [ 48.202268][ T5725] hsr_slave_1: entered promiscuous mode [ 48.204965][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 48.206825][ T5725] Cannot create hsr debugfs directory [ 48.215632][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.217819][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.225802][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.238928][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.241010][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.248658][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.358245][ T5723] hsr_slave_0: entered promiscuous mode [ 48.360523][ T5723] hsr_slave_1: entered promiscuous mode [ 48.362594][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 48.364399][ T5723] Cannot create hsr debugfs directory [ 48.573583][ T5724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.580376][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.583382][ T5724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.588171][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.593205][ T5724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.598254][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.601088][ T5724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.605602][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.646916][ T5725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.653293][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.657859][ T5725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.663367][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.670009][ T5725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.673984][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.676790][ T5725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.680554][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.740897][ T5723] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.746551][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.749263][ T5723] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.752864][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.756071][ T5723] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.760859][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.763535][ T5723] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.768291][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.839428][ T5722] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.845615][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.848510][ T5722] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.852091][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.855605][ T5722] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.859536][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.868961][ T5722] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.874878][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.888064][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.895230][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.919523][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.927715][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.941945][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.945324][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.951905][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.954855][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.977298][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.980305][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.989972][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.992910][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.020522][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.043285][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.056625][ T64] Bluetooth: hci1: command tx timeout [ 49.056628][ T5727] Bluetooth: hci3: command tx timeout [ 49.056635][ T5738] Bluetooth: hci2: command tx timeout [ 49.067830][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.070164][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.087682][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.089832][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.117026][ T5722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.135133][ T5738] Bluetooth: hci0: command tx timeout [ 49.138965][ T5722] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.150397][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.153376][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.169506][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.171811][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.318691][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.327117][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.354577][ T5724] veth0_vlan: entered promiscuous mode [ 49.367787][ T5724] veth1_vlan: entered promiscuous mode [ 49.381214][ T5725] veth0_vlan: entered promiscuous mode [ 49.387480][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.392333][ T5725] veth1_vlan: entered promiscuous mode [ 49.410013][ T5724] veth0_macvtap: entered promiscuous mode [ 49.421586][ T5724] veth1_macvtap: entered promiscuous mode [ 49.439006][ T5725] veth0_macvtap: entered promiscuous mode [ 49.446987][ T5722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.451393][ T5725] veth1_macvtap: entered promiscuous mode [ 49.458373][ T5723] veth0_vlan: entered promiscuous mode [ 49.462575][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.468419][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.477794][ T5723] veth1_vlan: entered promiscuous mode [ 49.499498][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.511652][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.542974][ T5723] veth0_macvtap: entered promiscuous mode [ 49.551406][ T5723] veth1_macvtap: entered promiscuous mode [ 49.566752][ T5722] veth0_vlan: entered promiscuous mode [ 49.586727][ T5722] veth1_vlan: entered promiscuous mode [ 49.593103][ T571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.596237][ T571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.599703][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.612866][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.632019][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.634997][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.643164][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.647160][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.673994][ T5722] veth0_macvtap: entered promiscuous mode [ 49.686100][ T571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.688678][ T571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.696767][ T5722] veth1_macvtap: entered promiscuous mode [ 49.704119][ T5724] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.707091][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.711327][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.727881][ T571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.728316][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.731032][ T571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.744591][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.797265][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.806592][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.824547][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.828946][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.854392][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.857523][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.858586][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.881233][ T5881] bond1 (unregistering): Released all slaves [ 49.907872][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.911241][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.925538][ T5802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.928391][ T5802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.931147][ T5802] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.933904][ T5802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.937962][ T5802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.940782][ T5802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.943620][ T5802] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.965685][ T5887] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 49.974759][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.977995][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.994816][ T5802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.998639][ T5802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.050692][ T5895] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.055608][ T5895] block device autoloading is deprecated and will be removed. [ 50.225639][ T5916] netlink: 'syz.3.12': attribute type 1 has an invalid length. [ 50.553289][ T5950] e1000e 0000:00:02.0 eth1: removed PHC [ 50.594725][ T5830] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.661156][ T5950] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 50.746287][ T5830] usb 5-1: New USB device found, idVendor=0582, idProduct=008b, bcdDevice= 0.40 [ 50.752616][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.756146][ T5830] usb 5-1: Product: ⥋餇쑗턾包넜‷峉ϑ﹎뀫࡫Ν滓킅﹑ߙಠ䯯魦㦉蔱顼᧮̎⌄召ビℬ豨垳䣀⥈뭆ྈ䁒㲫䏗靻뗇⭒췖弈 [ 50.763100][ T5830] usb 5-1: Manufacturer: ⹨ [ 50.766180][ T5830] usb 5-1: SerialNumber: 动⯥嘦뇚 [ 50.831772][ T5964] Unsupported ieee802154 address type: 0 [ 50.959232][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 50.986782][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.995465][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.018825][ T5830] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 51.070074][ T5994] dvmrp0: entered allmulticast mode [ 51.083537][ T5830] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 51.099618][ T5830] usb 5-1: USB disconnect, device number 2 [ 51.127229][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 51.135510][ T5738] Bluetooth: hci1: command tx timeout [ 51.137583][ T5738] Bluetooth: hci3: command tx timeout [ 51.138081][ T64] Bluetooth: hci2: command tx timeout [ 51.214894][ T64] Bluetooth: hci0: command tx timeout [ 51.546240][ T6027] dlm: no locking on control device [ 51.630505][ T6034] affs: No valid root block on device sr0 [ 51.710135][ T956] IPVS: starting estimator thread 0... [ 51.762845][ T6050] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.38'. [ 51.812081][ T6053] fuse: Bad value for 'user_id' [ 51.813681][ T6053] fuse: Bad value for 'user_id' [ 51.817246][ T6053] netlink: 'syz.0.39': attribute type 1 has an invalid length. [ 51.820117][ T6053] netlink: 224 bytes leftover after parsing attributes in process `syz.0.39'. [ 51.824722][ T6043] IPVS: using max 42 ests per chain, 100800 per kthread [ 51.832257][ T42] kauditd_printk_skb: 139 callbacks suppressed [ 51.832268][ T42] audit: type=1400 audit(1786279931.281:307): avc: denied { write } for pid=6054 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.947747][ T42] audit: type=1400 audit(1786279931.401:308): avc: denied { write } for pid=6059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.987804][ T42] audit: type=1400 audit(1786279931.441:309): avc: denied { write } for pid=6062 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.429311][ T6066] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 52.458516][ T6069] xt_hashlimit: overflow, rate too high: 1 [ 52.464251][ T42] audit: type=1400 audit(1786279931.911:310): avc: denied { ioctl } for pid=6068 comm="syz.3.41" path="socket:[10797]" dev="sockfs" ino=10797 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.464381][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 52.479136][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.482135][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.527315][ T42] audit: type=1400 audit(1786279931.981:311): avc: denied { mount } for pid=6070 comm="syz.3.42" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 52.534221][ T42] audit: type=1400 audit(1786279931.981:312): avc: denied { search } for pid=6070 comm="syz.3.42" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.544083][ T42] audit: type=1400 audit(1786279931.981:313): avc: denied { read write } for pid=6070 comm="syz.3.42" name="set_event" dev="tracefs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 52.551180][ T42] audit: type=1400 audit(1786279931.981:314): avc: denied { open } for pid=6070 comm="syz.3.42" path="/12/trace/set_event" dev="tracefs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 52.570373][ T42] audit: type=1400 audit(1786279932.021:315): avc: denied { open } for pid=6070 comm="syz.3.42" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 52.579015][ T42] audit: type=1400 audit(1786279932.021:316): avc: denied { ioctl } for pid=6070 comm="syz.3.42" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 52.590011][ T6048] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 52.646800][ T6080] program syz.1.45 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.669847][ T6080] libceph: resolve '0' (ret=-3): failed [ 52.739481][ T6091] syzkaller0: entered promiscuous mode [ 52.741738][ T6091] syzkaller0: entered allmulticast mode [ 52.918651][ T6109] input: syz0 as /devices/virtual/input/input5 [ 53.006432][ T6116] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 53.056513][ T6121] Console: switching to colour dummy device 80x25 [ 53.183013][ T6136] xt_hashlimit: size too large, truncated to 1048576 [ 53.214796][ T64] Bluetooth: hci1: command tx timeout [ 53.214844][ T5738] Bluetooth: hci3: command tx timeout [ 53.225292][ T5738] Bluetooth: hci2: command tx timeout [ 53.234811][ T6138] netlink: 52 bytes leftover after parsing attributes in process `syz.1.61'. [ 53.294746][ T5738] Bluetooth: hci0: command tx timeout [ 53.374867][ T2316] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.419435][ T6150] syz.1.65 uses obsolete (PF_INET,SOCK_PACKET) [ 53.422479][ T6150] netlink: 'syz.1.65': attribute type 10 has an invalid length. [ 53.425034][ T6151] netlink: 'syz.1.65': attribute type 10 has an invalid length. [ 53.439164][ T6150] team0: Port device dummy0 added [ 53.525454][ T2316] usb 8-1: Using ep0 maxpacket: 8 [ 53.528424][ T2316] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 53.534391][ T2316] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 53.543398][ T2316] usb 8-1: config 0 has no interface number 0 [ 53.548737][ T2316] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 53.552227][ T2316] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.558454][ T2316] usb 8-1: config 0 descriptor?? [ 53.585662][ T2316] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 53.606353][ T6158] binder: 6157:6158 ioctl c0306201 200000000080 returned -14 [ 53.719144][ T6166] netlink: 'syz.1.71': attribute type 7 has an invalid length. [ 53.770247][ T6125] : Can't lookup blockdev [ 53.790541][ T6170] netlink: Unknown conntrack attr (type=8711, max=9) [ 53.793163][ T6170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 53.839778][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 54.089830][ T6185] binder: BC_ACQUIRE_RESULT not supported [ 54.091735][ T6185] binder: 6184:6185 ioctl c0306201 2000000003c0 returned -22 [ 54.271169][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 54.274069][ T6190] netlink: 'syz.1.79': attribute type 10 has an invalid length. [ 54.278812][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 55.299223][ T5738] Bluetooth: hci2: command tx timeout [ 55.299245][ T5727] Bluetooth: hci1: command tx timeout [ 55.303114][ T64] Bluetooth: hci3: command tx timeout [ 55.376480][ T64] Bluetooth: hci0: command 0x0419 tx timeout [ 55.735240][ T6230] ip_tables: iptables: counters copy to user failed while replacing table [ 56.015207][ T2316] usb 8-1: USB disconnect, device number 2 [ 56.479946][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 56.485899][ T6264] netlink: 'syz.1.93': attribute type 10 has an invalid length. [ 56.491574][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 56.919042][ T42] kauditd_printk_skb: 70 callbacks suppressed [ 56.919056][ T42] audit: type=1400 audit(1786279936.371:387): avc: denied { create } for pid=6268 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.947171][ T42] audit: type=1400 audit(1786279936.401:388): avc: denied { write } for pid=6268 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.022944][ T42] audit: type=1400 audit(1786279936.471:389): avc: denied { read write } for pid=6271 comm="syz.1.96" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.040025][ T42] audit: type=1400 audit(1786279936.481:390): avc: denied { open } for pid=6271 comm="syz.1.96" path="/dev/dri/renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.056711][ T42] audit: type=1400 audit(1786279936.481:391): avc: denied { ioctl } for pid=6271 comm="syz.1.96" path="/dev/dri/renderD128" dev="devtmpfs" ino=634 ioctlcmd=0x6415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.111124][ T6274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6274 comm=syz.1.97 [ 57.131137][ T6275] macsec1: entered allmulticast mode [ 57.135531][ T6275] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 57.140758][ T6275] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 57.145167][ T6275] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 57.270734][ T42] audit: type=1400 audit(1786279936.721:392): avc: denied { write } for pid=6276 comm="syz.3.98" name="mcfilter6" dev="proc" ino=4026533258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 57.454711][ T64] Bluetooth: hci0: command 0x0419 tx timeout [ 57.591834][ T42] audit: type=1400 audit(1786279937.041:393): avc: denied { create } for pid=6290 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 57.600859][ T42] audit: type=1400 audit(1786279937.041:394): avc: denied { getopt } for pid=6290 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 57.728653][ T42] audit: type=1400 audit(1786279937.181:395): avc: denied { search } for pid=5435 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.743903][ T42] audit: type=1400 audit(1786279937.181:396): avc: denied { search } for pid=5435 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.779245][ T6298] Zero length message leads to an empty skb [ 57.882163][ T5435] veth0_vlan: left promiscuous mode [ 57.894301][ T5830] veth0_vlan: entered promiscuous mode [ 58.018398][ T6312] netlink: 108 bytes leftover after parsing attributes in process `syz.3.104'. [ 58.057751][ T6318] netlink: 'syz.3.105': attribute type 15 has an invalid length. [ 58.100507][ T6324] netlink: 'syz.3.106': attribute type 10 has an invalid length. [ 58.104356][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.106837][ T6324] bridge0: port 2(bridge_slave_1) entered listening state [ 58.110800][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.114212][ T6324] bridge0: port 1(bridge_slave_0) entered listening state [ 58.137229][ T6324] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 58.319227][ T6328] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.107'. [ 58.346475][ T6328] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.107'. [ 58.391422][ T6332] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 59.328845][ T6347] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 59.331551][ T6347] UDF-fs: Scanning with blocksize 2048 failed [ 59.335798][ T6347] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 59.338373][ T6347] UDF-fs: Scanning with blocksize 4096 failed [ 59.372260][ T6349] fuse: Unknown parameter 'rootmote-0000000' [ 59.463004][ T6355] netlink: 48 bytes leftover after parsing attributes in process `syz.1.117'. [ 59.472507][ T6354] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.530827][ T6358] syz.1.118 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 59.555604][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 59.558733][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 59.592919][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 59.597742][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 59.601196][ T6363] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 59.643182][ T6358] ceph: No mds server is up or the cluster is laggy [ 59.671324][ T6363] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 59.993750][ T6386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6386 comm=syz.3.122 [ 60.001114][ T6386] ip6t_srh: unknown srh match flags 4000 [ 60.004725][ T848] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.157308][ T848] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 60.161321][ T848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.162884][ T6394] batman_adv: batadv0: Adding interface: macvtap1 [ 60.166489][ T6394] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.174036][ T6394] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 60.178904][ T848] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 60.196188][ T848] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 60.397866][ T6373] nfsd: exp_rootfh path not found \ [ 60.575032][ T6410] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 60.785730][ T6371] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 60.789702][ T848] usb 6-1: USB disconnect, device number 2 [ 60.805347][ T848] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 60.811496][ T848] spcp8x5 6-1:1.0: device disconnected [ 61.075574][ T6424] binder: BC_ATTEMPT_ACQUIRE not supported [ 61.077462][ T6424] binder: 6423:6424 ioctl c0306201 200000000000 returned -22 [ 61.132857][ T6426] tmpfs: Unknown parameter '00000000000000000000' [ 61.611619][ T6444] exFAT-fs (nullb0): invalid boot record signature [ 61.625681][ T6444] exFAT-fs (nullb0): failed to read boot sector [ 61.630332][ T6444] exFAT-fs (nullb0): failed to recognize exfat type [ 61.781593][ T6450] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 61.786049][ T6452] dlm: no local IP address has been set [ 61.788975][ T6452] dlm: cannot start dlm midcomms -107 [ 61.946138][ T42] kauditd_printk_skb: 63 callbacks suppressed [ 61.946160][ T42] audit: type=1400 audit(1786279941.464:460): avc: denied { watch } for pid=6462 comm="syz.3.145" path="/51/file0" dev="overlay" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.966661][ T6463] evm: overlay not supported [ 61.989389][ T6465] block device autoloading is deprecated and will be removed. [ 62.058258][ T42] audit: type=1400 audit(1786279941.574:461): avc: denied { create } for pid=6468 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 62.075117][ T42] audit: type=1400 audit(1786279941.574:462): avc: denied { name_bind } for pid=6468 comm="syz.1.148" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 62.095158][ T42] audit: type=1400 audit(1786279941.594:463): avc: denied { setopt } for pid=6466 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.187677][ T42] audit: type=1400 audit(1786279941.704:464): avc: denied { prog_load } for pid=6471 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.204682][ T42] audit: type=1400 audit(1786279941.704:465): avc: denied { prog_run } for pid=6471 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.224440][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 62.273993][ T42] audit: type=1400 audit(1786279941.784:466): avc: denied { create } for pid=6477 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.288082][ T42] audit: type=1400 audit(1786279941.794:467): avc: denied { connect } for pid=6477 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.299231][ T42] audit: type=1400 audit(1786279941.794:468): avc: denied { write } for pid=6477 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.474466][ T42] audit: type=1400 audit(1786279941.984:469): avc: denied { map_read map_write } for pid=6481 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.519964][ T6487] process 'syz.3.153' launched './file0' with NULL argv: empty string added [ 62.759037][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 62.768695][ T6502] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 62.778385][ T6501] sctp: [Deprecated]: syz.1.159 (pid 6501) Use of int in maxseg socket option. [ 62.778385][ T6501] Use struct sctp_assoc_value instead [ 62.865978][ T6507] loop7: detected capacity change from 0 to 7 [ 62.874924][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.878090][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.881234][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.884318][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.887513][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.890694][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.893762][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.896840][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.901279][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.904347][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.907163][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.910277][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.913128][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.916160][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.920525][ T6507] ldm_validate_partition_table(): Disk read failed. [ 62.924124][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.927354][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.930796][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.933892][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.936769][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.939824][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.942871][ T6507] Dev loop7: unable to read RDB block 0 [ 62.945406][ T6507] loop7: unable to read partition table [ 62.947498][ T6507] loop7: partition table beyond EOD, truncated [ 62.953291][ T6507] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 62.972381][ T6508] ldm_validate_partition_table(): Disk read failed. [ 62.986762][ T6508] Dev loop7: unable to read RDB block 0 [ 62.989808][ T6508] loop7: unable to read partition table [ 62.991816][ T6508] loop7: partition table beyond EOD, truncated [ 63.066903][ T6510] ======================================================= [ 63.066903][ T6510] WARNING: The mand mount option has been deprecated and [ 63.066903][ T6510] and is ignored by this kernel. Remove the mand [ 63.066903][ T6510] option from the mount to silence this warning. [ 63.066903][ T6510] ======================================================= [ 63.122872][ T6517] 9pnet_virtio: no channels available for device syz [ 63.195535][ T6519] loop4: detected capacity change from 0 to 7 [ 63.537371][ T6544] netlink: 'syz.1.169': attribute type 21 has an invalid length. [ 63.539957][ T6544] netlink: 156 bytes leftover after parsing attributes in process `syz.1.169'. [ 63.620051][ T6551] ata1.00: invalid cdb length 6 [ 63.818868][ T6560] use of bytesused == 0 is deprecated and will be removed in the future, [ 63.825893][ T6560] use the actual size instead. [ 63.972090][ T6572] netlink: 'syz.3.173': attribute type 2 has an invalid length. [ 63.993184][ T6572] : entered promiscuous mode [ 64.040859][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 64.106438][ T6587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.175'. [ 64.109426][ T6587] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 64.349192][ T6587] mmap: syz.3.175 (6587) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.543156][ T6611] netlink: 'syz.3.176': attribute type 10 has an invalid length. [ 64.727569][ T6628] warning: `syz.1.177' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.073879][ T6634] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 65.114206][ T6636] openvswitch: netlink: Message has 8 unknown bytes. [ 65.468243][ T6643] aoe: error packet from 25957.122@lo; ecode=101 'no such error' [ 65.470658][ T6643] aoe: error packet from 25957.122@lo; ecode=101 'no such error' [ 65.473861][ T6643] aoe: error packet from 25957.122@lo; ecode=101 'no such error' [ 65.476335][ T6643] aoe: error packet from 25957.122@lo; ecode=101 'no such error' [ 65.478723][ T6643] aoe: error packet from 25957.122@lo; ecode=101 'no such error' [ 65.481087][ T6643] aoe: error packet from 25957.122@lo; ecode=101 'no such error' [ 65.483482][ T6643] aoe: error packet from 25957.122@lo; ecode=101 'no such error' [ 65.485878][ T6643] aoe: error packet from 25957.122@lo; ecode=101 'no such error' [ 65.681658][ T5727] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.693354][ T5727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.697008][ T5727] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.700095][ T5727] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.709397][ T5727] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.813653][ T6660] netlink: 52 bytes leftover after parsing attributes in process `syz.3.185'. [ 66.025615][ T5802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.130114][ T5802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.217573][ T5802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.334125][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.336653][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.338997][ T6648] bridge_slave_0: entered allmulticast mode [ 66.342432][ T6648] bridge_slave_0: entered promiscuous mode [ 66.346864][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.349161][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.351378][ T6648] bridge_slave_1: entered allmulticast mode [ 66.354331][ T6648] bridge_slave_1: entered promiscuous mode [ 66.373061][ T5802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.394174][ T6648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.403903][ T6648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.441409][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.195'. [ 66.455798][ T6648] team0: Port device team_slave_0 added [ 66.461300][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 66.465767][ T6648] team0: Port device team_slave_1 added [ 66.471857][ T6703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.195'. [ 66.545966][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.550531][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.560642][ T6648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.566791][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.569015][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.578000][ T6648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.637670][ T5802] bridge_slave_1: left allmulticast mode [ 66.640522][ T5802] bridge_slave_1: left promiscuous mode [ 66.643884][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.673945][ T5802] bridge_slave_0: left allmulticast mode [ 66.676890][ T5802] bridge_slave_0: left promiscuous mode [ 66.679716][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.872730][ T5802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.883544][ T5802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.888843][ T5802] bond0 (unregistering): Released all slaves [ 66.918598][ T6648] hsr_slave_0: entered promiscuous mode [ 66.921565][ T6648] hsr_slave_1: entered promiscuous mode [ 66.924305][ T6648] debugfs: 'hsr0' already exists in 'hsr' [ 66.926801][ T6648] Cannot create hsr debugfs directory [ 67.011637][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 67.011650][ T42] audit: type=1400 audit(1786279946.524:503): avc: denied { write } for pid=6721 comm="syz.3.199" name="configs" dev="configfs" ino=12477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.014017][ T6722] ================================================================== [ 67.022640][ T6722] BUG: KASAN: invalid-free in f_uac2_opts_c_srate_store+0x1d4/0x260 [ 67.022736][ T42] audit: type=1400 audit(1786279946.524:504): avc: denied { write } for pid=6721 comm="syz.3.199" name="functions" dev="configfs" ino=12476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.025104][ T6722] Free of addr ffff88805651e00c by task syz.3.199/6722 [ 67.025116][ T6722] [ 67.025133][ T6722] CPU: 0 UID: 0 PID: 6722 Comm: syz.3.199 Not tainted syzkaller #0 PREEMPT(full) [ 67.025146][ T6722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.025160][ T6722] Call Trace: [ 67.025179][ T6722] [ 67.025183][ T6722] dump_stack_lvl+0x100/0x190 [ 67.025253][ T6722] print_report+0x13d/0x4b0 [ 67.025284][ T6722] ? __virt_addr_valid+0x239/0x430 [ 67.025320][ T6722] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 67.025336][ T6722] kasan_report_invalid_free+0xb8/0x190 [ 67.025368][ T6722] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 67.025385][ T6722] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 67.025400][ T6722] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 67.025416][ T6722] check_slab_allocation+0xe1/0xf0 [ 67.025429][ T6722] ? f_uac2_opts_c_srate_store+0x1a0/0x260 [ 67.025445][ T6722] kfree+0x1b6/0x6c0 [ 67.025455][ T6722] ? __asan_memcpy+0x3c/0x60 [ 67.025467][ T6722] f_uac2_opts_c_srate_store+0x1d4/0x260 [ 67.025484][ T6722] ? __pfx_f_uac2_opts_c_srate_store+0x10/0x10 [ 67.025501][ T6722] ? configfs_write_iter+0x388/0x4e0 [ 67.025542][ T6722] configfs_write_iter+0x302/0x4e0 [ 67.025557][ T6722] vfs_write+0x6ac/0x1050 [ 67.025568][ T6722] ? __pfx_configfs_write_iter+0x10/0x10 [ 67.025582][ T6722] ? __pfx_vfs_write+0x10/0x10 [ 67.025596][ T6722] ksys_write+0x12a/0x250 [ 67.025606][ T6722] ? __pfx_ksys_write+0x10/0x10 [ 67.025617][ T6722] do_syscall_64+0x115/0x870 [ 67.025640][ T6722] ? clear_bhb_loop+0x70/0xc0 [ 67.025653][ T6722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.025665][ T6722] RIP: 0033:0x7fb953b9e0d9 [ 67.025675][ T6722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.025686][ T6722] RSP: 002b:00007fb954a74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.025713][ T6722] RAX: ffffffffffffffda RBX: 00007fb953e25fa0 RCX: 00007fb953b9e0d9 [ 67.025720][ T6722] RDX: 0000000000000021 RSI: 0000200000000080 RDI: 0000000000000003 [ 67.025726][ T6722] RBP: 00007fb953c35024 R08: 0000000000000000 R09: 0000000000000000 [ 67.025733][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.025739][ T6722] R13: 00007fb953e26038 R14: 00007fb953e25fa0 R15: 00007ffee913a4a8 [ 67.025749][ T6722] [ 67.025753][ T6722] [ 67.038730][ T42] audit: type=1400 audit(1786279946.524:505): avc: denied { write } for pid=6721 comm="syz.3.199" name="c_srate" dev="configfs" ino=13018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 67.040285][ T6722] Allocated by task 6722: [ 67.040304][ T6722] kasan_save_stack+0x30/0x50 [ 67.040323][ T6722] kasan_save_track+0x14/0x30 [ 67.045580][ T42] audit: type=1400 audit(1786279946.524:506): avc: denied { open } for pid=6721 comm="syz.3.199" path="/83/myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=13018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 67.046267][ T6722] __kasan_kmalloc+0xaa/0xb0 [ 67.129574][ T6722] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 67.131541][ T6722] kstrdup+0x51/0xe0 [ 67.132746][ T6722] f_uac2_opts_c_srate_store+0x113/0x260 [ 67.134399][ T6722] configfs_write_iter+0x302/0x4e0 [ 67.135894][ T6722] vfs_write+0x6ac/0x1050 [ 67.137213][ T6722] ksys_write+0x12a/0x250 [ 67.138522][ T6722] do_syscall_64+0x115/0x870 [ 67.140153][ T6722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.141999][ T6722] [ 67.142734][ T6722] The buggy address belongs to the object at ffff88805651e000 [ 67.142734][ T6722] which belongs to the cache kmalloc-64 of size 64 [ 67.146859][ T6722] The buggy address is located 12 bytes inside of [ 67.146859][ T6722] 34-byte region [ffff88805651e000, ffff88805651e022) [ 67.150749][ T6722] [ 67.151517][ T6722] The buggy address belongs to the physical page: [ 67.153421][ T6722] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5651e [ 67.156028][ T6722] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 67.158142][ T6722] page_type: f5(slab) [ 67.159354][ T6722] raw: 00fff00000000000 ffff88801bc428c0 dead000000000100 dead000000000122 [ 67.161981][ T6722] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 67.164580][ T6722] page dumped because: kasan: bad access detected [ 67.166535][ T6722] page_owner tracks the page as allocated [ 67.168250][ T6722] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5722, tgid 5722 (syz-executor), ts 48291243328, free_ts 0 [ 67.174363][ T6722] post_alloc_hook+0xfd/0x120 [ 67.175787][ T6722] get_page_from_freelist+0xf48/0x3530 [ 67.177452][ T6722] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 67.179203][ T6722] new_slab+0xa2/0x640 [ 67.180483][ T6722] refill_objects+0xe3/0x410 [ 67.181890][ T6722] __pcs_replace_empty_main+0x376/0x680 [ 67.183531][ T6722] __kmalloc_cache_noprof+0x479/0x6c0 [ 67.185181][ T6722] __netdev_adjacent_dev_insert+0x22b/0xbf0 [ 67.187006][ T6722] __netdev_upper_dev_link+0x413/0x7e0 [ 67.188740][ T6722] netdev_upper_dev_link+0x91/0xc0 [ 67.190326][ T6722] virt_wifi_newlink+0x435/0x840 [ 67.191842][ T6722] rtnl_newlink+0x1499/0x2380 [ 67.193526][ T6722] rtnetlink_rcv_msg+0x95e/0xe90 [ 67.195048][ T6722] netlink_rcv_skb+0x159/0x420 [ 67.196554][ T6722] netlink_unicast+0x585/0x850 [ 67.198038][ T6722] netlink_sendmsg+0x8b0/0xda0 [ 67.199481][ T6722] page_owner free stack trace missing [ 67.201093][ T6722] [ 67.201865][ T6722] Memory state around the buggy address: [ 67.203528][ T6722] ffff88805651df00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 67.206001][ T6722] ffff88805651df80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 67.208552][ T6722] >ffff88805651e000: 00 00 00 00 02 fc fc fc fc fc fc fc fc fc fc fc [ 67.211003][ T6722] ^ [ 67.212325][ T6722] ffff88805651e080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 67.214955][ T6722] ffff88805651e100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 67.217350][ T6722] ================================================================== [ 67.231042][ T42] audit: type=1400 audit(1786279946.744:507): avc: denied { read } for pid=5115 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 67.261801][ T42] audit: type=1400 audit(1786279946.744:508): avc: denied { search } for pid=5115 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.282460][ T6722] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 67.284670][ T6722] CPU: 0 UID: 0 PID: 6722 Comm: syz.3.199 Not tainted syzkaller #0 PREEMPT(full) [ 67.287350][ T6722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.290358][ T6722] Call Trace: [ 67.291398][ T6722] [ 67.292331][ T6722] dump_stack_lvl+0x100/0x190 [ 67.293801][ T6722] vpanic+0x552/0x970 [ 67.295077][ T6722] ? __pfx_vpanic+0x10/0x10 [ 67.296512][ T6722] ? mark_held_locks+0x40/0x70 [ 67.297958][ T6722] panic+0xd1/0xe0 [ 67.299188][ T6722] ? __pfx_panic+0x10/0x10 [ 67.300726][ T6722] ? preempt_schedule_common+0x42/0xc0 [ 67.302448][ T6722] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 67.304370][ T6722] ? check_panic_on_warn+0x1f/0x90 [ 67.306076][ T6722] check_panic_on_warn.cold+0x19/0x34 [ 67.307797][ T6722] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 67.309673][ T6722] end_report.part.0+0x3a/0x90 [ 67.311205][ T6722] kasan_report_invalid_free.cold+0xd/0x12 [ 67.313078][ T6722] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 67.314953][ T6722] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 67.316783][ T6722] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 67.318508][ T6722] check_slab_allocation+0xe1/0xf0 [ 67.320040][ T6722] ? f_uac2_opts_c_srate_store+0x1a0/0x260 [ 67.322052][ T6722] kfree+0x1b6/0x6c0 [ 67.323292][ T6722] ? __asan_memcpy+0x3c/0x60 [ 67.324760][ T6722] f_uac2_opts_c_srate_store+0x1d4/0x260 [ 67.326534][ T6722] ? __pfx_f_uac2_opts_c_srate_store+0x10/0x10 [ 67.328476][ T6722] ? configfs_write_iter+0x388/0x4e0 [ 67.330151][ T6722] configfs_write_iter+0x302/0x4e0 [ 67.331809][ T6722] vfs_write+0x6ac/0x1050 [ 67.333188][ T6722] ? __pfx_configfs_write_iter+0x10/0x10 [ 67.334945][ T6722] ? __pfx_vfs_write+0x10/0x10 [ 67.336480][ T6722] ksys_write+0x12a/0x250 [ 67.337844][ T6722] ? __pfx_ksys_write+0x10/0x10 [ 67.339383][ T6722] do_syscall_64+0x115/0x870 [ 67.340851][ T6722] ? clear_bhb_loop+0x70/0xc0 [ 67.342659][ T6722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.344757][ T6722] RIP: 0033:0x7fb953b9e0d9 [ 67.346182][ T6722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.352184][ T6722] RSP: 002b:00007fb954a74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.354781][ T6722] RAX: ffffffffffffffda RBX: 00007fb953e25fa0 RCX: 00007fb953b9e0d9 [ 67.357267][ T6722] RDX: 0000000000000021 RSI: 0000200000000080 RDI: 0000000000000003 [ 67.359730][ T6722] RBP: 00007fb953c35024 R08: 0000000000000000 R09: 0000000000000000 [ 67.362213][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.364709][ T6722] R13: 00007fb953e26038 R14: 00007fb953e25fa0 R15: 00007ffee913a4a8 [ 67.367216][ T6722] [ 67.368727][ T6722] Kernel Offset: disabled [ 67.370106][ T6722] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:52:26 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81e8c30e RDX=0000000000000001 RSI=0000000000000000 RDI=ffff8880277a8000 RBP=0000000000000001 RSP=ffffc9000c40f8e8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92001881f20 R13=0000000000000000 R14=ffff88801cf98000 R15=ffffc9000c40f9b8 RIP=ffffffff820a6c70 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb954a746c0 ffffffff 00c00000 GS =0000 ffff8880d5dec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb953a70000 CR3=000000002a316000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000007 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee913a996 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee913a996 00007ffee913a99c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb953c35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb953c35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb953c357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb953c35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb953df25f8 00007fb953df25c8 00007fb953df2600 00007fb953df25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000016 0000000000000000 0000000000000000 000000000001e7ac ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff888056491c80 RBX=ffff888056491c80 RCX=ffffffff81f62553 RDX=ffff88801f69ca80 RSI=ffffffff89b865fa RDI=0000000000000001 RBP=ffff88801f69d608 RSP=ffffc90000677c18 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff888056491d38 R13=ffffffff89b865e0 R14=ffff88806a528840 R15=ffff888056491d38 RIP=ffffffff81d5c6d0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffffffffffff CR3=000000003b3db000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee913a996 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee913a996 00007ffee913a99c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb953c35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb953c35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb953c357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb953c35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000c4cf36a5 RBX=ffff88802b388bc8 RCX=0000000000000100 RDX=000000003d679ef3 RSI=000000009179e0c5 RDI=000000000a124913 RBP=ffff88802b388000 RSP=ffffc900031b7b90 R8 =00000000691b0ea1 R9 =000000000000004e R10=0000000000008000 R11=0000000000000000 R12=3f471710c4cf36a5 R13=0000000000000001 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff81e5efaf RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557d213500 ffffffff 00c00000 GS =0000 ffff8880d5fec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb3fd5cb6b0 CR3=00000000484aa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e72656b2f737973 5f796d2f32312f2e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c656e72656b2f73 79735f796d2f3231 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1f3941a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1f3941a6 00007ffe1f3941ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f504c635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f504c635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f504c6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f504c635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a34dc5 RDI=ffffffff9b9f7ec0 RBP=ffffffff9b9f7e80 RSP=ffffc900007af838 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9b6ea25b R15=ffffffff85a34d60 RIP=ffffffff85a34def RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3a76b8 CR3=000000003b3db000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e1d6cb8600 000055e1d6cb8600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb1d171e0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666769666e6f633a 725f7463656a626f 3a755f6d65747379 733d747865746e6f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 637420745f6d6461 7379733a725f6d64 617379733a746f6f 723d747865746e6f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373203737343231 3d6f6e6920227366 6769666e6f63223d 7665642022736769 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666e6f63223d656d 616e20223939312e 332e7a7973223d6d 6d6f632031323736 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000