last executing test programs: 3.40868329s ago: executing program 0 (id=79): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x20000) (async) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x20000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x4, 0xfff3}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x40004) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffffffff, @loopback, 0xfffffffd}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffffffff, @loopback, 0xfffffffd}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3], 0x34}}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c2002ec2ac06f6cb673a52115e72f057e0687a8086ba9f09da158622574a8805d67cc4475a852b078215fea9c2f2353bba207582a7ed3ecde920e918536a807c17384db4b049b9ba2e", 0x5f) r5 = accept4(r4, 0x0, 0x0, 0x800) socket(0x11, 0x3, 0x0) (async) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) sendmmsg$alg(r5, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="7926b8687de4d9065df0", 0xa}, {&(0x7f0000000280)="b5f1dfc0fe810cc2efec734a256ce132e216a8c0bc31b66d7f705c826fe3", 0x1e}], 0x2, 0x0, 0x0, 0x840}], 0x1, 0x400480d1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000006000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="000000eaff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000feffffff00"/28], 0x50) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000006000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="000000eaff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000feffffff00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r12, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) bind$inet6(r12, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 3.359100691s ago: executing program 0 (id=80): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b31, &(0x7f0000000580)={0xe}) r1 = syz_open_dev$audion(&(0x7f0000000000), 0xfffffffffffffffc, 0x10000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x9) 3.358025212s ago: executing program 0 (id=81): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) readlink(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)=""/87, 0x57) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101441, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x80b00, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000300)=0x800) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async) readlink(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)=""/87, 0x57) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x9}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101441, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x80b00, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000300)=0x800) (async) 2.779053319s ago: executing program 3 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x60, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0xfe58}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x64008814}, 0x4000060) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) recvmmsg(r5, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x1, 0x0) 1.927289261s ago: executing program 3 (id=88): socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000bdd000/0x2000)=nil) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x3d) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000001) recvfrom$inet6(r3, &(0x7f0000000680)=""/254, 0xfe, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0xa2d, @empty, 0x4}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r9, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdb93f201}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r11, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) fchdir(r4) r12 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r12, &(0x7f0000001fc0)=""/184, 0xb8) 1.847218698s ago: executing program 3 (id=89): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000024c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x61, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x62, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x2, {}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xf, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}, [{0xdd, 0x15, "e701471b76b826f8f5388abb66848832f68d5b57a3"}, {0xdd, 0x6, "f257d6ded32c"}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) writev(r1, &(0x7f0000000b00)=[{&(0x7f0000000240)="bf93", 0x2}], 0x1) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x103101, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000005215000228bd7000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x10) r9 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r9, 0x100000000) 1.55293146s ago: executing program 3 (id=91): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) write$snddsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@getstats={0x1c, 0x5e, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f00000010c0)=""/4097, 0x1001}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) 517.975131ms ago: executing program 2 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x1f, 0x1, 'mmap_lock_acquire_returned\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0x40) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x10) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000100)={0xf97cff8c, 0x8}, 0xa) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x1f, 0x1, 'mmap_lock_acquire_returned\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0x40) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) dup(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x10) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$selinux_load(r4, &(0x7f0000000100)={0xf97cff8c, 0x8}, 0xa) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) (async) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000000)) (async) 517.241633ms ago: executing program 2 (id=112): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'sit0\x00', r2, 0x8000, 0x7800, 0x9, 0x2, {{0x12, 0x4, 0x1, 0x2d, 0x48, 0x68, 0x0, 0xc, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@rr={0x7, 0xf, 0x84, [@multicast2, @remote, @multicast1]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x9e, [@local, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010100]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000480)={'erspan0\x00', r3, 0x1, 0x1, 0x3f6, 0x0, {{0x25, 0x4, 0x2, 0x29, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @rand_addr=0x64010100, {[@ssrr={0x89, 0xf, 0x5, [@private=0xa010100, @loopback, @loopback]}, @timestamp_prespec={0x44, 0x2c, 0xd2, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x14}, 0xfed}, {@empty, 0xc}, {@loopback, 0x5}, {@empty, 0x9}, {@private=0xa010100, 0xfff}]}, @lsrr={0x83, 0xb, 0x49, [@multicast1, @broadcast]}, @lsrr={0x83, 0x7, 0x78, [@broadcast]}, @rr={0x7, 0x13, 0xdf, [@broadcast, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x88, 0x3, 'o'}, @ssrr={0x89, 0x1b, 0x10, [@empty, @dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010100, @multicast1, @empty, @private=0xa010102]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010001fff000040000100000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000ceff12800b00010067656e65766500001400028000000d00ae06000046a5c0e403bfd3baa50994a867083ebe18438ace522240444804939790c3b36de1b45b0a53bb3b85328971f468e59aff598978aebc695b1a7adf51bc821591ffe554d52e4335eff1d87ccdff00"/122], 0x4c}, 0x1, 0x0, 0x0, 0x48804}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'sit0\x00', r2, 0x8000, 0x7800, 0x9, 0x2, {{0x12, 0x4, 0x1, 0x2d, 0x48, 0x68, 0x0, 0xc, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@rr={0x7, 0xf, 0x84, [@multicast2, @remote, @multicast1]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x9e, [@local, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010100]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000480)={'erspan0\x00', r3, 0x1, 0x1, 0x3f6, 0x0, {{0x25, 0x4, 0x2, 0x29, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @rand_addr=0x64010100, {[@ssrr={0x89, 0xf, 0x5, [@private=0xa010100, @loopback, @loopback]}, @timestamp_prespec={0x44, 0x2c, 0xd2, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x14}, 0xfed}, {@empty, 0xc}, {@loopback, 0x5}, {@empty, 0x9}, {@private=0xa010100, 0xfff}]}, @lsrr={0x83, 0xb, 0x49, [@multicast1, @broadcast]}, @lsrr={0x83, 0x7, 0x78, [@broadcast]}, @rr={0x7, 0x13, 0xdf, [@broadcast, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x88, 0x3, 'o'}, @ssrr={0x89, 0x1b, 0x10, [@empty, @dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010100, @multicast1, @empty, @private=0xa010102]}]}}}}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010001fff000040000100000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000ceff12800b00010067656e65766500001400028000000d00ae06000046a5c0e403bfd3baa50994a867083ebe18438ace522240444804939790c3b36de1b45b0a53bb3b85328971f468e59aff598978aebc695b1a7adf51bc821591ffe554d52e4335eff1d87ccdff00"/122], 0x4c}, 0x1, 0x0, 0x0, 0x48804}, 0x0) (async) 428.035998ms ago: executing program 2 (id=113): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000010c0)={0x2, 0x2, 0x1, 0x1fe}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000a00)={0x28, 0x2, r4, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0xb5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r10, 0xc018643a, &(0x7f0000000140)={0x8000000, 0x592e, 0x81}) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) recvfrom$rxrpc(r0, &(0x7f00000001c0)=""/118, 0x76, 0x40002001, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) ioctl$KVM_RUN(r9, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r12 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r12, r12, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="521124814b03", 0x6, 0x20048001, 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003e0001ff099a24a10400000001808ec21080040005800c0002000000003dbf2575c000"/48], 0x30}, 0x1, 0x0, 0x0, 0xc8010}, 0x404c004) 328.836034ms ago: executing program 2 (id=116): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="753a6f626a6563745f723a6170705f646174615f66696c888c08bfa4653a73303a633531322c633736382073797374656d5f753a6f626a6563745f723a61646d696e5f7061737377645f657865637e743a7330203030303030303030303030303030303030303030202f7573722f7362696e2f637570732d62726ff51c9f2b8cbc7cc0e536d5812af6c6705c445dbd80a36d9b5ef861e967bbd31c36195ea6c29a7f60f9f3706d32ac61dc3128ebc251d381a7c7cc9e963f9f"], 0x7b) close_range(r1, 0xffffffffffffffff, 0x0) 328.566499ms ago: executing program 2 (id=117): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x218, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0xff, 0x5, "b953a78e8e749f684ee74cd9ede92493b3751321cedf2645658b86f7868e1a91a8d13f6f83f454bbc4dfd8102669a70165920f86f7b29bf8c05b8aad7ea6c2922efcba4a05ff0cd27fe0ec1d722c20870e3f2be058c72d46bc6e7f962e5a5759b18fd52a75e3d4a7eb6ee05431a586e2c74d9b872439d7bb472aa9f3e35ca728051b75919c767bf3f2de5581a2f9fe3163643262474bfdb39b43bc2da8991563fee18f0eb337383bc8a66172e46224f93dee0281b8ebe465ec6b275a7bd08dd8ab19bf920e6539073d4ae3036aa9f4a5d42d8796f6c891440d3e204192d299b6a94c17bccbe810244068e7ef84d57fa616e263546a4b3ad3f05388"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "7d398300"}, @ETHTOOL_A_BITSET_MASK={0xe6, 0x5, "0f716544b77c9d9eaef4ff97b11895e431a179634e95733a37fc9d0b7149c2f807b128570b6b6d2923abb82bfc7b66dc7231bf7aed9742b9c48b71a033ad53d89cce5459c3da78d4487ca6349cc1f2a16d10780dd0b68fc56cc258f94702d22035654c8f5f7d9383bc4d2ff0d111f70eb2dd12802e2be7f167992ecbe3f53eee8b17403f2152893c9fd5e969ef9f815059568049ae52f7d3702e4609fdd3403865503812472abac63cc2570087e0b35fb619b2bfd9294e77535c3b992c470127e8fb4cf10787c82ad7236b11ca4cb4a021580b1611fc0bfda221bdf30a3be3dd3760"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x218}}, 0x9ecf5f02b518acad) mount(&(0x7f0000000040)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f00000003c0)='tmpfs\x00', 0xc009, 0x0) 258.588377ms ago: executing program 2 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) read(r0, &(0x7f0000000000)=""/218, 0xda) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000200009000000008ef54565ff05"], 0x14}}, 0x8000) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f00000001c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x30, 0x2e]}}, 0x0, 0x21, 0x0, 0x0, 0x2}, 0x28) 179.087107ms ago: executing program 0 (id=120): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x8d9bd000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f00000001c0)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000180)) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xfff0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB="4bc9bda4fe91aa17c2f55fccc018c61c000000"], 0x48}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) fchown(r4, r7, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000a80)={0x57c, 0x39, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1f}, [@nested={0xb2, 0x70, 0x0, 0x1, [@nested={0x4, 0xa4}, @typed={0xc, 0x150, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x42, 0x0, 0x0, @uid=r7}, @typed={0x4, 0xdf}, @generic="f694d892ec621c12bbd9caa5554eafc3ba7776cefd47077dbf584df23e45429b79be146485412b96643f70454df35d197da79d01d19df548b3a807a6f9a59e30388b7b34668898f251e74f32750f3e850afb106b4329043b81bdd3651e80548a384322993ca588b11d751f64347659d744af34f97899047e83cfe905200848a2c4e33df64b683a977f5df645b9591044ee3e"]}, @nested={0x10, 0xf3, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x44}]}, @generic="8300c471ab69f5ae5354c9c1660f5a5af569021db07521fad9375b8daad1477890de491541329eb180993ca690aea2b9a5f7bfc78f482e549586f12b52bc33fc260bc9b40ed6fe05de49cc19a02cf42c09f4ad1dd2b1b69afd5667aba0f53d218397b150d59f0f6697b33fc8a42beb5a9396ff888b5f445a3b137536dace02f43edf1c2be167542e9f53b72444a6f16d357ea195fb9706f28afd78a06a25ae71c73e07e5d7949c20f3abd146bef98880b2cf691c80db4d165b", @nested={0x297, 0xbe, 0x0, 0x1, [@typed={0x8e, 0xb3, 0x0, 0x0, @binary="55e4e0c02be928315ee684d49486ef3b085b75926443eb96402a42c6b44f8b9db7d46c57d473550777a093b53afd94b3e4a93fba16092c9e792188395bbceee7ee4bf9fbc1361df681b22890ba2cac8981f2b9592ef8667cf1c55005c7123f948a9c74357fde4b8aefdc6fb2f8101f1db9dfd11ad2008cfbd9c726b0a592099209020c905f6a10f53d0d"}, @generic="a1d860517f55a23afaa915", @nested={0x4, 0x56}, @nested={0x4, 0x42}, @generic="2c386b3a243cfb5bdcf4bd50cddbc26fba7930f145add896680d7fb6bc68d79d8545c86a04b20d52dfbc2f53c7502ee025e8963c4eed5453f46de6e91788597246951754aa4717408d86a024692983bd274618ae8052d6a67be06c7eafc1ba8d705bf49172c124afcdd40609962ec0135785fea76df0d2c2e7162bd3cfe027ef178ff01119ddb89415b21a6f73ed8b285973b48fa3311cfcf0723e7bc5368ab22f37f10d9e57", @generic="1fd67385bcc26f3198ca3a496792559154e0c956973b33528f826f2e5d78b83f360b22ac4c6ebefe0745121ebf78495a97cc1adcefe29ad1d8a7ceee1b586dc604b51b9c9388a3b743bb1b1f6e1127a4c546ccc6298af7226025710af58e86a9c3d6ac7c2be2ca81bd6f44ea8575340b93f897443a132f1a6d8d2bbf8735c6e4a4e027482c57cc4d229452c1803dac3512f8c39e45f4c1ec5edc3c569f98b3617095b7a443acdcf74311", @generic, @typed={0x50, 0x13c, 0x0, 0x0, @binary="ae426d2c310db0e0bba7e2c1d2e68f976df05212b6acc52ba4c2850c54d01679ebec61cf06d66d5466fccdc9549d05175bf4824c1a7d7179ab85244282a2be98fdedd2e6ce14ba96d9d94b24"}, @generic="f163e6e8a3890ebe95c643e5ff1bacde75b2d99856e85c04a67af3e53cb668a8503624daf3bd8d4f63bd99e611eefcbaeaa8adae8e4274b405dc94a0e00a8c727ca0fcd6ff382b78fc0762438fe8a605"]}, @typed={0x8, 0x82, 0x0, 0x0, @fd=r2}, @generic="73bcdc32da958de37e018df2b593e87191c868a8a2e7f80d91f52bcfefed28e6d9b36c333f3557101d9604f5c2757c62051a1b6b735a211a3efc3e12d4a4a6c5af8d18430196dcd5d18a92d51b45618f5b9e8c7719369cf4fa22ec41f8a82ac6c1948afb62f9cbfe8408b8f629aecea494b3779ebd474272c7972b147c1bfcb360ee471f55fcc2ba19f7dcacf9495e5a12fc1620baa421ce2dad746da0cbf7ed327376abf41e25", @generic="35910096f6ef7aac8b1a4ff53053da3d29281b8ab81da4f8c0bd5525d09520365f7d673ffdcb3e0050f289f03aff464d41494c58d395e5aee9a1ec7117b9dcdc66696639f0c9b2c1a7e6f12df8a8f1677f0f12c58553f99bf2386d8b59013c9b5ca6d3691e14f7a19c021a71d1dcd0d35481609b7dfffaeb3bae3dba3ca254a935b8558f11910f5c71937a57e3d862f43c80d52ef42b23c0a88bc667ec94db62ac0be6"]}, 0x57c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) 177.285649ms ago: executing program 0 (id=122): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x208563b1da94c8b2, 0x1, 0x3}}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000a80), 0x4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003e000701feffffff00000008017c0000040042800c00018006000600800a0000100002800c001980080001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) r3 = accept4(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000200)=0x80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc0046209, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00f65c2974745f09e6e7a9d7104d26b23c450000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0009000000"], 0x3c}}, 0x4000050) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) close_range(r3, r5, 0x2) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 175.785422ms ago: executing program 1 (id=123): request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 109.115672ms ago: executing program 1 (id=124): syz_emit_ethernet(0xfffffffffffffcc1, &(0x7f0000001180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@fragment={0x3c, 0x0, 0x4, 0x0, 0x0, 0x1b, 0x66}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/110, 0x6e}, {&(0x7f0000000080)=""/252, 0xfc}, {&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000300)=""/201, 0xc9}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000400)=""/71, 0x47}, {&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000580)=""/29, 0x1d}, {&(0x7f00000005c0)=""/79, 0x4f}], 0xa, 0x48, 0x7ff) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 6.217254ms ago: executing program 3 (id=125): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x4) (async) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)="32bacda6e162b85846b19b32610c06b314bb214ce76a1a4ecf2b1c18b41f006236ecae4a3b5a5f327ea14c7ff863254472cb32ed61769e9ca6e3c595bebbfc93932968e3a08aa75d36dd13e731b3adec25dd8e4b50c5250fb92a619ab9ca2d3ff7040f79602f0b27ad9707908ffb4a3ddb973ca26a321c3628452541ef4a38d330c4a6e76c2d620c04e6520056175816bf8c346b87bc371e7916fe41892b2ce61a8e27d214b23da2eb7b1668ff84db05f578d2ff03cfcf8f160a136c541fd80b81c0e2206b19a97980708f5c5df83159f3000000000000000000", 0xda, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="9de05b7bd0c82b89a1b7a24884dd012a85ae00007301fc000000000300000000000000000001ff020000e856c778275cf353551a1434d4be39e2000000000000000000f4ff01"], 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) (async) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6(0xa, 0x2, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, r5) (async) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup(r7) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x101ff, 0x2, 0xd000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r8, 0x0, 0x9}, 0x18) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) close(r10) (async) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x100000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 3.698038ms ago: executing program 1 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x80490a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r0, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x464, 0x200, 0x70bd26, 0x25dfdbfb, "1294a284d1dbf92205e00187363e21c229a90ff418476ec6cabc149e28fae62569539ca628952d3bf23b5a8a5479e963ee659f3a3cdaaeecf75461e13d48be555dddbcaea7f6daeb61903de016455a5413707925e5709c5a6367e5247ffdadba0a0a50e46f236d08509c5293b3b2317951168b89bf375a7cbc9476be222c68abb7ff1f4d78a2d7a22ddd0de41afce0493e8fd29c2cf11a039fb46d974d1db0238c2d7a62f01170643d09ffa8ca7cfefbf0afba073f8a6de93a93dfd62156cadf4f253182", ["", "", "", "", "", "", "", "", "", ""]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x10) mknodat$loop(r0, &(0x7f00000000c0)='./file0/file0\x00', 0xc000, 0x0) 2.567743ms ago: executing program 0 (id=127): r0 = socket$netlink(0x10, 0x3, 0x0) exit(0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="040081000a000600080211000001000006001a01040000000600100063"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100003050000000000070000953d0000", @ANYRES32=0x0, @ANYBLOB="0000000005000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 1.408333ms ago: executing program 1 (id=128): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x1, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_shrink_slab_end\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0xfd, [0x5, 0x4, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0xffff, 0x8000], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8002}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}]}]}}]}, 0xb8}}, 0x20000000) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r3, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x1, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_shrink_slab_end\x00', r4, 0x0, 0x3}, 0x18) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0xfd, [0x5, 0x4, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0xffff, 0x8000], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8002}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}]}]}}]}, 0xb8}}, 0x20000000) (async) 1.285168ms ago: executing program 3 (id=129): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffe, 0x80, 0x3231564e, 0x3, [0x2], [0x1, 0xffffffff, 0x4ec], [0x0, 0x0, 0x0, 0xfffffffc], [0xa1d6]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x382, 0x240, 0x380, 0x0}) 334.271µs ago: executing program 1 (id=130): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r1, 0x7}, 0x8) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@rc, &(0x7f0000000000)=0x80) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000100)={0x5c, 0x3, 0x8, 0x5, 0x1, 0x81}) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x8, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/242, 0xf2}], 0x1, 0xfb, 0x0) 0s ago: executing program 1 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000180)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, r0}], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0xf, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x5, 0x3, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x7, 0x2, 0x1}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000500)=""/56, 0x38, 0x0, &(0x7f0000000540)=""/168, 0xa8}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r6, r7, 0x25, 0x17, @val=@target_btf_id=r8}, 0x14) r9 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 0s ago: executing program 0 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000cc0)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x250, 0x0, 0x250, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x27}, 0x1000000, 0xff, 'wg1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0x158, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x3, 0xf4, 'kmp\x00', "377da29a98a85027440fb1647c5950ecfd45c615dfd84bacf537ed92ac620b95fe75775bfa0c1f3636674f1bc9affc23d45f6e27b674720897315a51a5338ca0ac2dd6b5b2d96bd558dc767e923d15aba2f74dff1149e15f5ba483d804234a06e4bc7d462efc9092f876f845199bb88c0f39fec8f07125d04e8375b370fdb68d", 0x5d, 0x2, {0x6}}}, @common=@unspec=@cpu={{0x28}, {0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x0, 0x3, 0x0, 0x4, 0x4], 0x1, 0x3}, {0x4, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5c4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xda}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4814) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xfc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r8 = fanotify_init(0xf00, 0x0) fanotify_mark(r8, 0x1, 0x10001011, r7, 0x0) (async) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)) close(r5) close(r4) kernel console output (not intermixed with test programs): [ 38.211041][ T40] audit: type=1400 audit(1752503054.068:61): avc: denied { siginh } for pid=5858 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:37753' (ED25519) to the list of known hosts. [ 39.522621][ T40] audit: type=1400 audit(1752503055.398:62): avc: denied { name_bind } for pid=5865 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.543725][ T40] audit: type=1400 audit(1752503055.428:63): avc: denied { write } for pid=5866 comm="sh" path="pipe:[2987]" dev="pipefs" ino=2987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.556711][ T40] audit: type=1400 audit(1752503055.438:64): avc: denied { execute } for pid=5866 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.565409][ T40] audit: type=1400 audit(1752503055.438:65): avc: denied { execute_no_trans } for pid=5866 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.565318][ T40] audit: type=1400 audit(1752503057.448:66): avc: denied { mounton } for pid=5866 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.567888][ T5866] cgroup: Unknown subsys name 'net' [ 41.727018][ T5866] cgroup: Unknown subsys name 'cpuset' [ 41.731630][ T5866] cgroup: Unknown subsys name 'rlimit' [ 41.977222][ T5901] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.632501][ T5866] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.818622][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.818633][ T40] audit: type=1400 audit(1752503061.698:80): avc: denied { execmem } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.993734][ T40] audit: type=1400 audit(1752503061.868:81): avc: denied { create } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.001547][ T40] audit: type=1400 audit(1752503061.868:82): avc: denied { create } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.009598][ T40] audit: type=1400 audit(1752503061.878:83): avc: denied { read write } for pid=5951 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.019155][ T40] audit: type=1400 audit(1752503061.878:84): avc: denied { read write } for pid=5950 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.028496][ T40] audit: type=1400 audit(1752503061.878:85): avc: denied { open } for pid=5951 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.036278][ T40] audit: type=1400 audit(1752503061.878:86): avc: denied { ioctl } for pid=5950 comm="syz-executor" path="socket:[6252]" dev="sockfs" ino=6252 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.043137][ T5960] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.043954][ T5961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.044625][ T5961] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.045601][ T5961] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.047509][ T5960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.050537][ T5961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.052600][ T5960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.054368][ T5962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.054957][ T5962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.055175][ T5962] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.055963][ T5961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.056226][ T5961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.061104][ T5964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.062007][ T5962] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.064978][ T5964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.066869][ T5962] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.067678][ T40] audit: type=1400 audit(1752503061.938:87): avc: denied { read } for pid=5963 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.067705][ T40] audit: type=1400 audit(1752503061.938:88): avc: denied { open } for pid=5963 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.067726][ T40] audit: type=1400 audit(1752503061.938:89): avc: denied { mounton } for pid=5963 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.070115][ T5967] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.110217][ T5967] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.114523][ T5967] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.117864][ T5967] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.303805][ T5963] chnl_net:caif_netlink_parms(): no params data found [ 46.382054][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 46.489550][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 46.508826][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 46.527507][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.529783][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.532102][ T5963] bridge_slave_0: entered allmulticast mode [ 46.537513][ T5963] bridge_slave_0: entered promiscuous mode [ 46.545580][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.548572][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.551569][ T5963] bridge_slave_1: entered allmulticast mode [ 46.555547][ T5963] bridge_slave_1: entered promiscuous mode [ 46.671002][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.674168][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.677156][ T5952] bridge_slave_0: entered allmulticast mode [ 46.680979][ T5952] bridge_slave_0: entered promiscuous mode [ 46.692039][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.701486][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.705053][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.707655][ T5952] bridge_slave_1: entered allmulticast mode [ 46.710251][ T5952] bridge_slave_1: entered promiscuous mode [ 46.719532][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.852441][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.855457][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.858323][ T5950] bridge_slave_0: entered allmulticast mode [ 46.862187][ T5950] bridge_slave_0: entered promiscuous mode [ 46.866340][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.869360][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.872371][ T5950] bridge_slave_1: entered allmulticast mode [ 46.877454][ T5950] bridge_slave_1: entered promiscuous mode [ 46.904871][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.908117][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.910793][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.913759][ T5951] bridge_slave_0: entered allmulticast mode [ 46.917247][ T5951] bridge_slave_0: entered promiscuous mode [ 46.922722][ T5963] team0: Port device team_slave_0 added [ 46.940595][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.943484][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.946552][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.948819][ T5951] bridge_slave_1: entered allmulticast mode [ 46.951422][ T5951] bridge_slave_1: entered promiscuous mode [ 46.968722][ T5963] team0: Port device team_slave_1 added [ 47.042251][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.069192][ T5952] team0: Port device team_slave_0 added [ 47.073000][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.076575][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.078750][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.086667][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.091588][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.109801][ T5952] team0: Port device team_slave_1 added [ 47.112950][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.116171][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.118268][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.125825][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.189415][ T5951] team0: Port device team_slave_0 added [ 47.194198][ T5950] team0: Port device team_slave_0 added [ 47.210730][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.212906][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.221413][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.226830][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.229063][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.237807][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.242265][ T5951] team0: Port device team_slave_1 added [ 47.245533][ T5950] team0: Port device team_slave_1 added [ 47.349245][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.351450][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.362784][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.368836][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.371769][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.382268][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.387701][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.390542][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.399459][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.423823][ T5963] hsr_slave_0: entered promiscuous mode [ 47.426101][ T5963] hsr_slave_1: entered promiscuous mode [ 47.435725][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.438560][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.446786][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.489193][ T5952] hsr_slave_0: entered promiscuous mode [ 47.492987][ T5952] hsr_slave_1: entered promiscuous mode [ 47.496314][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.499621][ T5952] Cannot create hsr debugfs directory [ 47.605977][ T5950] hsr_slave_0: entered promiscuous mode [ 47.608146][ T5950] hsr_slave_1: entered promiscuous mode [ 47.610241][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.612729][ T5950] Cannot create hsr debugfs directory [ 47.681958][ T5951] hsr_slave_0: entered promiscuous mode [ 47.684518][ T5951] hsr_slave_1: entered promiscuous mode [ 47.686760][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.689129][ T5951] Cannot create hsr debugfs directory [ 47.976542][ T5950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.984835][ T5950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.996534][ T5950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.002225][ T5950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.038191][ T5952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.043402][ T5952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.049042][ T5952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.053884][ T5952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.112864][ T5963] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.119800][ T5963] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.124868][ T5967] Bluetooth: hci2: command tx timeout [ 48.124870][ T5315] Bluetooth: hci1: command tx timeout [ 48.124939][ T5962] Bluetooth: hci3: command tx timeout [ 48.130402][ T5963] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.138025][ T5963] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.200160][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.203821][ T5315] Bluetooth: hci0: command tx timeout [ 48.204568][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.209590][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.219224][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.221566][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.238232][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.252642][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.265242][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.267488][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.276883][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.279024][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.289030][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.305620][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.307846][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.331408][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.336306][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.338574][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.376613][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.382072][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.391791][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.394110][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.406770][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.409028][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.412943][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.421488][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.423777][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.432478][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.434847][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.467269][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.507340][ T5950] veth0_vlan: entered promiscuous mode [ 48.518954][ T5950] veth1_vlan: entered promiscuous mode [ 48.528759][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.542997][ T5950] veth0_macvtap: entered promiscuous mode [ 48.548311][ T5950] veth1_macvtap: entered promiscuous mode [ 48.567253][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.572310][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.578558][ T5952] veth0_vlan: entered promiscuous mode [ 48.582497][ T5950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.589032][ T5950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.591829][ T5950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.596604][ T5950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.601906][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.610402][ T5952] veth1_vlan: entered promiscuous mode [ 48.627253][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.644708][ T5952] veth0_macvtap: entered promiscuous mode [ 48.654676][ T5963] veth0_vlan: entered promiscuous mode [ 48.666324][ T5952] veth1_macvtap: entered promiscuous mode [ 48.682652][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.684762][ T5963] veth1_vlan: entered promiscuous mode [ 48.687132][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.711391][ T5951] veth0_vlan: entered promiscuous mode [ 48.716794][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.717842][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.719352][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.724240][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.730574][ T5952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.733311][ T5952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.737116][ T5952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.739845][ T5952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.745283][ T5951] veth1_vlan: entered promiscuous mode [ 48.757364][ T5963] veth0_macvtap: entered promiscuous mode [ 48.766457][ T5963] veth1_macvtap: entered promiscuous mode [ 48.779217][ T5950] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.790999][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.804612][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.806866][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.809346][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.816545][ T5951] veth0_macvtap: entered promiscuous mode [ 48.820754][ T5963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.823480][ T5963] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.826775][ T5963] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.829505][ T5963] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.839442][ T5951] veth1_macvtap: entered promiscuous mode [ 48.850184][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.854077][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.864402][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.874487][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.881249][ T5951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.885059][ T5951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.887991][ T5951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.890786][ T5951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.910067][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.912692][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.936873][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.939367][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.966638][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.969116][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.991043][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.994834][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.133383][ T6041] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 49.460245][ T6073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60370 sclass=netlink_route_socket pid=6073 comm=syz.0.12 [ 49.465616][ T6073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60370 sclass=netlink_route_socket pid=6073 comm=syz.0.12 [ 49.773651][ T5993] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.923634][ T5993] usb 6-1: Using ep0 maxpacket: 32 [ 49.928701][ T6082] loop2: detected capacity change from 0 to 7 [ 49.933936][ T5957] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 49.937120][ T5957] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 49.939287][ T5957] Dev loop2: unable to read RDB block 7 [ 49.941085][ T5957] loop2: unable to read partition table [ 49.942988][ T5957] loop2: partition table beyond EOD, truncated [ 49.950933][ T6082] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 49.954250][ T6082] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 49.956514][ T6082] Dev loop2: unable to read RDB block 7 [ 49.958309][ T6082] loop2: unable to read partition table [ 49.960240][ T6082] loop2: partition table beyond EOD, truncated [ 49.962256][ T6082] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 49.972647][ T5993] usb 6-1: unable to get BOS descriptor or descriptor too short [ 49.981157][ T5993] usb 6-1: too many configurations: 105, using maximum allowed: 8 [ 49.986669][ T5993] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 49.989070][ T5993] usb 6-1: can't read configurations, error -71 [ 50.204333][ T5315] Bluetooth: hci3: command tx timeout [ 50.214120][ T5315] Bluetooth: hci1: command tx timeout [ 50.284110][ T5315] Bluetooth: hci0: command tx timeout [ 50.725553][ T6103] block device autoloading is deprecated and will be removed. [ 50.795127][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 50.806721][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.853200][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 50.853211][ T40] audit: type=1400 audit(1752503066.728:164): avc: denied { create } for pid=6037 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 50.855979][ T6039] syz.2.3 (6039) used greatest stack depth: 19960 bytes left [ 50.897130][ T6104] bridge_slave_1 (unregistering): left allmulticast mode [ 50.899349][ T6104] bridge_slave_1 (unregistering): left promiscuous mode [ 50.901929][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.919019][ T6111] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.946686][ T40] audit: type=1400 audit(1752503066.828:165): avc: denied { write } for pid=6115 comm="syz.1.23" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.971204][ T40] audit: type=1400 audit(1752503066.848:166): avc: denied { map } for pid=6115 comm="syz.1.23" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.978816][ T6116] binder: 6115:6116 ioctl c0306201 200000002800 returned -11 [ 50.979783][ T40] audit: type=1400 audit(1752503066.858:167): avc: denied { call } for pid=6115 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 50.991066][ T40] audit: type=1400 audit(1752503066.868:168): avc: denied { create } for pid=6117 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.997367][ T40] audit: type=1400 audit(1752503066.868:169): avc: denied { connect } for pid=6117 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.003653][ T40] audit: type=1400 audit(1752503066.868:170): avc: denied { setopt } for pid=6117 comm="syz.2.21" laddr=172.20.20.60 lport=1 faddr=172.20.20.60 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.011104][ T40] audit: type=1400 audit(1752503066.868:171): avc: denied { write } for pid=6117 comm="syz.2.21" path="socket:[9315]" dev="sockfs" ino=9315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.018613][ T40] audit: type=1400 audit(1752503066.868:172): avc: denied { read } for pid=6117 comm="syz.2.21" path="socket:[9315]" dev="sockfs" ino=9315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.026314][ T40] audit: type=1400 audit(1752503066.878:173): avc: denied { read write } for pid=6117 comm="syz.2.21" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.028862][ T6122] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 0, id = 0 [ 51.163697][ T5315] Bluetooth: hci2: command tx timeout [ 51.250598][ T6139] input: syz0 as /devices/virtual/input/input5 [ 51.308936][ T6143] netlink: 'syz.1.29': attribute type 4 has an invalid length. [ 51.319976][ T6143] netlink: 'syz.1.29': attribute type 4 has an invalid length. [ 51.408425][ T6151] x_tables: duplicate underflow at hook 1 [ 51.505513][ T6158] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 51.508765][ T6158] macvlan0: entered promiscuous mode [ 51.510590][ T6158] macvlan0: entered allmulticast mode [ 51.515135][ T6158] veth1_vlan: entered allmulticast mode [ 51.518824][ T6158] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 51.521678][ T6158] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 51.525434][ T6158] veth1_vlan: left allmulticast mode [ 51.527935][ T6158] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 51.530470][ T6158] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 51.533027][ T6158] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 51.536115][ T6158] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 51.539286][ T6158] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 51.542384][ T6158] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 51.643303][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 51.763712][ T6165] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.052089][ T6177] kernel profiling enabled (shift: 7) [ 52.283944][ T5315] Bluetooth: hci3: command tx timeout [ 52.322347][ T6197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.45'. [ 52.326762][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 52.363688][ T5315] Bluetooth: hci0: command tx timeout [ 52.403615][ T1457] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 52.433946][ T6203] kAFS: unparsable volume name [ 52.565693][ T1457] usb 7-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 52.568915][ T1457] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 52.573681][ T1457] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 52.576584][ T1457] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.579166][ T1457] usb 7-1: Product: syz [ 52.580579][ T1457] usb 7-1: Manufacturer: syz [ 52.582150][ T1457] usb 7-1: SerialNumber: syz [ 52.585274][ T1457] usb 7-1: config 0 descriptor?? [ 52.673656][ T5953] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.799087][ T1457] usb 7-1: USB disconnect, device number 2 [ 52.844276][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 52.851971][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.855245][ T5953] usb 5-1: config 0 has no interfaces? [ 52.859277][ T5953] usb 5-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 52.862238][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.865049][ T5953] usb 5-1: Product: syz [ 52.866422][ T5953] usb 5-1: Manufacturer: syz [ 52.868002][ T5953] usb 5-1: SerialNumber: syz [ 52.873854][ T5953] usb 5-1: config 0 descriptor?? [ 52.882604][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 53.254598][ T5315] Bluetooth: hci2: command tx timeout [ 53.265429][ T53] usb 5-1: USB disconnect, device number 2 [ 53.616168][ T6219] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.54'. [ 53.675382][ T6221] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6221 comm=syz.2.55 [ 53.732981][ T6225] capability: warning: `syz.2.56' uses 32-bit capabilities (legacy support in use) [ 53.741097][ T6225] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6225 comm=syz.2.56 [ 53.748007][ T6226] blktrace: Concurrent blktraces are not allowed on sg0 [ 53.877844][ T6237] Zero length message leads to an empty skb [ 53.885495][ T6239] bridge: RTM_NEWNEIGH with invalid ether address [ 54.106209][ T6256] capability: warning: `syz.1.66' uses deprecated v2 capabilities in a way that may be insecure [ 54.456293][ T5315] Bluetooth: hci0: command tx timeout [ 54.584503][ T838] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 54.636882][ T6290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.74'. [ 54.641159][ T6290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.74'. [ 54.646033][ T6290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.74'. [ 54.649026][ T6290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.74'. [ 54.743616][ T838] usb 6-1: Using ep0 maxpacket: 8 [ 54.746471][ T838] usb 6-1: config 0 interface 0 has no altsetting 0 [ 54.748601][ T838] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 54.751937][ T838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.757032][ T838] usb 6-1: config 0 descriptor?? [ 54.875140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 54.885094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.887962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.890781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.894099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.897188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.900207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.903263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.968679][ T838] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 55.123623][ T1457] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 55.220533][ T6273] binder: 6271:6273 ioctl c0306201 2000000003c0 returned -14 [ 55.223182][ T6273] batadv_slave_1: entered promiscuous mode [ 55.236649][ T5953] usb 6-1: USB disconnect, device number 4 [ 55.239790][ T6271] batadv_slave_1: left promiscuous mode [ 55.273684][ T1457] usb 7-1: Invalid ep0 maxpacket: 32 [ 55.403609][ T1457] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 55.553644][ T1457] usb 7-1: Invalid ep0 maxpacket: 32 [ 55.555885][ T1457] usb usb7-port1: attempt power cycle [ 55.600689][ T6317] wireguard0: entered promiscuous mode [ 55.602832][ T6317] wireguard0: entered allmulticast mode [ 55.781774][ T6320] bond0: Error: Cannot enslave bond to itself. [ 55.903668][ T1457] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 55.934913][ T1457] usb 7-1: Invalid ep0 maxpacket: 32 [ 56.083676][ T1457] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 56.104586][ T1457] usb 7-1: Invalid ep0 maxpacket: 32 [ 56.106403][ T1457] usb usb7-port1: unable to enumerate USB device [ 56.205582][ T6330] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.278315][ T6333] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 56.280517][ T6333] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 56.285082][ T6333] vhci_hcd vhci_hcd.0: Device attached [ 56.290663][ T6333] vhci_hcd vhci_hcd.0: port 0 already used [ 56.293089][ T6334] vhci_hcd: connection closed [ 56.295592][ T5315] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 56.297170][ T96] vhci_hcd: stop threads [ 56.297229][ T5315] Bluetooth: hci1: Injecting HCI hardware error event [ 56.300126][ T96] vhci_hcd: release socket [ 56.301781][ T5315] Bluetooth: hci1: hardware error 0x00 [ 56.303304][ T96] vhci_hcd: disconnect device [ 56.365650][ T5967] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 56.368599][ T5967] Bluetooth: hci3: Injecting HCI hardware error event [ 56.372175][ T5967] Bluetooth: hci3: hardware error 0x00 [ 56.458875][ T40] kauditd_printk_skb: 106 callbacks suppressed [ 56.458886][ T40] audit: type=1400 audit(1752503072.338:280): avc: denied { mount } for pid=6338 comm="syz.3.88" name="/" dev="ramfs" ino=9705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 56.540851][ T40] audit: type=1400 audit(1752503072.418:281): avc: denied { connect } for pid=6343 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.548494][ T40] audit: type=1400 audit(1752503072.418:282): avc: denied { read } for pid=6343 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.648783][ T6346] xt_hashlimit: size too large, truncated to 1048576 [ 56.759181][ T40] audit: type=1400 audit(1752503072.638:283): avc: denied { write } for pid=6343 comm="syz.3.89" path="socket:[10909]" dev="sockfs" ino=10909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.766844][ T40] audit: type=1400 audit(1752503072.638:284): avc: denied { mount } for pid=6343 comm="syz.3.89" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.773793][ T40] audit: type=1400 audit(1752503072.638:285): avc: denied { accept } for pid=6343 comm="syz.3.89" path="socket:[9113]" dev="sockfs" ino=9113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.824950][ T40] audit: type=1400 audit(1752503072.708:286): avc: denied { unmount } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.845721][ T40] audit: type=1400 audit(1752503072.728:287): avc: denied { create } for pid=6353 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.853012][ T40] audit: type=1400 audit(1752503072.728:288): avc: denied { setopt } for pid=6353 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.932181][ T40] audit: type=1400 audit(1752503072.808:289): avc: denied { checkpoint_restore } for pid=6361 comm="syz.1.95" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.084352][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.255243][ T24] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 57.258044][ T24] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 57.261229][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 57.264473][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 57.268176][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 57.272907][ T24] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 57.275899][ T24] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 57.278445][ T24] usb 8-1: Product: syz [ 57.279774][ T24] usb 8-1: Manufacturer: syz [ 57.287990][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 57.290131][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 57.293844][ T24] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 57.295743][ T24] cdc_wdm 8-1:1.0: Unknown control protocol [ 57.441460][ T6390] kvm: user requested TSC rate below hardware speed [ 57.540524][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 57.541104][ T24] usb 8-1: USB disconnect, device number 2 [ 57.542690][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 57.546396][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 57.574454][ T6394] __nla_validate_parse: 31 callbacks suppressed [ 57.574465][ T6394] netlink: 104 bytes leftover after parsing attributes in process `syz.1.103'. [ 57.586565][ T6394] validate_nla: 26 callbacks suppressed [ 57.586578][ T6394] netlink: 'syz.1.103': attribute type 3 has an invalid length. [ 57.591879][ T6394] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 57.595752][ T6394] netlink: 220 bytes leftover after parsing attributes in process `syz.1.103'. [ 57.623092][ T6396] No control pipe specified [ 57.711630][ T6402] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6402 comm=syz.2.107 [ 57.742038][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 57.746440][ T6356] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 57.749996][ T6356] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (5) [ 57.847638][ T6415] nft_compat: unsupported protocol 0 [ 57.852206][ T6415] SELinux: truncated policydb string identifier [ 57.854880][ T6415] SELinux: failed to load policy [ 57.884819][ T6420] netlink: 'syz.2.112': attribute type 1 has an invalid length. [ 57.925125][ T6420] netlink: 44 bytes leftover after parsing attributes in process `syz.2.112'. [ 57.960509][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 57.976083][ T6427] netlink: 'syz.2.113': attribute type 3 has an invalid length. [ 58.158790][ T6443] netlink: 'syz.1.119': attribute type 10 has an invalid length. [ 58.166542][ T6443] team0: Device hsr_slave_0 failed to register rx_handler [ 58.241808][ T6451] binder: 6450:6451 ioctl c0046209 0 returned -22 [ 58.343920][ T6472] binder: 6468:6472 ioctl c0306201 200000000080 returned -22 [ 58.363593][ T5315] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 58.368949][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.127'. [ 58.394666][ T6476] bond1: entered promiscuous mode [ 58.396850][ T6476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.404136][ T6476] netlink: 44 bytes leftover after parsing attributes in process `syz.0.127'. [ 58.415751][ T6476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.418141][ T6476] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 58.421938][ T6476] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 58.443664][ T5967] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 58.882282][ T6498] netlink: 64 bytes leftover after parsing attributes in process `syz.3.135'. [ 59.173334][ T6514] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 59.177127][ T6514] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 59.181317][ T6514] CPU: 3 UID: 0 PID: 6514 Comm: syz.0.138 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 59.184476][ T6514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.187813][ T6514] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 59.189491][ T6514] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 6a d7 4d f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 59.195424][ T6514] RSP: 0018:ffffc90007d2fbf0 EFLAGS: 00010293 [ 59.197300][ T6514] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff886e1aca [ 59.199777][ T6514] RDX: ffff8880567bc880 RSI: ffffffff886e1b16 RDI: 0000000000000005 [ 59.202334][ T6514] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 59.204802][ T6514] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc90007d2fd88 [ 59.207290][ T6514] R13: ffffc90007d2fd88 R14: 0000000000000001 R15: ffff888055d03000 [ 59.209815][ T6514] FS: 00007ff2b1e9d6c0(0000) GS:ffff8880d6a13000(0000) knlGS:0000000000000000 [ 59.212594][ T6514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.214677][ T6514] CR2: 00007ff2b1e9cf98 CR3: 000000005e1ad000 CR4: 0000000000352ef0 [ 59.217166][ T6514] Call Trace: [ 59.218256][ T6514] [ 59.219231][ T6514] ? __pfx_bcsp_recv+0x10/0x10 [ 59.220893][ T6514] hci_uart_tty_receive+0x254/0x7e0 [ 59.222535][ T6514] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 59.224319][ T6514] tty_ioctl+0x583/0x1640 [ 59.225715][ T6514] ? __pfx_tty_ioctl+0x10/0x10 [ 59.227231][ T6514] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 59.229429][ T6514] ? hook_file_ioctl_common+0x145/0x410 [ 59.231170][ T6514] ? selinux_file_ioctl+0x180/0x270 [ 59.232856][ T6514] ? selinux_file_ioctl+0xb4/0x270 [ 59.234557][ T6514] ? __pfx_tty_ioctl+0x10/0x10 [ 59.236079][ T6514] __x64_sys_ioctl+0x18e/0x210 [ 59.237625][ T6514] do_syscall_64+0xcd/0x4c0 [ 59.239104][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.240957][ T6514] RIP: 0033:0x7ff2b0f8e929 [ 59.242334][ T6514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.248297][ T6514] RSP: 002b:00007ff2b1e9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.251067][ T6514] RAX: ffffffffffffffda RBX: 00007ff2b11b6160 RCX: 00007ff2b0f8e929 [ 59.253554][ T6514] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000007 [ 59.256014][ T6514] RBP: 00007ff2b1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 59.258543][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.261121][ T6514] R13: 0000000000000001 R14: 00007ff2b11b6160 R15: 00007ffdb02241f8 [ 59.263576][ T6514] [ 59.264576][ T6514] Modules linked in: [ 59.265919][ C3] vkms_vblank_simulate: vblank timer overrun [ 59.267924][ T6514] ---[ end trace 0000000000000000 ]--- [ 59.270327][ T6514] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 59.272006][ T6514] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 6a d7 4d f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 59.278304][ T6514] RSP: 0018:ffffc90007d2fbf0 EFLAGS: 00010293 [ 59.280322][ T6514] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff886e1aca [ 59.282832][ T6514] RDX: ffff8880567bc880 RSI: ffffffff886e1b16 RDI: 0000000000000005 [ 59.285375][ T6514] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 59.287822][ T6514] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc90007d2fd88 [ 59.290419][ T6514] R13: ffffc90007d2fd88 R14: 0000000000000001 R15: ffff888055d03000 [ 59.292955][ T6514] FS: 00007ff2b1e9d6c0(0000) GS:ffff8880d6913000(0000) knlGS:0000000000000000 [ 59.295685][ T6514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.297723][ T6514] CR2: 0000000000000000 CR3: 000000005e1ad000 CR4: 0000000000352ef0 [ 59.300299][ T6514] Kernel panic - not syncing: Fatal exception [ 59.302927][ T6514] Kernel Offset: disabled [ 59.304294][ T6514] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:24:35 Registers: info registers vcpu 0 CPU#0 RAX=0000000000045ccc RBX=0000000000000000 RCX=ffffffff8b885c99 RDX=ffffed100d486646 RSI=ffffffff8c158e60 RDI=ffffffff81920e71 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6713000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200001000000 CR3=000000005dc9e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2d85488 00007f24a2d85480 00007f24a2d85478 00007f24a2d85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a38ed100 00007f24a2d85440 00007f24a2d85458 00007f24a2d854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2d85498 00007f24a2d85490 00007f24a2d85488 00007f24a2d85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dcdcdfc3068a1e15 658ccd9b90e92e0f 2f7c6e3eb9847bf1 b6c52dce0117e701 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1bba82883b502a79 32353a86d3f74f6e d8ddbe5078899e4e 2fcc3b45fc099707 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b428d0bc69a0f431 45868e974dfed117 4fe58748d5f3e3bf 2d7fa32357c14979 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 eef75746e858cb09 81cf2319eb919284 3763459f383a9008 fbc49d34b3071e79 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802f6edc80 RCX=ffffffff81c3c22f RDX=0000000000000000 RSI=ffffffff8c158e60 RDI=0000000000000001 RBP=ffff88802f6ede80 RSP=ffffc90006e3fca8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff90a98757 R11=ffffffff9b08c4c0 R12=0000000000000000 R13=0000000000000011 R14=0000000000000200 R15=ffff88802f6edc80 RIP=ffffffff810014b0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555572c74500 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6d5ff746c0 CR3=000000005dc9e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006f6c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2d85488 00007f24a2d85480 00007f24a2d85478 00007f24a2d85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a38ed100 00007f24a2d85440 00007f24a2d80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24a2d85498 00007f24a2d85490 00007f24a2d85488 00007f24a2d85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dcdcdfc3068a1e15 658ccd9b90e92e0f 2f7c6e3eb9847bf1 b6c52dce0117e701 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1bba82883b502a79 32353a86d3f74f6e d8ddbe5078899e4e 2fcc3b45fc099707 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b428d0bc69a0f431 45868e974dfed117 4fe58748d5f3e3bf 2d7fa32357c14979 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 eef75746e858cb09 81cf2319eb919284 3763459f383a9008 fbc49d34b3071e79 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000002c3d4 RBX=0000000000000002 RCX=ffffffff8b885c99 RDX=ffffed100d4c6646 RSI=ffffffff8c158e60 RDI=ffffffff81920e71 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff2b1e9dd58 CR3=0000000051292000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000081f9f998 Opmask01=00000000003fffff Opmask02=0000000033bfffff Opmask03=0000000000400004 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005564db1df6e0 00005564db1df6e0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005564daf25100 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005564daf25bf0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe00a3f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 000000ff00000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464646464646464 6464646464646464 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464646564646431 6464646464646464 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe000003078 303d4e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000042dd00000d45 0d004e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 40000000ffffffff 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73616c632f737973 2f002f7375622f73 39732f00d0929a8b 7379736275732f73 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f7f737f777f77 6f7f7f777f776f7f 7f7f7f7bffffffff 7f7f7f7f7d7f6f73 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70625f322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc90007d2f5f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=000000000000000a R14=ffffffff9b0c7260 R15=ffffffff855bce70 RIP=ffffffff855bceff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff2b1e9d6c0 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff2b1e9cf98 CR3=000000005e1ad000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b1011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b1011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b1011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b1011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b1011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b1011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b1185488 00007ff2b1185480 00007ff2b1185478 00007ff2b1185450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b1ced100 00007ff2b1185440 00007ff2b1185458 00007ff2b11854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b1185498 00007ff2b1185490 00007ff2b1185488 00007ff2b1185480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000