last executing test programs: 18.780150808s ago: executing program 3 (id=112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RSYMLINK(r1, &(0x7f00000002c0)={0x14, 0x11, 0x2, {0xa4, 0x0, 0x1}}, 0x14) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0xc, 0x3, 0x1, 0x0, [{0x2}, {0x5, 0x0, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x5, '\x00', 0x7}, {0x1, 0x9, 0x0, '\x00', 0x74}, {0xc, 0x3, 0x5}, {0xb8, 0xda, 0xe, '\x00', 0x9c}, {0xb, 0x1, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x4, 0x6, 0x4, '\x00', 0x8}, {0xfe, 0x5, 0xd, '\x00', 0xa}, {0x2, 0x4b, 0x45, '\x00', 0xc0}, {0xd2, 0xab, 0x8, '\x00', 0x3}, {0x7, 0x4, 0xfe, '\x00', 0x85}, {0x5, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x0, 0x6, '\x00', 0x9}, {0x1b, 0x9, 0x7, '\x00', 0x4}, {0x4, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x8, '\x00', 0x1}, {0x8, 0x10, 0x80}, {0x3, 0x3, 0x2, '\x00', 0x87}, {0x9, 0x3, 0xa, '\x00', 0x8}, {0xe0, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x3, 0x4, '\x00', 0x7f}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000006c0)={0x8, 0x3, {0xb, @struct={0x5, 0x5}, 0x0, 0x5, 0xc6d, 0x4680, 0x1178, 0x2, 0x41, @usage, 0x100, 0x4, [0x3, 0x2, 0x5, 0x9, 0x5, 0x2]}, {0xf, @usage=0x80000001, 0x0, 0x5, 0x6df, 0xa, 0x154b33e6, 0x0, 0x40, @struct={0x7, 0x1}, 0x3, 0x30, [0x473, 0x0, 0x6, 0x100, 0x6a4, 0x3]}, {0xda, @usage=0x275530a6, 0x0, 0xffffffffffffffff, 0x7, 0x1, 0x7e, 0x101, 0x80, @usage=0x1000, 0x3, 0x9, [0x5f8000000, 0x10000, 0x50, 0xfffffffffffffc57, 0x9, 0x4]}, {0x6, 0xd1, 0x10001}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000ac0)={r5, 0x6, 0x9, 0x1}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 18.597324037s ago: executing program 3 (id=115): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 32) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TCSETAF(r0, 0x8926, &(0x7f0000000780)={0x4, 0x4, 0x577d, 0xc1, 0x3, "51fed8089f0bd95e"}) (async, rerun: 64) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101880) (rerun: 64) read(r1, &(0x7f00000002c0)=""/180, 0xb4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x10000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl(r2, 0x6, &(0x7f00000004c0)="1bb5085079984e54ad91aaf9c07a31bd4991e39fe5bcd796f470ff56a4406617620368a3e6594ae0f6a299d7b7fe02fe68c4df3ef57dc9b655acb50e4cfc0087be309fbcc1fd0f9b992a097389f0e2ce211ab1c2f3edf70c2ea0f982b4fd06154b117f2b38e365847f89c2b5ced6dffbd6380f0c00648ebcaa7527f18ed8931c9d85549a6d379307de2a3fed1cba31910ba64fca035a7ee09fdd9889830d68f1190c9c8882ba43ee8ff3768a06ea54c12135810ded1cab1ceb996a62699e1ea10a95c3b50440b8a192e4b27c49eb489777f78fc77370f4c03fed528c58832e30044df7673986dd7f01fea9268ee02292a5") (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0xea6, 0x3, 0xf9, 0x6}, {0xb0, 0xc, 0x87, 0x9}, {0x5, 0x1, 0x24, 0x8}, {0xffff, 0x8, 0x4}]}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000abc000000060a0b0400000000000000000200000000000b4000000003730007406a7130515ab3b1b75a2fa545cb8212617dfaddc00498774857f0f6f626c483b61a77f9d641ff94bd568b3eca64cae3617dd386f2c1ee3dbc7e6ec8041d99c003d99e1e6a1081780d07865df898d9d8259cd33280ff8eda755f3790965c0a9fb6a6a22ec2e83ea87ef942a963f9d4ffd3cd0c0b698f6cf699231a72c76bd84d500028000480240001800b000100657874686472000014c21e52570000000000005f00064000000001140000001100010000000000000000"], 0xe4}}, 0x8080) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 18.490849335s ago: executing program 3 (id=119): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r2, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x0, 0x5, 0x87, 0x3]}, &(0x7f0000000140)=0x54) syz_clone(0x20940200, 0x0, 0x9, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) 18.340886447s ago: executing program 3 (id=122): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@rose, @rose, @rose, @rose, @default, @null, @netrom, @null]}, &(0x7f0000000080)=0x48) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f00000000c0)=0x3ff, 0x4) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000100)=0x2, 0x4) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000140), 0x4) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000180)=0xfff, 0x4) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f00000001c0)=0x336, 0x4) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) r2 = memfd_create(&(0x7f0000000240)='}\x00', 0x0) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000280)={r2, 0x0, 0xfffff000, 0x100000000}) vmsplice(r3, &(0x7f0000001580)=[{&(0x7f00000002c0)="f6a451e33433a83505f33d9a80872faf19a8d9d6848e885d423a62c1b86ccf574962c81fc25a454a8e71a83bb2cd0c08e1e1803a207695fc8ea0cacb510c7345993edf395c896b116965fe48cf2d2e61d4e4913c0743b1fa5b7998a6c12e1d895f4d28f723ad4a97cf2c7a82f856b53c2911ecf789fcc263c09f321362d2ce96aa33dc53be345eae72da295271a8bc4d6d0136b7dda996b3a71cdfb8ee9d51d3418054cdb1b584c9ad4e52996b0642abf855821e50e09f4cfdf38988d2239010c76edff2b8364fb398b4", 0xca}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="f5281dd398302bc29337f72a39de13831649d1f910f5c5b1d565906454facc46c1fa9eed89c4cd56e07ce0b841dd6ae587c75423dacb2572ddebd0af5c73864ef32c61d64acf5f21e93e8ddd165121c2f176917d6d001d100e52d6af75414812d9", 0x61}, {&(0x7f0000001440)="49d5938e153fe6cf6b6d49e6c76117d805418aca43e0594faefdd8eca2c62b7d29c5be81da7aa18aafb7bebc21602f4131514cc41d075d854ddbd22d85b800b981d11c7fe0ca757e310278c30cb3196332ac5c054309c9b35713435d2592b6df1ec7f35f8e77adda10c9b5c65cef40852a36377ed910bbb67a5f897bcb28083d4ba110798399e1", 0x87}, {&(0x7f0000001500)="62262e489025eccaa44c5814d5a24e1ff4bf441bc94e8c534e914490bbb68a139f8bd610dc866ced1b4a69a7276974f180bd9eb62241ed1c3273242d5aa441758f8201b2cad172e4fcc0349858346a9b74f588f4b42930712fd6b9d05c7db749e7131c98ac33fe2e4c5b918214110de60bc95728541cf072", 0x78}], 0x5, 0x6) setsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000001600)=0xffffffbc, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000001640)=0x6, 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r1, &(0x7f0000001680)={0x2020}, 0x2020) write$input_event(r1, &(0x7f00000036c0)={{0x0, 0xea60}, 0x0, 0xe14b, 0xffffffff}, 0x18) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) setsockopt$ax25_int(r5, 0x101, 0x5, &(0x7f0000003700)=0x2, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000003800)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000037c0)={&(0x7f0000003780)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd2c, 0x25dfdbfd, 0xdb3, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$fb0(0xffffffffffffff9c, &(0x7f0000003840), 0x2e3d1c4b8f2e0f8d, 0x0) recvmsg$unix(r1, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003880)=""/213, 0xd5}, {&(0x7f0000003980)=""/206, 0xce}, {&(0x7f0000003a80)=""/57, 0x39}, {&(0x7f0000003ac0)=""/221, 0xdd}, {&(0x7f0000003bc0)=""/107, 0x6b}, {&(0x7f0000003c40)=""/41, 0x29}, {&(0x7f0000003c80)=""/147, 0x93}], 0x7, &(0x7f0000003dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x1a000) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x8010, r1, 0x80000000) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000003ec0)=0x200, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000003f40)={0x1, &(0x7f0000003f00)=[{0x1, 0x1, 0x10, 0xc4f}]}) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000003f80)=0x7, 0x4) write$cgroup_int(r6, &(0x7f0000003fc0)=0x9, 0x12) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004180)=@bpf_tracing={0x1a, 0xb, &(0x7f0000004000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xa2}]}, &(0x7f0000004080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x1, 0x3, 0x800, 0x6}, 0x10, 0x5d88, 0xffffffffffffffff, 0x4, &(0x7f0000004100)=[r6, r6, r1, r6, r6, r1, r1], &(0x7f0000004140)=[{0x4, 0x2, 0x6, 0x3}, {0x2, 0x4, 0x5, 0x6}, {0x5, 0x4, 0x1, 0x2}, {0x4, 0x2, 0xd, 0xc}], 0x10, 0x8, @void, @value}, 0x94) close_range(r7, r4, 0x0) ioctl$SG_SET_TIMEOUT(r6, 0x2201, &(0x7f0000004240)=0x80000000) 18.291106975s ago: executing program 3 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xc, 0x0, &(0x7f0000000180)) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) 18.290314698s ago: executing program 3 (id=125): syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa97c48696f7a308004900002400640000028790780a010102ac14140c8907efffffffff860600000000000000"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) (async) r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000d40)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x4, 0x5, {{0x2d, 0x4, 0x1, 0x2e, 0xb4, 0x66, 0x0, 0x2, 0x10, 0x0, @remote, @rand_addr=0x64010101, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x40, 0x3, [{0x2, 0x12, "3c0bd945e36354d80f6d8ac8fe2c2b51"}, {0x7, 0xa, "87e2b75cc27b4b2e"}, {0x6, 0x4, "d1d4"}, {0x1, 0xb, "a409dd1d6e9db5a312"}, {0x1, 0xd, "5ac34be55c3fc4142e709c"}, {0x7, 0x2}]}, @cipso={0x86, 0x39, 0x2, [{0xa6f6523d8559e7a3, 0xb, "7c77ca09d703eb7b6b"}, {0x7, 0x12, "5c4a26ef694401ceb7d5fc470270dbd2"}, {0x2, 0xa, "ba4deb7b1bbc6d43"}, {0x7, 0x7, "4acaba3a29"}, {0x6, 0x3, "90"}, {0x5, 0x2}]}, @rr={0x7, 0x13, 0x76, [@loopback, @empty, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @generic={0x88, 0x10, "941dd5e0bbbe582f7afc38e17f25"}]}}}}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@generic={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x10}, 0x18) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00'}, 0x18) (async) r4 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) (async) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) (async) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f0000000000)) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xf}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x11, 0x6, 0x3e1, 0x401, 0x9e20, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @value, @void, @void, @value}, 0x50) (async) mknodat$loop(r3, &(0x7f0000000c80)='./bus\x00', 0x10, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) fchown(0xffffffffffffffff, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0xfffffffb) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x5e) (async) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 3.247121177s ago: executing program 32 (id=125): syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa97c48696f7a308004900002400640000028790780a010102ac14140c8907efffffffff860600000000000000"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) (async) r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000d40)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x4, 0x5, {{0x2d, 0x4, 0x1, 0x2e, 0xb4, 0x66, 0x0, 0x2, 0x10, 0x0, @remote, @rand_addr=0x64010101, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x40, 0x3, [{0x2, 0x12, "3c0bd945e36354d80f6d8ac8fe2c2b51"}, {0x7, 0xa, "87e2b75cc27b4b2e"}, {0x6, 0x4, "d1d4"}, {0x1, 0xb, "a409dd1d6e9db5a312"}, {0x1, 0xd, "5ac34be55c3fc4142e709c"}, {0x7, 0x2}]}, @cipso={0x86, 0x39, 0x2, [{0xa6f6523d8559e7a3, 0xb, "7c77ca09d703eb7b6b"}, {0x7, 0x12, "5c4a26ef694401ceb7d5fc470270dbd2"}, {0x2, 0xa, "ba4deb7b1bbc6d43"}, {0x7, 0x7, "4acaba3a29"}, {0x6, 0x3, "90"}, {0x5, 0x2}]}, @rr={0x7, 0x13, 0x76, [@loopback, @empty, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @generic={0x88, 0x10, "941dd5e0bbbe582f7afc38e17f25"}]}}}}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@generic={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x10}, 0x18) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00'}, 0x18) (async) r4 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) (async) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) (async) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f0000000000)) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xf}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x11, 0x6, 0x3e1, 0x401, 0x9e20, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @value, @void, @void, @value}, 0x50) (async) mknodat$loop(r3, &(0x7f0000000c80)='./bus\x00', 0x10, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) fchown(0xffffffffffffffff, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0xfffffffb) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x5e) (async) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 2.128395438s ago: executing program 1 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x9, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 2.046297847s ago: executing program 1 (id=233): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10ffff) io_uring_enter(r1, 0x31dd, 0x994f, 0x70, &(0x7f00000000c0)={[0xffff]}, 0x8) ioctl$TCSETA(r0, 0x8926, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x3, 0x0, "4feda26323b172e0"}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001200)={0x3c, r4, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "84f00f4ec0f3e926610e6c15f5"}]}, 0x3c}}, 0x20000000) 1.92160396s ago: executing program 1 (id=238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{0x0, 0x11, &(0x7f00000001c0)=[{&(0x7f0000000180)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000240)="14550ba9f59fcf6f7c35b2c667360b84a45684192e9291ee8283c2defa1522ff1e4bf365802f9e821f2903ca689c9dfd043a6f1a", 0x34}, {0x0}], 0x2}}], 0x2, 0x40010) 1.921419245s ago: executing program 1 (id=239): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x4, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0x52}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) madvise(&(0x7f0000bdf000/0x3000)=nil, 0x3000, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x8, &(0x7f0000000200), 0x4) syz_clone(0x23996c80, 0x0, 0x11, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x4, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0x52}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) (async) madvise(&(0x7f0000bdf000/0x3000)=nil, 0x3000, 0xc) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x8, &(0x7f0000000200), 0x4) (async) syz_clone(0x23996c80, 0x0, 0x11, 0x0, 0x0, 0x0) (async) 1.860579455s ago: executing program 1 (id=241): r0 = socket$inet(0x2, 0x2, 0x0) fsopen(&(0x7f0000000700)='affs\x00', 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x4d0000, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x4d0000, 0x0) r2 = fcntl$dupfd(r0, 0x80c, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8, 0x20, 0x2d, 0x7fffffffffffffff}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], 0x107) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000002d80)=ANY=[@ANYBLOB="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"], 0x2b20}, 0x1, 0x0, 0x0, 0x804}, 0x4000) r5 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72e0, 0x0, 0x1}, &(0x7f0000000140), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000018c0)=[r5]}, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'sit0\x00', 'ip6_vti0\x00', {}, {}, 0x6, 0x0, 0x4a}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f00000001c0)) (async) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f00000001c0)) 1.860259663s ago: executing program 2 (id=242): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) (async) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r4 = landlock_create_ruleset(&(0x7f0000000140)={0xc000}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) (async) process_madvise(r3, 0x0, 0x0, 0x65, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)=ANY=[@ANYBLOB="b40000001e0001002cbd7000fddbdf250a010100000000000000000000000000000004d30a003200e0000002000000000000000000000000090000000335000008000b00100000006c00010067686173682d63652d73796e6300000000000000000000000000000000000000000000000000000000000000000000000100006e4c3714b23e3cc2c58a2348f4802efc9af738ee79f7492d70173a180f3ec5729a3ca15900"/174], 0xb4}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) r7 = socket(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r7, 0x29, 0x3e, 0x0, &(0x7f0000000040)=0x2000) (async) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000002c0)='gre0\x00') fchown(r8, 0xee01, 0x0) (async) recvmsg$unix(r8, &(0x7f0000001500)={&(0x7f0000000140), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, &(0x7f00000014c0)=[@rights={{0x10}}], 0x10}, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r10 = fanotify_init(0x200, 0x0) r11 = dup(r9) ioctl$KVM_GET_TSC_KHZ(r8, 0xaea3) (async) fanotify_mark(r10, 0x1, 0x48001059, r11, 0x0) (async) r12 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r13, r14, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000280)) (async) io_uring_enter(r12, 0x48e9, 0x0, 0x2, 0x0, 0x0) (async) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB], 0x18}, 0x41) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.859258259s ago: executing program 1 (id=243): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="e6", 0x1}], 0x1}}], 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.777809527s ago: executing program 2 (id=245): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x3) prctl$PR_SET_THP_DISABLE(0x42, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a000100090000007cdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="0000000014007fd4840fbd92c54d0000000000000000000014000100fe8000000000000000000000000000bb"], 0x99}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 1.77752774s ago: executing program 0 (id=246): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x200000, 0x2185) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000700)={0x0, 0xffffffffffffffff, 0x69, 0x69, @scatter={0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/108, 0x6c}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000480)=""/225, 0xe1}, {&(0x7f0000000580)=""/224, 0xe0}]}, &(0x7f0000000180)="beb81352735dc42190007236bd36f2f46f933aff3b7983733902994e293d37c544cf100716c5eaa4a77479c88dd983e8a11c6e6e9cba13c13dd89e349aee5500abfdca450067ef123ede156836641b0257bd936e79b461b0261ed0f31f20899b71eed576943dcf6930", &(0x7f0000000680)=""/29, 0x2, 0x4, 0x1, &(0x7f00000006c0)}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e240006000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2) 1.775928309s ago: executing program 0 (id=247): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x2}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x4048020) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 1.720450721s ago: executing program 2 (id=249): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write(r1, &(0x7f0000000380)="2cd889f03e14f3c3", 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000240)='./file0\x00', 0x105040, 0x20) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x40, r8}) r9 = signalfd4(r4, &(0x7f0000000540)={[0x7fffffff]}, 0x8, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="6a527b468c429418120400", @ANYRES32=r1, @ANYBLOB="00000000000000007511080008000000851000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xb2, &(0x7f0000000400)=""/178, 0x41000, 0x2, '\x00', r8, @lsm=0x1b, r1, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x9, 0x2d3, 0x9}, 0x10, 0x0, r1, 0x2, &(0x7f0000000580)=[r9, r1, r5, r1], &(0x7f0000000600)=[{0x5, 0x5, 0xf}, {0x5, 0x1, 0x9, 0xa}], 0x10, 0x1, @void, @value}, 0x94) 1.621001468s ago: executing program 2 (id=251): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x890}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x7, @empty, 0x10000}, 0x1c) syz_emit_ethernet(0x87, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000003ffffffffffff86dd6001070000511100fc000000000000000000000000000000ff02000000000000000000000000000100040e2200519078040000000300000003000000000000000bf2e0bf7acffb02829f8e0cb610742e496d7a2de1b1a0f678e20923808f4d"], 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x2e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x13}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0}) 1.531680988s ago: executing program 2 (id=252): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0xc0049364, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0xc0049364, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ipvlan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x4c}}, 0x0) (async) 1.531356879s ago: executing program 2 (id=253): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0xa, 0xffffffffffffffff}]}, 0x28}}, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x2, 0x4) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @private2, 0x8}, 0x1c) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000cc5723220800000086ab00002ea1ec412d61d05be47ad148810af6dea35cfb7290fda6b222ca7ab2e0392bcdec5a19759ad7484ab8dda3a48c81000000eba9557448450184f38750d0ea96bd9b69f7a74a7f404b2494d509d19bc3"]) (async) listen(r0, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), r5) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0xe, 0x1b, 0x100, &(0x7f00000000c0)="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"}) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000b9fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) 431.508395ms ago: executing program 4 (id=260): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@deltaction={0xe0, 0x31, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_clone(0x20940200, 0x0, 0x9, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db", 0xd}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000700000000000a"], 0x18) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) 361.222467ms ago: executing program 4 (id=261): socket$inet6(0xa, 0x800000000000002, 0x0) (async) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$inet(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}, 0x4004) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x3, {0x0, 0x0, 0x0, r5, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) sendto$inet6(r0, &(0x7f0000000040)="6fc75da01b89e6cd862741733020ac7291e33bd135daf18d0202dddf8737a29736", 0x21, 0x4000080, &(0x7f0000000080)={0xa, 0x4e22, 0x81, @remote, 0x8}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000040)="6fc75da01b89e6cd862741733020ac7291e33bd135daf18d0202dddf8737a29736", 0x21, 0x4000080, &(0x7f0000000080)={0xa, 0x4e22, 0x81, @remote, 0x8}, 0x1c) 360.803268ms ago: executing program 4 (id=262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="e2", 0x1}, {&(0x7f0000000000)="f1a78104d03398c9eff8b927ba26ba5cea8bf05a97e34cca80973842d5c74fac608faadfc6fd2e0f6c61a863a0ecf543ba9d48e9df2a218c01ec2c8d7bae76663be7da3ae148639ebd8779ecc68a8e59ae5976f14e8d9c565188ad367ef2bb6467f8b92f01b9a322cba402c28aaa7df5eaa6a8e0d49761920db2e85e1bd6964f11908ba790f74aa46a2197a3b2e2a860e9df5fa6ceb7cc6cc77738c566f8603a3e20a31ecb57878ec6ccc35b55c332581a1b0f", 0xb3}, {&(0x7f0000000200)="f8e4510435aae15bb0c31a0bec4c09b98dfae407281e", 0x16}, {&(0x7f0000000280)="7c754bf9c58263dab93ea1d6b393900809c22123d232ac258f464dccc5f5f352f2726e2206416d5c327a5115f65230df45169ea5ec78a2ea2e1e932666cb0f873878572129ae96715a8e32547665ea9f1bca403bfadee792372a1391fb42a0ca7607f34d26508c95e16690d1f9a18e", 0x6f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000240)="14550ba9f59fcf6f7c35b2c667360b84a45684192e9291ee8283c2defa1522ff1e4bf365802f9e821f2903ca689c9dfd043a6f1a", 0x34}, {0x0}], 0x2}}], 0x2, 0x40010) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0x6a, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r7, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x802) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010003904fcffffff0000000000000000", @ANYRES32=r5, @ANYBLOB="00000000422200042c00128008000100677265002000028008000500bb7e00000800040006"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x844) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18c, 0x18c, 0x9, [@enum={0x7, 0xa, 0x0, 0x6, 0x4, [{0x2, 0x4}, {0x4, 0x3}, {0x0, 0x1}, {0x5, 0x5}, {0x8, 0xf}, {0xc, 0x8}, {0x5, 0x1}, {}, {0xd, 0x94}, {0xe}]}, @enum64={0xd, 0xa, 0x0, 0x13, 0x1, 0x9, [{0xd, 0x80, 0x4}, {0x10, 0x0, 0x5}, {0x7, 0x8, 0x3}, {0x3, 0x7, 0x2f}, {0xc, 0x8, 0x5}, {0x1, 0x4, 0x6}, {0xb, 0x563, 0x3}, {0x6, 0x3, 0xf26}, {0xe, 0x4, 0x6}, {0xa, 0x5, 0x5}]}, @volatile={0xd}, @enum64={0x9, 0x7, 0x0, 0x13, 0x0, 0x0, [{0x1, 0x7, 0x60000000}, {0xd, 0xd, 0x7}, {0x9, 0xfffffff7, 0x6}, {0x4, 0x8, 0xa547}, {0xe, 0x7, 0x9}, {0xe, 0x400, 0x8}, {0x7, 0x4, 0xf8}]}, @struct={0x3, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x6, 0x5, 0x4}, {0x7, 0x1, 0x7fff}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0x2}, @ptr={0x3, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x61, 0x30, 0x5f, 0x2e, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000580)=""/236, 0x1ad, 0xec, 0x1, 0x9, 0x10000, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xe, &(0x7f00000003c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x49, &(0x7f0000000440)=""/73, 0x1f00, 0x2, '\x00', r5, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1], 0x0, 0x10, 0x7, @void, @value}, 0x94) 301.645958ms ago: executing program 4 (id=263): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a0101010000", @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x28c902, 0x0) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x28c902, 0x0) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) syz_clone3(&(0x7f00000004c0)={0x100801000, &(0x7f0000000180), 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000240)) (async) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000240)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f00000000c0)={0xd, 0x1, 0x3, "872290ee01689bee266d8c7a6aa6995c1937025a4754aa9610c55ae1146141bb", 0x5ac79482}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 141.459649ms ago: executing program 4 (id=264): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x160, 0x80}) (async) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000f40), 0x100, 0x0) ppoll(&(0x7f0000000f80)=[{r4, 0x87c0}], 0x1, &(0x7f0000000fc0)={0x0, 0x3938700}, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom(r5, 0x0, 0x0, 0x2140, 0x0, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xe2, "2dd1e4fff1c6e8921a3f2df1922dd2d6db3374ea411e19a89c4e53c6f19be70b924bc45ff3aec2741b7063f2d4dfa2f04b3909d220df871fd8abf2d67b5fe6803fd1c50185bf84ef6038808930a00b3f9bad124a66af446c5e733de5613a9c604581696fa2f27cefe7d551a8c0f6dc218ff09339287663890053fea1620092f494698e4a5be3e9020650acab32b148bdb17d4d7915d3fb6a057455012f68e8ba3f595a48cb25a4a704b506ef49cf536b949d81fba934975c10ef5ebd5c0ff62f795b7cd17798111f55e3729accb1e028c47adbbf59a95429cd7a9700603c5c3c240b"}, &(0x7f0000000180)=0xea) (rerun: 32) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x203, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r7, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e20, @local}}, 0x80000001, 0x6, 0x3, 0x1, 0x40, 0xd045, 0x6}, 0x9c) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r10, 0x29, 0x46, &(0x7f0000000000)=0x599, 0x4) (async) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) recvmmsg(r3, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}], 0x1, 0x40000121, 0x0) accept4(r3, 0x0, &(0x7f0000000000), 0x80800) 61.559795ms ago: executing program 4 (id=265): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7bf, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000340), 0x1000) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000009038e8cd67a6cc50464a19b730000"], 0x14}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r8) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000100)=[0x802a, 0xf0]) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r9 = socket(0x1, 0x803, 0x0) fgetxattr(r9, &(0x7f0000000500)=@known='system.sockprotoname\x00', &(0x7f0000000580)=""/3, 0x3) socket(0x18, 0x800, 0x3ff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x432200, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r10, 0x3) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b80080003001100000008001b00000000006986fd8196a922e212296e6b1bffe2cf67fff5f9aa"], 0x34}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) 61.205995ms ago: executing program 0 (id=266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000240)="14550ba9f59fcf6f7c35b2c667360b84a45684192e9291ee8283c2defa1522ff1e4bf365802f9e821f2903ca689c9dfd043a6f1a", 0x34}, {0x0}], 0x2}}], 0x2, 0x40010) (fail_nth: 4) 61.114656ms ago: executing program 0 (id=267): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mknodat$loop(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) (async) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x108000, &(0x7f0000000040)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xe}}]}}) 385.334µs ago: executing program 0 (id=268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{0x0, 0x1f00, &(0x7f00000001c0)=[{&(0x7f0000000180)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000240)="14550ba9f59fcf6f7c35b2c667360b84a45684192e9291ee8283c2defa1522ff1e4bf365802f9e821f2903ca689c9dfd043a6f1a", 0x34}, {0x0}], 0x2}}], 0x2, 0x40010) 0s ago: executing program 0 (id=269): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setresuid(0x0, 0xee00, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feffe0ff64000200475400f6", 0xe, 0x4040080, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800c0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800700010063740000140002800800044000000000080002270000000d0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000200000a"], 0x78}}, 0x80) syz_clone(0x20940200, 0x0, 0x9, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) r5 = syz_open_dev$midi(&(0x7f0000000080), 0x2, 0xc4842) read$midi(r5, &(0x7f00000001c0)=""/248, 0xf8) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r6, 0x5016, 0x0) syz_emit_ethernet(0xd0, &(0x7f00000003c0)={@local, @broadcast, @void, {@llc={0x4, {@llc={0x7e, 0xd4, "a5", "b153d164fb00d35edc85dc0b1cd506ff67460416e0d7d36728fd1e6f2e562b4294256b6be3bd3c8e7865dfb007a4d3f8ea54b2c1df9bffb469f4a7f6b6f585298ff91f491200911bba29dfce798d19b61be83650dfa00fc85b8f1e0c1e3df05b4bfccd6a882248778a2a32379ff2e0ccd17b45595ea0bb1371f1fa199f013bf6c90da56653bef89e7dfd7841f1ab51f5b0ef071a16b0f7787de60ccae0aa134c72656cd91776ced3df7055db332593f35618638be173711ee747495b49cbad"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 44.155529][ T40] audit: type=1400 audit(1749664866.340:60): avc: denied { rlimitinh } for pid=5888 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.163525][ T40] audit: type=1400 audit(1749664866.340:61): avc: denied { siginh } for pid=5888 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:56330' (ED25519) to the list of known hosts. [ 46.015109][ T40] audit: type=1400 audit(1749664868.220:62): avc: denied { name_bind } for pid=5918 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.036773][ T40] audit: type=1400 audit(1749664868.240:63): avc: denied { write } for pid=5919 comm="sh" path="pipe:[993]" dev="pipefs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 46.048960][ T40] audit: type=1400 audit(1749664868.250:64): avc: denied { execute } for pid=5919 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.056217][ T40] audit: type=1400 audit(1749664868.250:65): avc: denied { execute_no_trans } for pid=5919 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.975407][ T40] audit: type=1400 audit(1749664870.180:66): avc: denied { mounton } for pid=5919 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.977989][ T5919] cgroup: Unknown subsys name 'net' [ 48.227003][ T5919] cgroup: Unknown subsys name 'cpuset' [ 48.231488][ T5919] cgroup: Unknown subsys name 'rlimit' [ 48.433763][ T5924] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.093385][ T5919] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.256115][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 52.256125][ T40] audit: type=1400 audit(1749664874.450:80): avc: denied { execmem } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.460708][ T40] audit: type=1400 audit(1749664874.660:81): avc: denied { create } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.467689][ T40] audit: type=1400 audit(1749664874.660:82): avc: denied { read write } for pid=5932 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.474316][ T40] audit: type=1400 audit(1749664874.660:83): avc: denied { open } for pid=5932 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.480993][ T40] audit: type=1400 audit(1749664874.670:84): avc: denied { ioctl } for pid=5932 comm="syz-executor" path="socket:[1003]" dev="sockfs" ino=1003 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.518911][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.523170][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.526838][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.529423][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.531653][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.532150][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.535223][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.537115][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.539227][ T5943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.543665][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.546062][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.546167][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.548961][ T40] audit: type=1400 audit(1749664874.750:85): avc: denied { read } for pid=5933 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.551796][ T5296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.556218][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.558594][ T40] audit: type=1400 audit(1749664874.750:86): avc: denied { open } for pid=5933 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.559794][ T5296] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.561572][ T40] audit: type=1400 audit(1749664874.750:87): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.568797][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.569282][ T5296] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.570928][ T5296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.577714][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.579987][ T5296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.754070][ T40] audit: type=1400 audit(1749664874.950:88): avc: denied { module_request } for pid=5933 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.811906][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 52.842319][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 52.893485][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 53.061867][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.064786][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.067263][ T5933] bridge_slave_0: entered allmulticast mode [ 53.070030][ T5933] bridge_slave_0: entered promiscuous mode [ 53.075299][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.078297][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.080542][ T5933] bridge_slave_1: entered allmulticast mode [ 53.083195][ T5933] bridge_slave_1: entered promiscuous mode [ 53.140005][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 53.152412][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.155862][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.158882][ T5939] bridge_slave_0: entered allmulticast mode [ 53.162623][ T5939] bridge_slave_0: entered promiscuous mode [ 53.223005][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.226048][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.229233][ T5939] bridge_slave_1: entered allmulticast mode [ 53.233011][ T5939] bridge_slave_1: entered promiscuous mode [ 53.265871][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.353719][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.362469][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.368403][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.371485][ T5932] bridge_slave_0: entered allmulticast mode [ 53.375490][ T5932] bridge_slave_0: entered promiscuous mode [ 53.382126][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.434377][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.437405][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.440241][ T5932] bridge_slave_1: entered allmulticast mode [ 53.443073][ T5932] bridge_slave_1: entered promiscuous mode [ 53.474501][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.481200][ T5933] team0: Port device team_slave_0 added [ 53.569082][ T5933] team0: Port device team_slave_1 added [ 53.599133][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.603777][ T5939] team0: Port device team_slave_0 added [ 53.619279][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.622309][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.626440][ T5944] bridge_slave_0: entered allmulticast mode [ 53.630404][ T5944] bridge_slave_0: entered promiscuous mode [ 53.635806][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.639811][ T5939] team0: Port device team_slave_1 added [ 53.655849][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.658220][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.660490][ T5944] bridge_slave_1: entered allmulticast mode [ 53.663107][ T5944] bridge_slave_1: entered promiscuous mode [ 53.699706][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.702049][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.711067][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.753075][ T5932] team0: Port device team_slave_0 added [ 53.769883][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.772188][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.780745][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.801740][ T5932] team0: Port device team_slave_1 added [ 53.804749][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.806987][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.816717][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.826382][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.852397][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.854728][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.862463][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.867244][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.886148][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.888383][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.896561][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.944382][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.946589][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.954898][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.963588][ T5944] team0: Port device team_slave_0 added [ 53.985791][ T5933] hsr_slave_0: entered promiscuous mode [ 53.988177][ T5933] hsr_slave_1: entered promiscuous mode [ 54.009596][ T5944] team0: Port device team_slave_1 added [ 54.031031][ T5939] hsr_slave_0: entered promiscuous mode [ 54.033284][ T5939] hsr_slave_1: entered promiscuous mode [ 54.035618][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.038100][ T5939] Cannot create hsr debugfs directory [ 54.120062][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.122818][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.132993][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.138226][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.140965][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.151019][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.158898][ T5932] hsr_slave_0: entered promiscuous mode [ 54.161938][ T5932] hsr_slave_1: entered promiscuous mode [ 54.164807][ T5932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.167309][ T5932] Cannot create hsr debugfs directory [ 54.340143][ T5944] hsr_slave_0: entered promiscuous mode [ 54.342240][ T5944] hsr_slave_1: entered promiscuous mode [ 54.344676][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.347377][ T5944] Cannot create hsr debugfs directory [ 54.614626][ T5946] Bluetooth: hci0: command tx timeout [ 54.614681][ T5934] Bluetooth: hci3: command tx timeout [ 54.614733][ T5943] Bluetooth: hci1: command tx timeout [ 54.618266][ T5296] Bluetooth: hci2: command tx timeout [ 54.627738][ T5933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.633627][ T5933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.643025][ T5933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.651547][ T5933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.672205][ T5932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.689991][ T5932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.695065][ T5932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.701152][ T5932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.747167][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.754352][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.759066][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.763085][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.802623][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.820433][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.826122][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.839287][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.842099][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.849609][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.866015][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.868360][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.885995][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.888345][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.893960][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.922966][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.941863][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.944327][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.950100][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.952340][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.989941][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.006507][ T40] audit: type=1400 audit(1749664877.210:89): avc: denied { sys_module } for pid=5933 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.011575][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.032627][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.041183][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.047189][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.049420][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.056092][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.058384][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.069143][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.071377][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.075851][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.078088][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.106798][ T5944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.119443][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.160957][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.170369][ T5933] veth0_vlan: entered promiscuous mode [ 55.182782][ T5933] veth1_vlan: entered promiscuous mode [ 55.214441][ T5932] veth0_vlan: entered promiscuous mode [ 55.225178][ T5933] veth0_macvtap: entered promiscuous mode [ 55.229500][ T5932] veth1_vlan: entered promiscuous mode [ 55.238256][ T5933] veth1_macvtap: entered promiscuous mode [ 55.255135][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.269777][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.280404][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.288367][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.296432][ T5933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.299337][ T5933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.302114][ T5933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.305556][ T5933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.320564][ T5932] veth0_macvtap: entered promiscuous mode [ 55.333275][ T5932] veth1_macvtap: entered promiscuous mode [ 55.358015][ T5944] veth0_vlan: entered promiscuous mode [ 55.363143][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.369016][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.381437][ T5944] veth1_vlan: entered promiscuous mode [ 55.386735][ T5932] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.390456][ T5932] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.394752][ T5932] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.397520][ T5932] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.423256][ T5939] veth0_vlan: entered promiscuous mode [ 55.425146][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.428610][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.438927][ T5939] veth1_vlan: entered promiscuous mode [ 55.459990][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.464711][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.473649][ T5944] veth0_macvtap: entered promiscuous mode [ 55.482963][ T5944] veth1_macvtap: entered promiscuous mode [ 55.497296][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.499757][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.515465][ T5933] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.525317][ T5939] veth0_macvtap: entered promiscuous mode [ 55.537415][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.538869][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.540229][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.543828][ T5939] veth1_macvtap: entered promiscuous mode [ 55.558474][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.563698][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.571991][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.577215][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.580944][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.584640][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.591824][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.603826][ T5939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.606749][ T5939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.609496][ T5939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.613680][ T5939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.628234][ T6026] netlink: 'syz.2.3': attribute type 11 has an invalid length. [ 55.630983][ T6025] netlink: 'syz.2.3': attribute type 11 has an invalid length. [ 55.693777][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 55.701315][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.705209][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.709413][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.712744][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.732952][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.736579][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.748324][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.750801][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.801674][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 56.012652][ T6059] netlink: 'syz.2.13': attribute type 4 has an invalid length. [ 56.052860][ T6063] netlink: 100 bytes leftover after parsing attributes in process `syz.2.15'. [ 56.060767][ T6064] netlink: 100 bytes leftover after parsing attributes in process `syz.2.15'. [ 56.226431][ T6017] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 56.392150][ T6017] usb 6-1: not running at top speed; connect to a high speed hub [ 56.398629][ T6101] mmap: syz.0.29 (6101) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.406735][ T6017] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 56.411671][ T6017] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 56.423191][ T6017] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.427216][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.430380][ T6017] usb 6-1: Product: syz [ 56.432109][ T6017] usb 6-1: Manufacturer: ᠁ [ 56.436490][ T6017] usb 6-1: SerialNumber: syz [ 56.533297][ T6118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.651509][ T6017] cdc_ncm 6-1:1.0: bind() failure [ 56.656020][ T6017] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 56.658186][ T6017] cdc_ncm 6-1:1.1: bind() failure [ 56.665776][ T6017] usb 6-1: USB disconnect, device number 2 [ 56.694710][ T5934] Bluetooth: hci2: command tx timeout [ 56.694746][ T5946] Bluetooth: hci3: command tx timeout [ 56.696489][ T5934] Bluetooth: hci1: command tx timeout [ 56.698767][ T5943] Bluetooth: hci0: command tx timeout [ 56.766697][ T6139] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.810589][ T6143] Zero length message leads to an empty skb [ 57.370196][ T6154] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 57.417630][ T6156] misc userio: No port type given on /dev/userio [ 57.437084][ T6156] netlink: 700 bytes leftover after parsing attributes in process `syz.1.47'. [ 57.683831][ T6165] process 'syz.0.50' launched './file1' with NULL argv: empty string added [ 57.694054][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 57.694065][ T40] audit: type=1400 audit(1749664879.890:210): avc: denied { execute_no_trans } for pid=6164 comm="syz.0.50" path="/18/file1" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.723617][ T40] audit: type=1326 audit(1749664879.920:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.2.51" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f835ef8e929 code=0x0 [ 57.734138][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 57.734235][ T5296] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 57.827970][ T6176] ======================================================= [ 57.827970][ T6176] WARNING: The mand mount option has been deprecated and [ 57.827970][ T6176] and is ignored by this kernel. Remove the mand [ 57.827970][ T6176] option from the mount to silence this warning. [ 57.827970][ T6176] ======================================================= [ 57.843340][ T40] audit: type=1400 audit(1749664880.040:212): avc: denied { unlink } for pid=6175 comm="syz.3.55" name="#1" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.847076][ T6176] overlayfs: missing 'lowerdir' [ 57.854066][ T40] audit: type=1400 audit(1749664880.050:213): avc: denied { mount } for pid=6175 comm="syz.3.55" name="/" dev="overlay" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.929226][ T40] audit: type=1400 audit(1749664880.130:214): avc: denied { map } for pid=6177 comm="syz.0.56" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.938281][ T40] audit: type=1400 audit(1749664880.130:215): avc: denied { read write } for pid=6177 comm="syz.0.56" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.946391][ T40] audit: type=1400 audit(1749664880.140:216): avc: denied { create } for pid=6177 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.952032][ T40] audit: type=1400 audit(1749664880.140:217): avc: denied { ioctl } for pid=6177 comm="syz.0.56" path="socket:[8187]" dev="sockfs" ino=8187 ioctlcmd=0x8947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.961765][ T40] audit: type=1400 audit(1749664880.140:218): avc: denied { write } for pid=6177 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 57.967798][ T40] audit: type=1400 audit(1749664880.140:219): avc: denied { setopt } for pid=6177 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.114223][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.193215][ T6189] FAULT_INJECTION: forcing a failure. [ 58.193215][ T6189] name failslab, interval 1, probability 0, space 0, times 1 [ 58.198434][ T6189] CPU: 3 UID: 0 PID: 6189 Comm: syz.1.59 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 58.198456][ T6189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.198465][ T6189] Call Trace: [ 58.198471][ T6189] [ 58.198478][ T6189] dump_stack_lvl+0x16c/0x1f0 [ 58.198528][ T6189] should_fail_ex+0x512/0x640 [ 58.198569][ T6189] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 58.198595][ T6189] should_failslab+0xc2/0x120 [ 58.198622][ T6189] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 58.198643][ T6189] ? copy_process+0x4b6/0x76a0 [ 58.198685][ T6189] ? _raw_spin_unlock_irq+0x23/0x50 [ 58.198708][ T6189] copy_process+0x4b6/0x76a0 [ 58.198738][ T6189] ? __pfx_copy_process+0x10/0x10 [ 58.198769][ T6189] kernel_clone+0xfc/0x960 [ 58.198789][ T6189] ? __pfx_kernel_clone+0x10/0x10 [ 58.198816][ T6189] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 58.198853][ T6189] __do_sys_clone+0xce/0x120 [ 58.198876][ T6189] ? __pfx___do_sys_clone+0x10/0x10 [ 58.198907][ T6189] ? ksys_write+0x1ac/0x250 [ 58.198927][ T6189] ? __pfx_ksys_write+0x10/0x10 [ 58.198956][ T6189] do_syscall_64+0xcd/0x4c0 [ 58.198985][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.199003][ T6189] RIP: 0033:0x7f0713b8e929 [ 58.199020][ T6189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.199034][ T6189] RSP: 002b:00007f07149a7fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 58.199052][ T6189] RAX: ffffffffffffffda RBX: 00007f0713db5fa0 RCX: 00007f0713b8e929 [ 58.199062][ T6189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 58.199073][ T6189] RBP: 00007f07149a8090 R08: 0000000000000000 R09: 0000000000000000 [ 58.199082][ T6189] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 58.199091][ T6189] R13: 0000000000000000 R14: 00007f0713db5fa0 R15: 00007ffd5ee33d98 [ 58.199111][ T6189] [ 58.244074][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.244107][ T29] usb 8-1: device descriptor read/64, error -71 [ 58.424043][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 58.427478][ T9] usb 5-1: config 2 interface 0 has no altsetting 0 [ 58.431308][ T9] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 58.434929][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.437567][ T9] usb 5-1: Product: syz [ 58.438981][ T9] usb 5-1: Manufacturer: syz [ 58.440547][ T9] usb 5-1: SerialNumber: syz [ 58.485715][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.621724][ T29] usb 8-1: device descriptor read/64, error -71 [ 58.657025][ T9] usb 5-1: USB disconnect, device number 2 [ 58.729044][ T29] usb usb8-port1: attempt power cycle [ 58.775035][ T5296] Bluetooth: hci3: command tx timeout [ 58.776836][ T5296] Bluetooth: hci1: command tx timeout [ 58.778880][ T5296] Bluetooth: hci0: command tx timeout [ 58.780570][ T5296] Bluetooth: hci2: command tx timeout [ 59.094246][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 59.116496][ T29] usb 8-1: device descriptor read/8, error -71 [ 59.268201][ T6213] netlink: 200 bytes leftover after parsing attributes in process `syz.0.66'. [ 59.349161][ T6222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.68'. [ 59.352173][ T6222] netlink: 84 bytes leftover after parsing attributes in process `syz.1.68'. [ 59.356719][ T6219] FAULT_INJECTION: forcing a failure. [ 59.356719][ T6219] name failslab, interval 1, probability 0, space 0, times 0 [ 59.361263][ T6219] CPU: 3 UID: 0 PID: 6219 Comm: syz.0.69 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 59.361284][ T6219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.361295][ T6219] Call Trace: [ 59.361302][ T6219] [ 59.361309][ T6219] dump_stack_lvl+0x16c/0x1f0 [ 59.361336][ T6219] should_fail_ex+0x512/0x640 [ 59.361352][ T6219] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 59.361368][ T6219] should_failslab+0xc2/0x120 [ 59.361397][ T6219] __kmalloc_cache_node_noprof+0x6d/0x420 [ 59.361411][ T6219] ? __get_vm_area_node+0x101/0x330 [ 59.361424][ T6219] __get_vm_area_node+0x101/0x330 [ 59.361434][ T6219] ? __lock_acquire+0x622/0x1c90 [ 59.361452][ T6219] __vmalloc_node_range_noprof+0x271/0x14b0 [ 59.361464][ T6219] ? kernel_clone+0xfc/0x960 [ 59.361477][ T6219] ? local_lock_release+0x99/0x140 [ 59.361497][ T6219] ? kernel_clone+0xfc/0x960 [ 59.361510][ T6219] ? rcu_read_unlock+0x17/0x60 [ 59.361528][ T6219] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 59.361545][ T6219] ? kernel_clone+0xfc/0x960 [ 59.361558][ T6219] __vmalloc_node_noprof+0xad/0xf0 [ 59.361569][ T6219] ? kernel_clone+0xfc/0x960 [ 59.361583][ T6219] copy_process+0x2c70/0x76a0 [ 59.361603][ T6219] ? __pfx_copy_process+0x10/0x10 [ 59.361623][ T6219] kernel_clone+0xfc/0x960 [ 59.361638][ T6219] ? __pfx_kernel_clone+0x10/0x10 [ 59.361657][ T6219] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 59.361676][ T6219] __do_sys_clone+0xce/0x120 [ 59.361690][ T6219] ? __pfx___do_sys_clone+0x10/0x10 [ 59.361709][ T6219] ? ksys_write+0x1ac/0x250 [ 59.361722][ T6219] ? __pfx_ksys_write+0x10/0x10 [ 59.361740][ T6219] do_syscall_64+0xcd/0x4c0 [ 59.361757][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.361769][ T6219] RIP: 0033:0x7fc1e9d8e929 [ 59.361778][ T6219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.361788][ T6219] RSP: 002b:00007fc1eac02fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 59.361799][ T6219] RAX: ffffffffffffffda RBX: 00007fc1e9fb5fa0 RCX: 00007fc1e9d8e929 [ 59.361805][ T6219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 59.361811][ T6219] RBP: 00007fc1eac03090 R08: 0000000000000000 R09: 0000000000000000 [ 59.361817][ T6219] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 59.361823][ T6219] R13: 0000000000000000 R14: 00007fc1e9fb5fa0 R15: 00007ffc6412d5c8 [ 59.361836][ T6219] [ 59.361953][ T6219] syz.0.69: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 59.365381][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 59.367771][ T6219] ,cpuset= [ 59.400519][ T29] usb 8-1: device descriptor read/8, error -71 [ 59.401638][ T6219] /,mems_allowed=0-1 [ 59.453748][ T6219] CPU: 3 UID: 0 PID: 6219 Comm: syz.0.69 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 59.453763][ T6219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.453769][ T6219] Call Trace: [ 59.453773][ T6219] [ 59.453777][ T6219] dump_stack_lvl+0x16c/0x1f0 [ 59.453797][ T6219] warn_alloc+0x248/0x3a0 [ 59.453812][ T6219] ? __pfx_warn_alloc+0x10/0x10 [ 59.453827][ T6219] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 59.453842][ T6219] ? __kasan_kmalloc+0x8a/0xb0 [ 59.453856][ T6219] ? __get_vm_area_node+0x208/0x330 [ 59.453870][ T6219] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 59.453881][ T6219] ? local_lock_release+0x99/0x140 [ 59.453901][ T6219] ? kernel_clone+0xfc/0x960 [ 59.453915][ T6219] ? rcu_read_unlock+0x17/0x60 [ 59.453933][ T6219] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 59.453950][ T6219] ? kernel_clone+0xfc/0x960 [ 59.453963][ T6219] __vmalloc_node_noprof+0xad/0xf0 [ 59.453986][ T6219] ? kernel_clone+0xfc/0x960 [ 59.454001][ T6219] copy_process+0x2c70/0x76a0 [ 59.454021][ T6219] ? __pfx_copy_process+0x10/0x10 [ 59.454042][ T6219] kernel_clone+0xfc/0x960 [ 59.454056][ T6219] ? __pfx_kernel_clone+0x10/0x10 [ 59.454075][ T6219] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 59.454094][ T6219] __do_sys_clone+0xce/0x120 [ 59.454112][ T6219] ? __pfx___do_sys_clone+0x10/0x10 [ 59.454131][ T6219] ? ksys_write+0x1ac/0x250 [ 59.454144][ T6219] ? __pfx_ksys_write+0x10/0x10 [ 59.454162][ T6219] do_syscall_64+0xcd/0x4c0 [ 59.454179][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.454190][ T6219] RIP: 0033:0x7fc1e9d8e929 [ 59.454199][ T6219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.454209][ T6219] RSP: 002b:00007fc1eac02fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 59.454219][ T6219] RAX: ffffffffffffffda RBX: 00007fc1e9fb5fa0 RCX: 00007fc1e9d8e929 [ 59.454225][ T6219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 59.454231][ T6219] RBP: 00007fc1eac03090 R08: 0000000000000000 R09: 0000000000000000 [ 59.454237][ T6219] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 59.454243][ T6219] R13: 0000000000000000 R14: 00007fc1e9fb5fa0 R15: 00007ffc6412d5c8 [ 59.454256][ T6219] [ 59.504316][ T29] usb usb8-port1: unable to enumerate USB device [ 59.509048][ T6219] Mem-Info: [ 59.536758][ T6219] active_anon:8625 inactive_anon:0 isolated_anon:0 [ 59.536758][ T6219] active_file:10660 inactive_file:40576 isolated_file:0 [ 59.536758][ T6219] unevictable:1768 dirty:1607 writeback:0 [ 59.536758][ T6219] slab_reclaimable:11938 slab_unreclaimable:68340 [ 59.536758][ T6219] mapped:24410 shmem:2397 pagetables:1328 [ 59.536758][ T6219] sec_pagetables:296 bounce:0 [ 59.536758][ T6219] kernel_misc_reclaimable:0 [ 59.536758][ T6219] free:457176 free_pcp:22069 free_cma:0 [ 59.551062][ T6219] Node 0 active_anon:34376kB inactive_anon:0kB active_file:42640kB inactive_file:162104kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97640kB dirty:6392kB writeback:0kB shmem:6052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12528kB pagetables:4956kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB [ 59.566178][ T6219] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:36kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 59.577377][ T6219] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 59.587083][ T6240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.71'. [ 59.587665][ T6219] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 59.593204][ T6219] Node 0 DMA32 free:210328kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34304kB inactive_anon:0kB active_file:42640kB inactive_file:162104kB unevictable:3536kB writepending:6392kB present:2080628kB managed:1264744kB mlocked:0kB bounce:0kB free_pcp:72868kB local_pcp:28664kB free_cma:0kB [ 59.604087][ T6219] lowmem_reserve[]: 0 0 0 0 0 [ 59.605648][ T6219] Node 1 Normal free:1605208kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:36kB present:2097152kB managed:1781948kB mlocked:0kB bounce:0kB free_pcp:13512kB local_pcp:3856kB free_cma:0kB [ 59.615692][ T6219] lowmem_reserve[]: 0 0 0 0 0 [ 59.617509][ T6219] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 59.622086][ T6219] Node 0 DMA32: 362*4kB (UME) 547*8kB (UM) 609*16kB (UME) 430*32kB (UM) 297*64kB (UM) 20*128kB (UM) 17*256kB (UM) 9*512kB (UME) 7*1024kB (UM) 8*2048kB (UM) 31*4096kB (UM) = 210384kB [ 59.627997][ T6219] Node 1 Normal: 10*4kB (UME) 28*8kB (UE) 9*16kB (UME) 16*32kB (UME) 11*64kB (UME) 12*128kB (UME) 2*256kB (U) 4*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 389*4096kB (UM) = 1605208kB [ 59.633595][ T6219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 59.637842][ T6219] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 59.641564][ T6219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 59.645853][ T6219] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 59.646960][ T6247] IPv6: sit1: Disabled Multicast RS [ 59.649549][ T6219] 53629 total pagecache pages [ 59.651558][ T6247] sit1: entered allmulticast mode [ 59.652972][ T6219] 0 pages in swap cache [ 59.658812][ T6219] Free swap = 124996kB [ 59.660607][ T6219] Total swap = 124996kB [ 59.662399][ T6219] 1048443 pages RAM [ 59.663898][ T6219] 0 pages HighMem/MovableOnly [ 59.668527][ T6219] 282930 pages reserved [ 59.669872][ T6219] 0 pages cma reserved [ 59.701480][ T6254] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 59.704260][ T6254] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 59.709597][ T6254] vhci_hcd vhci_hcd.0: Device attached [ 59.742892][ T6257] vhci_hcd: connection closed [ 59.744067][ T46] vhci_hcd: stop threads [ 59.747426][ T46] vhci_hcd: release socket [ 59.748877][ T46] vhci_hcd: disconnect device [ 59.912925][ T6280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.81'. [ 59.916028][ T6280] netlink: 84 bytes leftover after parsing attributes in process `syz.0.81'. [ 59.953131][ T6282] can0: slcan on ptm0. [ 60.115012][ T6281] can0 (unregistered): slcan off ptm0. [ 60.369563][ T6308] FAULT_INJECTION: forcing a failure. [ 60.369563][ T6308] name failslab, interval 1, probability 0, space 0, times 0 [ 60.373548][ T6308] CPU: 3 UID: 0 PID: 6308 Comm: syz.1.87 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 60.373563][ T6308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.373570][ T6308] Call Trace: [ 60.373574][ T6308] [ 60.373579][ T6308] dump_stack_lvl+0x16c/0x1f0 [ 60.373598][ T6308] should_fail_ex+0x512/0x640 [ 60.373614][ T6308] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 60.373630][ T6308] should_failslab+0xc2/0x120 [ 60.373646][ T6308] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 60.373660][ T6308] ? __pfx___might_resched+0x10/0x10 [ 60.373673][ T6308] ? alloc_vmap_area+0x645/0x29c0 [ 60.373692][ T6308] alloc_vmap_area+0x645/0x29c0 [ 60.373715][ T6308] ? __pfx_alloc_vmap_area+0x10/0x10 [ 60.373736][ T6308] __get_vm_area_node+0x1ca/0x330 [ 60.373749][ T6308] __vmalloc_node_range_noprof+0x271/0x14b0 [ 60.373761][ T6308] ? kernel_clone+0xfc/0x960 [ 60.373775][ T6308] ? local_lock_release+0x99/0x140 [ 60.373795][ T6308] ? kernel_clone+0xfc/0x960 [ 60.373808][ T6308] ? rcu_read_unlock+0x17/0x60 [ 60.373826][ T6308] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 60.373843][ T6308] ? kernel_clone+0xfc/0x960 [ 60.373868][ T6308] __vmalloc_node_noprof+0xad/0xf0 [ 60.373880][ T6308] ? kernel_clone+0xfc/0x960 [ 60.373895][ T6308] copy_process+0x2c70/0x76a0 [ 60.373915][ T6308] ? __pfx_copy_process+0x10/0x10 [ 60.373936][ T6308] kernel_clone+0xfc/0x960 [ 60.373951][ T6308] ? __pfx_kernel_clone+0x10/0x10 [ 60.373980][ T6308] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 60.374001][ T6308] __do_sys_clone+0xce/0x120 [ 60.374015][ T6308] ? __pfx___do_sys_clone+0x10/0x10 [ 60.374035][ T6308] ? ksys_write+0x1ac/0x250 [ 60.374048][ T6308] ? __pfx_ksys_write+0x10/0x10 [ 60.374065][ T6308] do_syscall_64+0xcd/0x4c0 [ 60.374083][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.374094][ T6308] RIP: 0033:0x7f0713b8e929 [ 60.374103][ T6308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.374113][ T6308] RSP: 002b:00007f07149a7fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 60.374124][ T6308] RAX: ffffffffffffffda RBX: 00007f0713db5fa0 RCX: 00007f0713b8e929 [ 60.374130][ T6308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 60.374136][ T6308] RBP: 00007f07149a8090 R08: 0000000000000000 R09: 0000000000000000 [ 60.374142][ T6308] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 60.374148][ T6308] R13: 0000000000000000 R14: 00007f0713db5fa0 R15: 00007ffd5ee33d98 [ 60.374161][ T6308] [ 60.709201][ T6336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.855044][ T5946] Bluetooth: hci0: command tx timeout [ 60.856816][ T5946] Bluetooth: hci3: command tx timeout [ 60.858561][ T5296] Bluetooth: hci2: command tx timeout [ 60.885894][ T6352] FAULT_INJECTION: forcing a failure. [ 60.885894][ T6352] name failslab, interval 1, probability 0, space 0, times 0 [ 60.891742][ T6352] CPU: 3 UID: 0 PID: 6352 Comm: syz.3.97 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 60.891766][ T6352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.891777][ T6352] Call Trace: [ 60.891782][ T6352] [ 60.891789][ T6352] dump_stack_lvl+0x16c/0x1f0 [ 60.891827][ T6352] should_fail_ex+0x512/0x640 [ 60.891850][ T6352] ? __kmalloc_noprof+0xbf/0x510 [ 60.891874][ T6352] ? lsm_blob_alloc+0x68/0x90 [ 60.891891][ T6352] should_failslab+0xc2/0x120 [ 60.891916][ T6352] __kmalloc_noprof+0xd2/0x510 [ 60.891937][ T6352] ? __pfx_perf_event_init_task+0x10/0x10 [ 60.891954][ T6352] ? audit_alloc+0xa2/0x7b0 [ 60.891980][ T6352] lsm_blob_alloc+0x68/0x90 [ 60.891998][ T6352] security_task_alloc+0x2d/0x260 [ 60.892027][ T6352] copy_process+0x2205/0x76a0 [ 60.892063][ T6352] ? __pfx_copy_process+0x10/0x10 [ 60.892099][ T6352] kernel_clone+0xfc/0x960 [ 60.892123][ T6352] ? __pfx_kernel_clone+0x10/0x10 [ 60.892156][ T6352] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 60.892186][ T6352] __do_sys_clone+0xce/0x120 [ 60.892208][ T6352] ? __pfx___do_sys_clone+0x10/0x10 [ 60.892243][ T6352] ? ksys_write+0x1ac/0x250 [ 60.892266][ T6352] ? __pfx_ksys_write+0x10/0x10 [ 60.892296][ T6352] do_syscall_64+0xcd/0x4c0 [ 60.892326][ T6352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.892343][ T6352] RIP: 0033:0x7ff20eb8e929 [ 60.892357][ T6352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.892373][ T6352] RSP: 002b:00007ff20f965fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 60.892390][ T6352] RAX: ffffffffffffffda RBX: 00007ff20edb5fa0 RCX: 00007ff20eb8e929 [ 60.892402][ T6352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 60.892412][ T6352] RBP: 00007ff20f966090 R08: 0000000000000000 R09: 0000000000000000 [ 60.892422][ T6352] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 60.892432][ T6352] R13: 0000000000000000 R14: 00007ff20edb5fa0 R15: 00007fff7abfd8c8 [ 60.892455][ T6352] [ 60.992695][ T6361] __nla_validate_parse: 4 callbacks suppressed [ 60.992706][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.100'. [ 60.998013][ T6361] netlink: 84 bytes leftover after parsing attributes in process `syz.3.100'. [ 61.203600][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'. [ 61.207518][ T6373] netlink: 'syz.3.103': attribute type 30 has an invalid length. [ 61.210972][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 61.251821][ T6377] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 61.597546][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 61.602096][ T6409] capability: warning: `syz.1.113' uses deprecated v2 capabilities in a way that may be insecure [ 61.683698][ T6416] sp0: Synchronizing with TNC [ 61.891335][ T6434] tmpfs: Bad value for 'mpol' [ 61.971533][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 61.979152][ T6444] macsec0: entered promiscuous mode [ 62.022015][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 62.064087][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.217263][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.221773][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.227481][ T6461] input: syz0 as /devices/virtual/input/input6 [ 62.229129][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.243258][ T6461] tipc: Trying to set illegal importance in message [ 62.244256][ T29] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 62.251197][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.265642][ T29] usb 5-1: config 0 descriptor?? [ 62.472957][ T6431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.475717][ T6479] netlink: 32 bytes leftover after parsing attributes in process `syz.2.131'. [ 62.480283][ T6431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.549601][ T6485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.132'. [ 62.690114][ T29] hid-udraw 0003:20D6:CB17.0002: unknown main item tag 0x0 [ 62.695662][ T29] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:20D6:CB17.0002/input/input7 [ 62.769866][ T29] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:20D6:CB17.0002/input/input8 [ 62.779416][ T29] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:20D6:CB17.0002/input/input9 [ 62.797670][ T29] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:20D6:CB17.0002/input/input10 [ 62.835443][ T29] hid-udraw 0003:20D6:CB17.0002: hidraw1: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 62.885409][ T6431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.889392][ T6431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.893947][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 62.893961][ T40] audit: type=1400 audit(1749664885.090:300): avc: denied { read write } for pid=6430 comm="syz.0.121" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 62.905983][ T40] audit: type=1400 audit(1749664885.100:301): avc: denied { open } for pid=6430 comm="syz.0.121" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 63.019884][ T840] usb 5-1: USB disconnect, device number 3 [ 63.839357][ T40] audit: type=1400 audit(1749664886.040:302): avc: denied { read } for pid=6532 comm="syz.0.141" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.848574][ T40] audit: type=1400 audit(1749664886.040:303): avc: denied { open } for pid=6532 comm="syz.0.141" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.294114][ T5296] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.296386][ T5969] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 64.298776][ T5969] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 64.742552][ T40] audit: type=1400 audit(1749664886.940:304): avc: denied { map } for pid=6539 comm="syz.0.143" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.749868][ T40] audit: type=1400 audit(1749664886.940:305): avc: denied { execute } for pid=6539 comm="syz.0.143" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.758054][ T40] audit: type=1400 audit(1749664886.950:306): avc: denied { ioctl } for pid=6539 comm="syz.0.143" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x4c07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.333645][ T40] audit: type=1400 audit(1749664887.530:307): avc: denied { set_context_mgr } for pid=6551 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 65.336227][ T6552] binder: 6551:6552 ioctl c0306201 2000000003c0 returned -14 [ 65.343051][ T40] audit: type=1400 audit(1749664887.530:308): avc: denied { write } for pid=6551 comm="syz.0.146" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.352310][ T40] audit: type=1400 audit(1749664887.530:309): avc: denied { map } for pid=6551 comm="syz.0.146" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.374366][ T5296] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.374827][ T5969] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 66.379061][ T5969] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 68.454343][ T5969] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 68.454404][ T5296] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.456933][ T5969] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 70.534476][ T5969] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 70.537163][ T5969] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 70.544135][ T5296] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.653150][ T6555] netlink: 'syz.0.147': attribute type 2 has an invalid length. [ 70.657300][ T6555] netlink: 784 bytes leftover after parsing attributes in process `syz.0.147'. [ 70.801628][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 70.801638][ T40] audit: type=1400 audit(1749664893.000:312): avc: denied { execute } for pid=6568 comm="syz.0.150" dev="tmpfs" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.815635][ T40] audit: type=1400 audit(1749664893.000:313): avc: denied { execute_no_trans } for pid=6568 comm="syz.0.150" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.870593][ T40] audit: type=1400 audit(1749664893.070:314): avc: denied { lock } for pid=6568 comm="syz.0.150" path="socket:[14469]" dev="sockfs" ino=14469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 71.109550][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.112376][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.989847][ T40] audit: type=1400 audit(1749664895.190:315): avc: denied { connect } for pid=6619 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 73.036801][ T40] audit: type=1400 audit(1749664895.240:316): avc: denied { block_suspend } for pid=6626 comm="syz.1.161" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.047130][ T40] audit: type=1400 audit(1749664895.250:317): avc: denied { write } for pid=6631 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.058214][ T40] audit: type=1400 audit(1749664895.250:318): avc: denied { read } for pid=6631 comm="syz.0.162" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.066836][ T40] audit: type=1400 audit(1749664895.250:319): avc: denied { open } for pid=6631 comm="syz.0.162" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.073907][ T40] audit: type=1400 audit(1749664895.250:320): avc: denied { write } for pid=6631 comm="syz.0.162" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.081222][ T40] audit: type=1400 audit(1749664895.260:321): avc: denied { ioctl } for pid=6631 comm="syz.0.162" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.121098][ T6639] tun0: tun_chr_ioctl cmd 1074025675 [ 73.123393][ T6639] tun0: persist enabled [ 73.125685][ T6639] tun0: tun_chr_ioctl cmd 1074025675 [ 73.127982][ T6639] tun0: persist disabled [ 73.140229][ T6639] netlink: 'syz.1.165': attribute type 27 has an invalid length. [ 73.171975][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.174987][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.193506][ T6646] netlink: 52 bytes leftover after parsing attributes in process `syz.1.165'. [ 73.225513][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.231467][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.275147][ T6639] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.278241][ T6639] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.281817][ T6639] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.285554][ T6639] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.557033][ T6661] xt_bpf: check failed: parse error [ 73.643870][ T6670] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 73.643870][ T6670] The task syz.0.173 (6670) triggered the difference, watch for misbehavior. [ 73.778777][ T6677] x_tables: duplicate underflow at hook 1 [ 74.341344][ T6697] capability: warning: `syz.1.183' uses 32-bit capabilities (legacy support in use) [ 74.370614][ T6700] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.445176][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 74.447932][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.186'. [ 74.450730][ T6706] netlink: 'syz.1.186': attribute type 11 has an invalid length. [ 74.533212][ T6720] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 74.536610][ T6720] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 74.539539][ T6720] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 74.942180][ T6743] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 75.244061][ T840] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.404058][ T840] usb 5-1: Using ep0 maxpacket: 32 [ 75.406974][ T840] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 75.409543][ T840] usb 5-1: config 0 has no interface number 0 [ 75.413583][ T840] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 75.419244][ T840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.421955][ T840] usb 5-1: Product: syz [ 75.423310][ T840] usb 5-1: Manufacturer: syz [ 75.425974][ T840] usb 5-1: SerialNumber: syz [ 75.429738][ T840] usb 5-1: config 0 descriptor?? [ 75.433522][ T840] smsc95xx v2.0.0 [ 75.854225][ T6761] 9pnet_fd: Insufficient options for proto=fd [ 75.860135][ T6761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'. [ 75.888941][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 75.888956][ T40] audit: type=1400 audit(1749664898.090:339): avc: denied { bind } for pid=6763 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 75.897225][ T40] audit: type=1400 audit(1749664898.090:340): avc: denied { listen } for pid=6763 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.071561][ T40] audit: type=1400 audit(1749664898.270:341): avc: denied { read } for pid=6776 comm="syz.1.207" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 76.079058][ T40] audit: type=1400 audit(1749664898.270:342): avc: denied { open } for pid=6776 comm="syz.1.207" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 76.088399][ T40] audit: type=1400 audit(1749664898.290:343): avc: denied { ioctl } for pid=6776 comm="syz.1.207" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 76.096081][ T40] audit: type=1400 audit(1749664898.290:344): avc: denied { setattr } for pid=6776 comm="syz.1.207" name="event3" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.142608][ T40] audit: type=1400 audit(1749664898.340:345): avc: denied { name_bind } for pid=6779 comm="syz.1.208" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 76.273951][ T40] audit: type=1400 audit(1749664898.470:346): avc: denied { mount } for pid=6785 comm="syz.1.210" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.294604][ T40] audit: type=1400 audit(1749664898.500:347): avc: denied { mounton } for pid=6785 comm="syz.1.210" path="/66/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 76.443651][ T40] audit: type=1400 audit(1749664898.640:348): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.472723][ T6788] FAULT_INJECTION: forcing a failure. [ 76.472723][ T6788] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.491560][ T6788] CPU: 3 UID: 0 PID: 6788 Comm: syz.1.211 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 76.491579][ T6788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.491585][ T6788] Call Trace: [ 76.491589][ T6788] [ 76.491593][ T6788] dump_stack_lvl+0x16c/0x1f0 [ 76.491614][ T6788] should_fail_ex+0x512/0x640 [ 76.491632][ T6788] _copy_from_user+0x2e/0xd0 [ 76.491649][ T6788] copy_msghdr_from_user+0x98/0x160 [ 76.491666][ T6788] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 76.491685][ T6788] ? __pfx__kstrtoull+0x10/0x10 [ 76.491700][ T6788] ___sys_sendmsg+0xfe/0x1d0 [ 76.491716][ T6788] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.491739][ T6788] ? find_held_lock+0x2b/0x80 [ 76.491762][ T6788] __sys_sendmmsg+0x200/0x420 [ 76.491780][ T6788] ? __pfx___sys_sendmmsg+0x10/0x10 [ 76.491800][ T6788] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 76.491824][ T6788] ? fput+0x70/0xf0 [ 76.491834][ T6788] ? ksys_write+0x1ac/0x250 [ 76.491846][ T6788] ? __pfx_ksys_write+0x10/0x10 [ 76.491862][ T6788] __x64_sys_sendmmsg+0x9c/0x100 [ 76.491878][ T6788] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.491893][ T6788] do_syscall_64+0xcd/0x4c0 [ 76.491911][ T6788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.491922][ T6788] RIP: 0033:0x7f0713b8e929 [ 76.491931][ T6788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.491941][ T6788] RSP: 002b:00007f07149a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 76.491951][ T6788] RAX: ffffffffffffffda RBX: 00007f0713db5fa0 RCX: 00007f0713b8e929 [ 76.491958][ T6788] RDX: 0000000000000002 RSI: 0000200000000b40 RDI: 0000000000000003 [ 76.491964][ T6788] RBP: 00007f07149a8090 R08: 0000000000000000 R09: 0000000000000000 [ 76.491970][ T6788] R10: 0000000000040010 R11: 0000000000000246 R12: 0000000000000001 [ 76.491976][ T6788] R13: 0000000000000000 R14: 00007f0713db5fa0 R15: 00007ffd5ee33d98 [ 76.491989][ T6788] [ 76.746129][ T6801] kvm: emulating exchange as write [ 76.959956][ T6804] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 77.162584][ T5943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.168821][ T5943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.171622][ T5943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.177574][ T5943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.180942][ T5943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.187686][ T5296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.190856][ T5296] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.193371][ T5296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.196790][ T5296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.199750][ T5296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.325207][ T6815] chnl_net:caif_netlink_parms(): no params data found [ 77.442399][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.445639][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.448582][ T6815] bridge_slave_0: entered allmulticast mode [ 77.451532][ T6815] bridge_slave_0: entered promiscuous mode [ 77.455682][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.458109][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.461000][ T6815] bridge_slave_1: entered allmulticast mode [ 77.464826][ T6815] bridge_slave_1: entered promiscuous mode [ 77.509897][ T6815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.516478][ T6815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.561405][ T6815] team0: Port device team_slave_0 added [ 77.568102][ T6815] team0: Port device team_slave_1 added [ 77.620546][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.622734][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.632796][ T6815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.638924][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.641844][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.649644][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 77.650205][ T6815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.666621][ T6826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6826 comm=syz.2.221 [ 77.703490][ T6815] hsr_slave_0: entered promiscuous mode [ 77.705878][ T6815] hsr_slave_1: entered promiscuous mode [ 77.708167][ T6815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.710542][ T6815] Cannot create hsr debugfs directory [ 77.757007][ T6829] x_tables: duplicate underflow at hook 2 [ 77.841848][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 77.847076][ T6815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.855808][ T6815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.860257][ T6815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.865019][ T6815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.918796][ T6815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.940258][ T6815] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.950714][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.953584][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.960714][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.962950][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.984899][ T6815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.988198][ T6815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.002655][ T840] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 78.006576][ T840] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 78.009953][ T840] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 78.013378][ T840] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 78.023175][ T840] usb 5-1: USB disconnect, device number 4 [ 78.093584][ T6815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.258793][ T6815] veth0_vlan: entered promiscuous mode [ 78.263368][ T6815] veth1_vlan: entered promiscuous mode [ 78.283555][ T6815] veth0_macvtap: entered promiscuous mode [ 78.290054][ T6815] veth1_macvtap: entered promiscuous mode [ 78.300188][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.320348][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.326185][ T6886] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 78.330355][ T6815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.336002][ T6815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.338901][ T6815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.341451][ T6815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.402037][ T6904] xt_ecn: cannot match TCP bits for non-tcp packets [ 78.404740][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.407443][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.443270][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.447018][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.472555][ T6920] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 78.565833][ T6935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.249'. [ 78.569675][ T6934] uprobe: syz.2.249:6934 failed to unregister, leaking uprobe [ 78.730901][ T6943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.252'. [ 78.739868][ T5981] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 78.886176][ T5981] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.890115][ T5981] usb 6-1: config 0 has no interfaces? [ 78.892331][ T5981] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.896112][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.904086][ T5981] usb 6-1: config 0 descriptor?? [ 79.109099][ T5981] usb 6-1: USB disconnect, device number 3 [ 79.254224][ T5943] Bluetooth: hci4: command tx timeout [ 79.619497][ T6957] FAULT_INJECTION: forcing a failure. [ 79.619497][ T6957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.625596][ T6957] CPU: 3 UID: 0 PID: 6957 Comm: syz.4.257 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 79.625619][ T6957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.625629][ T6957] Call Trace: [ 79.625635][ T6957] [ 79.625642][ T6957] dump_stack_lvl+0x16c/0x1f0 [ 79.625694][ T6957] should_fail_ex+0x512/0x640 [ 79.625729][ T6957] _copy_from_iter+0x29f/0x16f0 [ 79.625756][ T6957] ? __lock_acquire+0xb8a/0x1c90 [ 79.625782][ T6957] ? tcp_leave_memory_pressure+0x1f/0x100 [ 79.625807][ T6957] ? __pfx__copy_from_iter+0x10/0x10 [ 79.625830][ T6957] ? __sk_mem_raise_allocated+0x94d/0x1670 [ 79.625856][ T6957] ? skb_page_frag_refill+0x11d/0x5a0 [ 79.625881][ T6957] sk_msg_memcopy_from_iter+0x415/0x600 [ 79.625917][ T6957] tcp_bpf_sendmsg+0x79b/0x1b80 [ 79.625954][ T6957] ? __pfx_tcp_bpf_sendmsg+0x10/0x10 [ 79.626055][ T6957] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 79.626088][ T6957] ? __import_iovec+0x1dd/0x650 [ 79.626113][ T6957] ? __might_fault+0xe3/0x190 [ 79.626132][ T6957] ? __might_fault+0x13b/0x190 [ 79.626154][ T6957] ? __pfx_tcp_bpf_sendmsg+0x10/0x10 [ 79.626176][ T6957] inet6_sendmsg+0x119/0x140 [ 79.626193][ T6957] ____sys_sendmsg+0x705/0xc70 [ 79.626214][ T6957] ? copy_msghdr_from_user+0x10a/0x160 [ 79.626239][ T6957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.626264][ T6957] ? __pfx__kstrtoull+0x10/0x10 [ 79.626289][ T6957] ___sys_sendmsg+0x134/0x1d0 [ 79.626317][ T6957] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.626359][ T6957] ? find_held_lock+0x2b/0x80 [ 79.626400][ T6957] __sys_sendmmsg+0x200/0x420 [ 79.626430][ T6957] ? __pfx___sys_sendmmsg+0x10/0x10 [ 79.626494][ T6957] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.626534][ T6957] ? fput+0x70/0xf0 [ 79.626548][ T6957] ? ksys_write+0x1ac/0x250 [ 79.626568][ T6957] ? __pfx_ksys_write+0x10/0x10 [ 79.626594][ T6957] __x64_sys_sendmmsg+0x9c/0x100 [ 79.626619][ T6957] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.626645][ T6957] do_syscall_64+0xcd/0x4c0 [ 79.626673][ T6957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.626691][ T6957] RIP: 0033:0x7f0d72f8e929 [ 79.626705][ T6957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.626721][ T6957] RSP: 002b:00007f0d73da3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 79.626738][ T6957] RAX: ffffffffffffffda RBX: 00007f0d731b5fa0 RCX: 00007f0d72f8e929 [ 79.626749][ T6957] RDX: 0000000000000002 RSI: 0000200000000b40 RDI: 0000000000000003 [ 79.626759][ T6957] RBP: 00007f0d73da3090 R08: 0000000000000000 R09: 0000000000000000 [ 79.626769][ T6957] R10: 0000000000040010 R11: 0000000000000246 R12: 0000000000000001 [ 79.626779][ T6957] R13: 0000000000000000 R14: 00007f0d731b5fa0 R15: 00007ffee552fab8 [ 79.626804][ T6957] [ 79.795808][ T6961] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 79.849276][ T6963] Bluetooth: MGMT ver 1.23 [ 79.886060][ T6967] all: renamed from lo (while UP) [ 79.920287][ T6970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6970 comm=syz.4.262 [ 79.926708][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 79.929936][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.262'. [ 79.969334][ T6972] netlink: 'syz.4.263': attribute type 3 has an invalid length. [ 80.294466][ C0] ------------[ cut here ]------------ [ 80.296402][ C0] WARNING: CPU: 0 PID: 0 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x684/0x830 [ 80.299370][ C0] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 80.301880][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 80.306841][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.310142][ C0] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 80.311982][ C0] Code: 0f 0b 90 e9 12 fe ff ff e8 59 33 be f7 90 0f 0b 90 e9 5e fe ff ff e8 4b 33 be f7 90 0f 0b 90 e9 94 fe ff ff e8 3d 33 be f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 cf f0 24 f8 e9 d7 fc ff ff 4c 89 ff e8 [ 80.318093][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010246 [ 80.320019][ C0] RAX: 0000000000000000 RBX: ffff888028208d80 RCX: ffffffff89fde847 [ 80.322465][ C0] RDX: ffffffff8e297780 RSI: ffffffff89fde973 RDI: 0000000000000005 [ 80.324975][ C0] RBP: 0000000000000fcb R08: 0000000000000005 R09: 0000000000000000 [ 80.327450][ C0] R10: 0000000000000fcb R11: 0000000000000001 R12: ffff888028208d80 [ 80.329879][ C0] R13: ffff888028208e10 R14: ffffc90000007e90 R15: 0000000000000003 [ 80.332377][ C0] FS: 0000000000000000(0000) GS:ffff8880d6754000(0000) knlGS:0000000000000000 [ 80.335176][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.337267][ C0] CR2: 0000555560c43808 CR3: 000000005032f000 CR4: 0000000000352ef0 [ 80.339709][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.342142][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.344650][ C0] Call Trace: [ 80.345719][ C0] [ 80.346647][ C0] ? inet6_cleanup_sock+0x117/0x210 [ 80.348277][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 80.350031][ C0] __sk_destruct+0x84/0x980 [ 80.351483][ C0] ? rcu_core+0x797/0x14e0 [ 80.352892][ C0] rcu_core+0x79c/0x14e0 [ 80.354289][ C0] ? __pfx_rcu_core+0x10/0x10 [ 80.355793][ C0] handle_softirqs+0x219/0x8e0 [ 80.357329][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 80.359007][ C0] __irq_exit_rcu+0x109/0x170 [ 80.360490][ C0] irq_exit_rcu+0x9/0x30 [ 80.361828][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 80.363591][ C0] [ 80.364593][ C0] [ 80.365537][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 80.367439][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 80.369194][ C0] Code: bb 72 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 50 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 80.375208][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 00000286 [ 80.377233][ C0] RAX: 00000000000da971 RBX: 0000000000000000 RCX: ffffffff8b7fbc99 [ 80.379655][ C0] RDX: 0000000000000000 RSI: ffffffff8de18f75 RDI: ffffffff8c157060 [ 80.382106][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed100d486645 [ 80.384630][ C0] R10: ffff88806a43322b R11: 0000000000000001 R12: 0000000000000000 [ 80.387103][ C0] R13: ffffffff8e297780 R14: ffffffff90a80c50 R15: 0000000000000000 [ 80.389718][ C0] ? ct_kernel_exit+0x139/0x190 [ 80.391296][ C0] default_idle+0x13/0x20 [ 80.392661][ C0] default_idle_call+0x6d/0xb0 [ 80.394230][ C0] do_idle+0x391/0x510 [ 80.395545][ C0] ? __pfx_do_idle+0x10/0x10 [ 80.397025][ C0] ? find_held_lock+0x2b/0x80 [ 80.398519][ C0] cpu_startup_entry+0x4f/0x60 [ 80.400036][ C0] rest_init+0x16b/0x2b0 [ 80.401366][ C0] ? acpi_subsystem_init+0x133/0x180 [ 80.403045][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 80.404858][ C0] start_kernel+0x3ee/0x4d0 [ 80.406295][ C0] x86_64_start_reservations+0x18/0x30 [ 80.408005][ C0] x86_64_start_kernel+0x130/0x190 [ 80.409606][ C0] common_startup_64+0x13e/0x148 [ 80.411170][ C0] [ 80.412156][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.414421][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 80.418090][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.421397][ C0] Call Trace: [ 80.422471][ C0] [ 80.423398][ C0] dump_stack_lvl+0x3d/0x1f0 [ 80.424860][ C0] panic+0x71c/0x800 [ 80.426085][ C0] ? __pfx_panic+0x10/0x10 [ 80.427497][ C0] ? show_trace_log_lvl+0x29b/0x3e0 [ 80.429163][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 80.430779][ C0] ? inet_sock_destruct+0x684/0x830 [ 80.432411][ C0] check_panic_on_warn+0xab/0xb0 [ 80.433972][ C0] __warn+0xf6/0x3c0 [ 80.435218][ C0] ? inet_sock_destruct+0x684/0x830 [ 80.436854][ C0] report_bug+0x3c3/0x580 [ 80.438220][ C0] ? inet_sock_destruct+0x684/0x830 [ 80.439862][ C0] handle_bug+0x184/0x210 [ 80.441224][ C0] exc_invalid_op+0x17/0x50 [ 80.442680][ C0] asm_exc_invalid_op+0x1a/0x20 [ 80.444207][ C0] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 80.446027][ C0] Code: 0f 0b 90 e9 12 fe ff ff e8 59 33 be f7 90 0f 0b 90 e9 5e fe ff ff e8 4b 33 be f7 90 0f 0b 90 e9 94 fe ff ff e8 3d 33 be f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 cf f0 24 f8 e9 d7 fc ff ff 4c 89 ff e8 [ 80.451952][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010246 [ 80.453840][ C0] RAX: 0000000000000000 RBX: ffff888028208d80 RCX: ffffffff89fde847 [ 80.456298][ C0] RDX: ffffffff8e297780 RSI: ffffffff89fde973 RDI: 0000000000000005 [ 80.458760][ C0] RBP: 0000000000000fcb R08: 0000000000000005 R09: 0000000000000000 [ 80.461133][ C0] R10: 0000000000000fcb R11: 0000000000000001 R12: ffff888028208d80 [ 80.463564][ C0] R13: ffff888028208e10 R14: ffffc90000007e90 R15: 0000000000000003 [ 80.466011][ C0] ? inet_sock_destruct+0x557/0x830 [ 80.467639][ C0] ? inet_sock_destruct+0x683/0x830 [ 80.469274][ C0] ? inet6_cleanup_sock+0x117/0x210 [ 80.470913][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 80.472658][ C0] __sk_destruct+0x84/0x980 [ 80.474101][ C0] ? rcu_core+0x797/0x14e0 [ 80.475501][ C0] rcu_core+0x79c/0x14e0 [ 80.476850][ C0] ? __pfx_rcu_core+0x10/0x10 [ 80.478345][ C0] handle_softirqs+0x219/0x8e0 [ 80.479862][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 80.481539][ C0] __irq_exit_rcu+0x109/0x170 [ 80.483037][ C0] irq_exit_rcu+0x9/0x30 [ 80.484405][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 80.486170][ C0] [ 80.487156][ C0] [ 80.488102][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 80.489974][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 80.491736][ C0] Code: bb 72 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 50 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 80.497668][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 00000286 [ 80.499569][ C0] RAX: 00000000000da971 RBX: 0000000000000000 RCX: ffffffff8b7fbc99 [ 80.502020][ C0] RDX: 0000000000000000 RSI: ffffffff8de18f75 RDI: ffffffff8c157060 [ 80.504513][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed100d486645 [ 80.507004][ C0] R10: ffff88806a43322b R11: 0000000000000001 R12: 0000000000000000 [ 80.509477][ C0] R13: ffffffff8e297780 R14: ffffffff90a80c50 R15: 0000000000000000 [ 80.511942][ C0] ? ct_kernel_exit+0x139/0x190 [ 80.513475][ C0] default_idle+0x13/0x20 [ 80.514805][ C0] default_idle_call+0x6d/0xb0 [ 80.516267][ C0] do_idle+0x391/0x510 [ 80.517519][ C0] ? __pfx_do_idle+0x10/0x10 [ 80.518968][ C0] ? find_held_lock+0x2b/0x80 [ 80.520457][ C0] cpu_startup_entry+0x4f/0x60 [ 80.521969][ C0] rest_init+0x16b/0x2b0 [ 80.523321][ C0] ? acpi_subsystem_init+0x133/0x180 [ 80.524975][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 80.526703][ C0] start_kernel+0x3ee/0x4d0 [ 80.528174][ C0] x86_64_start_reservations+0x18/0x30 [ 80.529891][ C0] x86_64_start_kernel+0x130/0x190 [ 80.531507][ C0] common_startup_64+0x13e/0x148 [ 80.533068][ C0] [ 80.534722][ C0] Kernel Offset: disabled [ 80.536094][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:01:42 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff855b53d0 RDI=ffffffff9b0883a0 RBP=ffffffff9b088360 RSP=ffffc90000007698 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff36110c6 R15=dffffc0000000000 RIP=ffffffff855b53f7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6754000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555560c43808 CR3=000000005032f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5ee34120 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0713c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0713c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0713c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0713c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0713c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0713c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000011 RBX=0000000000000001 RCX=ffffffff820864c6 RDX=ffff88801cfca440 RSI=0000000000000001 RDI=0000000000000000 RBP=ffff888036548000 RSP=ffffc9000409f828 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=ffff8880574a52d0 R14=dffffc0000000000 R15=00000000000001a6 RIP=ffffffff81bc1790 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6854000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3db7ee7d60 CR3=00000000320c3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3db73846a3 00007f3db73846a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffccdac5730 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555940faa5c 00005555940fa7c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555940f1498 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555940f40e7 00005555940f4070 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000c0171b00fff ffffffffff040180 041c100000080008 014de24080808296 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 040fffffffffffff 040fffffffffffff 040010000fffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0401808080 10000c0171b00fff ffffffffff040180 041c100000080008 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 014de24080808296 1000019003101000 0180030fffffffff ffff040f800403a0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000060171b6adcb 495b4947e71e7173 e18b631856f39325 33db5570dfd3ce76 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000bf9d3 RBX=0000000000000002 RCX=ffffffff8b7fbc99 RDX=0000000000000000 RSI=ffffffff8de18f75 RDI=ffffffff8c157060 RBP=ffffed1003bd1910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801de8c880 R14=ffffffff90a80c50 R15=0000000000000000 RIP=ffffffff8b7fa7ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6954000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc1eac02f98 CR3=0000000057b42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1e9e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1e9e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1e9e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1e9e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1e9e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1e9e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1e9f84488 00007fc1e9f84480 00007fc1e9f84478 00007fc1e9f84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1eaaed100 00007fc1e9f84440 00007fc1e9f84458 00007fc1e9f844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1e9f84498 00007fc1e9f84490 00007fc1e9f84488 00007fc1e9f84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000060 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff822e7be2 RBX=00007fc1eaae5720 RCX=000000000005aa30 RDX=ffffffff822e7c01 RSI=ffffffff822e7c01 RDI=000000000000000c RBP=ffffffff822e7c01 RSP=00007ffc6412d600 R8 =00007fc1e9fb6038 R9 =00007fc1e9fa2000 R10=00007fc1e93ff008 R11=000000000000000c R12=000000000000000c R13=0000000000000000 R14=ffffffff822e7c01 R15=000000000005aa30 RIP=00007fc1e9c6ea30 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555560c43500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc1e9faf048 CR3=0000000057b42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003070 6174657267367069 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1e9e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1e9e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1e9e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1e9e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1e9e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1e9e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4004000880020014 0000746300010007 8001002080040024 0000000200000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a00000200000000 0000000000010011 0000001400000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000307a7973 000100090d000000 2702000800000000 4004000880020014 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000060 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000