last executing test programs: 1m39.062799951s ago: executing program 0 (id=142): syz_emit_ethernet(0xfe2, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd674396200fac11fffe80000000000000000000000000000bff020000000000000000030000000001"], 0x0) 1m39.062500438s ago: executing program 0 (id=143): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) keyctl$session_to_parent(0x12) (async) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x4, 0x4) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m38.974195297s ago: executing program 0 (id=145): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x129c81, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x5, 0x400007e, 0xfffffffc, 0x5, "42341f9b1000007e4f00"}) r1 = syz_open_pts(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)="54449c19218d63a6498634306578cc911f049913bc96e81680b3b12f71ebab51d62a72fa17fa06535e7de1f69857be99173004b527fc385dcf52c509e50370", 0x3f}], 0x1) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/mtrr\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='base=0x20000000 size=0x20000 type=write-back', 0x2c) dup3(r1, r0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107446, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'fo\x00', 0x33, 0x660f537e, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000080)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10000, 0x1, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 1m38.754288637s ago: executing program 0 (id=148): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x98, &(0x7f00000001c0)={0x0, 0x24000, 0x8}}) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000000)={0x0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x2}}, 0x20) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x6, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000580)={{0x1, 0x4, 0x2, 0x9, '\x00', 0xfffffff8}, 0x1, 0x2, 0x8, r0, 0x8, 0x200, 'syz0\x00', &(0x7f0000000540)=['\x00', '\x00', '\x00', '.\x00', '\x00', '/dev/cdrom\x00', '/dev/cdrom\x00', '\x00'], 0x1d}) r5 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000740), 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000840)={0x7, 0x1, 0x1, 0x0, &(0x7f0000000800)=[{}]}) socket(0x1d, 0x1, 0xcfb) ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, &(0x7f0000000780)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000400)='./file0\x00', 0x8fff5) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r8, 0x0, 0x30, 0x4, @val=@uprobe_multi={&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=[0x8], 0x0, 0x0, 0x1, 0x1, r9}}, 0x40) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000007c0)=0x1) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r6, 0x0) ioctl$CDROM_DEBUG(r3, 0x5330, 0x1) 1m38.682843636s ago: executing program 0 (id=149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) 1m38.46783124s ago: executing program 0 (id=154): r0 = socket(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000540000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000140)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x10, 0x2, {{0x77d, 0x26d, 0x10, 0x2d82, 0x9, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100034ab1d540da0b8401070904c200017fa2250609050a0120000b84f00f5ebc9fec588654ad816ab95a9e6740cc"], &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x7, 0x180) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2501, 0x0) write$tun(r4, &(0x7f0000000340)={@void, @void, @x25={0xfb005f0bbca8dc01, 0x1a, 0xf5, "38a8a48f81ec4ec83c883ffada493016f594b7912430c3952151fe1cab0152b85417b0a2c37eb0eee23c112dd8fd4d5461b9da9748d2b0454c8ec5369c44b2cb0991e1a8efd5670294334187cae11009aff66bfecad52a6f6131d8f8a2ae24709b84f8d1e5f2f8164acc27b388be66264f145482fb5fb6ef2ba9e292dd262975b63fea342eec7a90c91b30e8b5fec2523db3d49a8c8d08b64e801e9b053376553ea4cfa15862e3286ac8db01d0c41588a5370620587fd85d6ca330226b218cf0dbc2a62943ed32b4bcf859351d2620c933bce2e9965b5c12f1942254caab427f235c282aca"}}, 0xe8) semtimedop(r3, &(0x7f0000000200)=[{0x1, 0x3ff, 0x800}, {0x0, 0x0, 0x800}, {0x4, 0x800, 0x800}, {0x1, 0x16e}, {0x1, 0x4, 0x1800}, {0x0, 0x5, 0x800}, {0x2, 0x800, 0x800}, {0x4, 0x5a38, 0x3000}], 0x14, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'pim6reg1\x00', {}, 0x3}) 1m38.377867213s ago: executing program 32 (id=154): r0 = socket(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000540000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000140)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x10, 0x2, {{0x77d, 0x26d, 0x10, 0x2d82, 0x9, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100034ab1d540da0b8401070904c200017fa2250609050a0120000b84f00f5ebc9fec588654ad816ab95a9e6740cc"], &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x7, 0x180) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2501, 0x0) write$tun(r4, &(0x7f0000000340)={@void, @void, @x25={0xfb005f0bbca8dc01, 0x1a, 0xf5, "38a8a48f81ec4ec83c883ffada493016f594b7912430c3952151fe1cab0152b85417b0a2c37eb0eee23c112dd8fd4d5461b9da9748d2b0454c8ec5369c44b2cb0991e1a8efd5670294334187cae11009aff66bfecad52a6f6131d8f8a2ae24709b84f8d1e5f2f8164acc27b388be66264f145482fb5fb6ef2ba9e292dd262975b63fea342eec7a90c91b30e8b5fec2523db3d49a8c8d08b64e801e9b053376553ea4cfa15862e3286ac8db01d0c41588a5370620587fd85d6ca330226b218cf0dbc2a62943ed32b4bcf859351d2620c933bce2e9965b5c12f1942254caab427f235c282aca"}}, 0xe8) semtimedop(r3, &(0x7f0000000200)=[{0x1, 0x3ff, 0x800}, {0x0, 0x0, 0x800}, {0x4, 0x800, 0x800}, {0x1, 0x16e}, {0x1, 0x4, 0x1800}, {0x0, 0x5, 0x800}, {0x2, 0x800, 0x800}, {0x4, 0x5a38, 0x3000}], 0x14, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'pim6reg1\x00', {}, 0x3}) 1m18.258523939s ago: executing program 2 (id=619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d286165732900000000000000000000000000010000000000000000000014"], 0x68}}, 0x0) 1m18.203058441s ago: executing program 2 (id=625): fanotify_mark(0xffffffffffffffff, 0x455, 0x8000003, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000028100000086dd60164508001806fffe8000000000000000000000010000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002020090782000"], 0x0) 1m18.134141539s ago: executing program 2 (id=626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a0000000500010007000000050004000000000f0900020073797a3100000000150003"], 0x5c}}, 0x20084884) 1m18.077427369s ago: executing program 2 (id=630): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x3f) 1m17.994092427s ago: executing program 2 (id=632): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000980)={{r1}, 0x0, 0x10, @unused=[0x6, 0x8, 0x9, 0x2], @name="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"}) syz_clone3(&(0x7f0000000700)={0x1522a900, 0x0, 0x0, 0xfffffffffffffffd, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1m17.931872442s ago: executing program 2 (id=636): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1b6) ftruncate(r1, 0x200000) pwrite64(r1, 0x0, 0x0, 0x1fe) pwrite64(r1, 0x0, 0x0, 0xc00) pwrite64(r1, &(0x7f0000000340)='1', 0x1, 0xc30) pwrite64(r1, &(0x7f0000000500), 0x0, 0xd23) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0xff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xc, &(0x7f0000000700)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r3, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r3}, &(0x7f0000000840), &(0x7f0000000880)='%pS \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000940)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pwrite64(r1, &(0x7f0000000540), 0x0, 0xd2b) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3980, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x54, 0xffffffdfffffffff, 0xa1a, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0fb84a67874795813215d5ba63fca09100"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) ppoll(&(0x7f0000000440)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) 1m16.363193216s ago: executing program 4 (id=675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x106}, 0x4000000) 1m16.362980473s ago: executing program 4 (id=676): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [0x0, 0x0, 0x1e]}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) 1m16.294187251s ago: executing program 4 (id=677): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m16.290337861s ago: executing program 4 (id=679): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security\x00', 0x100103, 0xac) write(r0, &(0x7f0000000100)='appraise func=FIRMWARE_CHECK\n', 0x1d) (async) write(r0, &(0x7f0000000200)='appraise func=MODULE_CHECK\n', 0x1b) (async) write(r0, &(0x7f0000000300)='appraise func=POLICY_CHECK\n', 0x1b) (async) write(r0, &(0x7f0000000400)='appraise func=KEXEC_KERNEL_CHECK\n', 0x21) prctl$PR_GET_IO_FLUSHER(0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x840) (async, rerun: 32) close(r0) (rerun: 32) 1m16.164326601s ago: executing program 4 (id=681): socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) creat(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/sys/net/ipv4/conf/default/forwarding\x00', 0x2, 0x0) write(r1, &(0x7f0000000680)='1', 0x1) setxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0x803a, 0x55}, {0xe, 0x100}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)=""/203, 0xcb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000240)=[{&(0x7f0000000280)=""/58, 0x3a}], 0x1, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/95, 0x5f}], 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000100)="06", 0x1}], 0x1}, 0x4000) 1m15.944123384s ago: executing program 4 (id=682): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 1m2.153188912s ago: executing program 33 (id=636): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1b6) ftruncate(r1, 0x200000) pwrite64(r1, 0x0, 0x0, 0x1fe) pwrite64(r1, 0x0, 0x0, 0xc00) pwrite64(r1, &(0x7f0000000340)='1', 0x1, 0xc30) pwrite64(r1, &(0x7f0000000500), 0x0, 0xd23) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0xff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xc, &(0x7f0000000700)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r3, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r3}, &(0x7f0000000840), &(0x7f0000000880)='%pS \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000940)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pwrite64(r1, &(0x7f0000000540), 0x0, 0xd2b) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3980, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x54, 0xffffffdfffffffff, 0xa1a, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0fb84a67874795813215d5ba63fca09100"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) ppoll(&(0x7f0000000440)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) 1m0.096643678s ago: executing program 34 (id=682): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 26.45337798s ago: executing program 1 (id=1418): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x4c, "1399b60fc3ef923165d4433f0113c315cb31a09867a83b4d769d6ac93c8ff8d3b0d275f813993ee8db2603acbeeb9acf624f75d04910823921b087857bae33fa9f130183da99a8a17650bfe2"}, &(0x7f0000000240)=0x70) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x345, 0xec000000}]}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@delneigh={0x30, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000300)={0x802, 0x0, 0x0, 0x7fffffff}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r6], 0x20}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="040028000c006e"], 0x34}, 0x1, 0x0, 0x0, 0x8806}, 0x2040894) setns(0xc9, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000004c0), r8) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x34, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0xfffffffc, 0x4}, 0x10) write(r0, &(0x7f0000000140)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) 26.363048915s ago: executing program 1 (id=1421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c79, &(0x7f00000001c0)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000005c0)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 26.02366441s ago: executing program 1 (id=1426): syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180000fe0000000000002c000000000000002cfe8000000000000000000000000000bb330200000000000004017f04010005020453c204"], 0x0) 25.973830602s ago: executing program 1 (id=1427): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x4, 0x1f4b, 0x1}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x1d, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000800)={0x35, &(0x7f0000000c40)=[{0x3f, '\x00', @data=0x1ff, 0x6}, {0x7, '\x00', @data=0x2}, {0x43, '\x00', @st={0x4, [{0x1, @svalue=0xfffffffffffffffe}, {0x0, @svalue=0x532}, {0x1, @uvalue=0x2}, {0x3, @uvalue=0xf}]}, 0x3}, {0x46, '\x00', @buffer={"1f2f85882341fa4adaae65efe1c51a30c5e25973ebab32f5b96ef7d8c297310f", 0x20}, 0x7}, {0x0, '\x00', @st={0x4, [{0x3, @svalue=0x1}, {0x0, @uvalue=0x8}, {0x0, @svalue}, {0x1}]}, 0x8}, {0x21, '\x00', @data=0x10001, 0x7}, {0x24, '\x00', @data=0xa}, {0x2, '\x00', @data=0x6, 0x6}]}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @broadcast}, 0xffffffff}}, 0x2e) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000ac0)="d3", 0x1, 0xc899) mkdir(&(0x7f0000000b00)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000bc0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000c00)='./file0/file2\x00', 0x20402, 0xb6) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x8) ioctl$FE_GET_INFO(r1, 0x80a86f3d, &(0x7f00000009c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = creat(&(0x7f0000000400)='./file0\x00', 0xb) ioctl$BLKROGET(r8, 0x125e, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x96}, 0x10}, 0x94) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000500)="8d522bd88978d6d9fa684ba45f4b69040000000000000032fee1eafd787035349f20c099125068891e3cb5c6dbf58781aa0921593372580b46e81765cf77883ded322a64d10ca039fdf03b9de5adc79a", 0x50}], 0x3}}], 0x1, 0x20d1) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000880)=[@text64={0x40, &(0x7f0000000900)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) 25.843581081s ago: executing program 1 (id=1431): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001000000000008003f"], 0x28}}, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r0, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x6}) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 25.743471389s ago: executing program 1 (id=1435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000005c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2b, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e23, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x5}}}}, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000fffffffffffffff500000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 25.600559011s ago: executing program 35 (id=1435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000005c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2b, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e23, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x5}}}}, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000fffffffffffffff500000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 18.513686733s ago: executing program 5 (id=1531): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@remote, 0x4e1e, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x4d2, 0x32}, @in6=@local, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x1, 0x7fffffffffffffff, 0x0, 0x20000000}, {}, {}, 0x0, 0xfffffffe, 0x2, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x140}}, 0x0) 18.451919935s ago: executing program 5 (id=1534): syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x2) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@alg={0xe0, 0x10, 0x1, 0x72bd28, 0x25dfdbfe, {{'gcm(aes)\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) socket$inet6(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x3, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000003140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000003c20000004000000", @ANYRES32=0x0, @ANYBLOB="170971e53a631deabd105930427d14c57049eb2b4fd2d12c3581ce794c7fa90eb7b1bd626fcab23df22a174ef3efdee9c08f923c2b2f9104e47860cab814eca1e92a06c152b00c33f110fe004893b780bade04131700c1c51d697f385a64e1e71d508c875e0fc0d3200c42a770199a7e1375f28462420fc1157915b2ce9c106ba9b0d3d2d322bd3c98d586dc4e82d485664b9b8adff4510c21a3bc4c981a11ef905dd5b27cd8303f43347c4184b202f701dd0a442c0f40fc672170a4a0d7c0da5d389a24e5ed132da57866", @ANYRES64=0x0], 0x20) 18.363340793s ago: executing program 5 (id=1536): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000006c0)) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x40002, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="100000001914"], 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20008014) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) (async) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) (async) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="f729417812c5576a52be2837898abc3da49b75a7cf4dedca6d03cf0962fe87d7", 0x20}], 0x1}, 0x24d575e11b3c7a27) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002008847000006000300e8030000040004"], 0x60}}, 0x0) ioctl$sock_ifreq(r5, 0x891a, &(0x7f0000000580)={'vcan0\x00', @ifru_addrs=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}}) (async) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000001180)=@ethtool_coalesce={0xe, 0x0, 0xffffffff, 0x6, 0x5, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x81, 0x6, 0x3, 0xe, 0x63, 0x2, 0xfffffffc, 0x200002, 0x80000800, 0x5, 0x4001ff, 0xfffffff9, 0xa}}) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 18.243156568s ago: executing program 5 (id=1540): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x4, 0x1f4b, 0x1}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x1d, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000800)={0x35, &(0x7f0000000c40)=[{0x3f, '\x00', @data=0x1ff, 0x6}, {0x7, '\x00', @data=0x2}, {0x43, '\x00', @st={0x4, [{0x1, @svalue=0xfffffffffffffffe}, {0x0, @svalue=0x532}, {0x1, @uvalue=0x2}, {0x3, @uvalue=0xf}]}, 0x3}, {0x46, '\x00', @buffer={"1f2f85882341fa4adaae65efe1c51a30c5e25973ebab32f5b96ef7d8c297310f", 0x20}, 0x7}, {0x0, '\x00', @st={0x4, [{0x3, @svalue=0x1}, {0x0, @uvalue=0x8}, {0x0, @svalue}, {0x1}]}, 0x8}, {0x21, '\x00', @data=0x10001, 0x7}, {0x24, '\x00', @data=0xa}, {0x2, '\x00', @data=0x6, 0x6}]}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @broadcast}, 0xffffffff}}, 0x2e) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000ac0)="d3", 0x1, 0xc899) mkdir(&(0x7f0000000b00)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000bc0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000c00)='./file0/file2\x00', 0x20402, 0xb6) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x8) ioctl$FE_GET_INFO(r1, 0x80a86f3d, &(0x7f00000009c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = creat(&(0x7f0000000400)='./file0\x00', 0xb) ioctl$BLKROGET(r8, 0x125e, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x96}, 0x10}, 0x94) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000500)="8d522bd88978d6d9fa684ba45f4b69040000000000000032fee1eafd787035349f20c099125068891e3cb5c6dbf58781aa0921593372580b46e81765cf77883ded322a64d10ca039fdf03b9de5adc79a", 0x50}], 0x3}}], 0x1, 0x20d1) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000880)=[@text64={0x40, &(0x7f0000000900)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) 17.994824166s ago: executing program 5 (id=1544): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000028100000086dd6016450800182cfffe8000000000000000000000000000aafe80000000000c0000000000000000aa000040"], 0x0) 16.922455205s ago: executing program 5 (id=1554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a3100f0ffff150003"], 0x5c}}, 0x20084884) 16.796309192s ago: executing program 36 (id=1554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a3100f0ffff150003"], 0x5c}}, 0x20084884) 1.709598483s ago: executing program 8 (id=1747): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.709264516s ago: executing program 8 (id=1748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x2, 0x5002) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x214040, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0x1d, 0x0, @void}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f00000000c0)={0xa00, r1}, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x82d, 0x400000) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000140)={0x2, {0x10, 0x100, 0x5, 0xfffffffffffffffe, 0x3}}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f0000000180)={0x0, 0xeab, 0x200, 0x0, 0x229, 0x0, r2}, 0x1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000002c0)=@urb_type_interrupt={0x1, {0xc, 0x1}, 0x1, 0x4, &(0x7f0000000200)="8c28303f815f82f369f5a5ea8ce0e78750c0228797778129a6497b5193353c09029af19754be6d9c9ce4b277364c5e52947e39d54ed473d549e47ffedaf45688677a8c67e79b0b285a", 0x49, 0x7c, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000280)="79f89de970bbc4444e449337b8dc2e5967d366e0cfa06565"}) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000300)=""/95, &(0x7f0000000380)=0x5f) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xb9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x20000000) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e21, 0x8c7a, @mcast1, 0xe}, 0x1c) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f0000000500)={0xa, 0x400}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r4, 0x1f, &(0x7f00000005c0)={0x28, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000540)="8fc363da8c1e6a9a9a054afe66c95915dd481a171ff3d8b05bb79e907f25bc11bb9a008f69324c7e8c72b2ff9ef5f95cd750ffa21e770e589dfbff870e86037b098b", 0x0, 0x8, 0x3, 0x1, {0x0, 0x0, r4, 0x4}}, 0x1) r7 = syz_io_uring_setup(0x78a2, &(0x7f0000000600)={0x0, 0xc6a, 0x8000, 0x3, 0x84, 0x0, r4}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) io_uring_enter(r7, 0x49aa, 0x80b0, 0x2, &(0x7f0000000740)={[0x22f5]}, 0x8) migrate_pages(0xffffffffffffffff, 0x100, &(0x7f0000000780)=0xa000000, &(0x7f00000007c0)=0x308) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000800)) read$FUSE(r2, &(0x7f0000000840)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000028c0)={'syztnl2\x00', &(0x7f0000002880)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x0, 0x7, {{0x6, 0x4, 0x2, 0x1e, 0x18, 0x65, 0x0, 0x40, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}]}}}}}) connect$packet(r4, &(0x7f0000002900)={0x11, 0x1, r8, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000002940)="5a8fff3a116ddc62531563141a62ef6c", 0x10) r9 = fsmount(r2, 0x0, 0x1) io_uring_enter(r9, 0x3247, 0x6178, 0x4, &(0x7f0000002980)={[0xa75]}, 0x8) symlink(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)='./file0\x00') ioctl$XFS_IOC_FSINUMBERS(r6, 0xc0205867, &(0x7f0000002dc0)={&(0x7f0000002a40)=0x80000000, 0x8, &(0x7f0000002a80)=[{}, {}, {}, {}], &(0x7f0000002d80)}) ioctl$int_in(r1, 0x5452, &(0x7f0000002e00)=0x6) io_uring_enter(r5, 0x2378, 0x6f46, 0x70d349b1c1fce7d6, &(0x7f0000002e40)={[0x8000000000000000]}, 0x8) 1.644114583s ago: executing program 8 (id=1749): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newsa={0x138, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in6=@mcast1, 0x4e1e, 0x0, 0x0, 0x0, 0x2}, {@in=@private=0xa010101, 0x4d2, 0x2b}, @in6=@local, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x1, 0x7fffffffffffffff}, {}, {}, 0x0, 0xfffffffe, 0x2, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) (fail_nth: 8) 1.643949891s ago: executing program 8 (id=1750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000003c0), 0x56) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000003bc0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000003c00)={'syzkaller0\x00', 0x7101}) sendmsg$kcm(r4, &(0x7f0000000400)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000540)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb6ad67d196186e061f7092e2fe1ef9a0d699e9d080edab4bfdf0700000000000033b67507b05c35577587287c161a312d2351cf0f9c19d2f0d2b52ace0218941304c45c9b529492322ecf2cf8c68a126cb82558982cdcd02dba2f605704bcafe6da433b11d59d071d79e32748a1317a1d68c1be05f1f584dde4be8c1262a925fbabe0af8c00a5181f9c85b647ed0e5f", 0xb5}, {&(0x7f0000000600)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b7081faaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb005171cfd0b37d5e807f54ece988ae6a50773488ded126b8fc9559f66619d6002a53923e4e93bf09354a28cdd2c6a0653731e3ff0fac", 0xdb}, {&(0x7f0000000700)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f0000000740)="5dc2db6fa9b830b5bedc2a54b2d4091ce8c28ef121944d189544096016abb738c8d7cbee8455797c78611bc5b5633e30c7ee1093b90e3208ecb225f6d0d29465fa81ca56e738ef1e7c0480a7b780ec614330e809a1523dbfda40a01ee577449b2adcf3ac4a416128f9b100695ec34ba5c785caca8eaf21639695869be83d5597e7d5c5d74690449c0b1589212d14268d86d6e9df6605662594a579a01f6247f8789ee2753104a9ff6c977436258777b047c00743caeee11953c7ee9f75783afc3e3e6951ad94872aef0797363080994c6e7ff1645c", 0xd5}, {&(0x7f0000000840)="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", 0xf9a}], 0x5}, 0x0) 1.474356537s ago: executing program 8 (id=1753): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000001000000000000000006112d000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/ifb0/queues/tx-0/byte_queue_limits/stall_thrs\x00', &(0x7f0000000140)={0x0, 0x100, 0x30}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000a40)={@desc={0x1, 0x0, @desc2}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000100001040100000000000000000000000000000000000000000000000900030069666230000000000c0012800800010069666200"], 0x38}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/ifb0/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x0, 0x0) read(r3, &(0x7f0000000400)=""/64, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/net/ifb1/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000840)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) sendto$inet6(r6, &(0x7f0000000940)='X', 0x34000, 0xe0, &(0x7f0000000980)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet(r5, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r5, 0x5) accept4(r5, 0x0, 0x0, 0x800) setsockopt$inet_tcp_int(r5, 0x6, 0x9, &(0x7f00000005c0)=0xa, 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000640)={0x2, 0x4e20, @loopback}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read(r4, &(0x7f0000000600)=""/64, 0x40) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="38000000100001040100000000000000000000000000000000000000000000000900030069666232000000000c0012800800010069666200"], 0x38}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/ifb0/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x0, 0x0) read(r9, &(0x7f0000000a00)=""/64, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/class/net/eth0/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x0, 0x0) 1.306757091s ago: executing program 3 (id=1759): ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x4, 0x0, 0x0, 0xe5, &(0x7f00000001c0)="9c134d6ce9afced6f2d50a629c331b7cac525dc5f4f6bcd3f401b2517c48a0ea2507e723ad39924be32d873737693030ea07006d6c5259bc0b47a7e4232c17314b016139bb379c0af185fe0f1f659d8bc326244ba2472c213d244ab07cbe65e867b9079369a98e6edfbea3ccb803d10dfb7a0b4aedf951a617e68690b20b02530698ded7c4b10d284795eed4ac932ba72c97afdc5a781c3df7e58fc24d4157cd969a270d377347c90eed81d3ca1f4f2fed8c6f30b1cf11bf57369886c9abe2dd368478d04e0aaa948f2505936d88dc4e12ab30f5d6a01c12108f448480371cbd913407e808", 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x2, 0xd, 0x7, 0xffff6148}, {0x7, 0x80, 0x8, 0x2a0000}, {0x9, 0x1, 0x2, 0x9}, {0x0, 0x8, 0x80, 0x6}, {0x8, 0x71, 0x2, 0x7fff}]}, 0x10) 1.227811513s ago: executing program 3 (id=1760): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000028100000086dd6016450800182ffffe8000000000000000000000030000aafe8000000000000000000000000000aa"], 0x0) 1.174750679s ago: executing program 8 (id=1761): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x19e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x207) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2020002, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) io_submit(0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x2) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.174482093s ago: executing program 3 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000009050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884) 1.096865471s ago: executing program 3 (id=1764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x6c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x6c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r3, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x240000d4, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x240000d4, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0xfff8, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247480f51a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b43fb98872fb1900"}, 0x5a) socket$netlink(0x10, 0x3, 0x8000000004) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) 875.431047ms ago: executing program 7 (id=1768): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000001b0000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b502f3ff000000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 875.279854ms ago: executing program 7 (id=1769): syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180000fe00000000000000100001200000002cfe8000000000000000000000000000bb330200000000000004017f04010005020453c204"], 0x0) 800.725073ms ago: executing program 7 (id=1770): syz_emit_ethernet(0xfe2, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd674396200fac11fffe80000000000000000000000000000bff020000000000000000000000400001"], 0x0) 800.527415ms ago: executing program 7 (id=1771): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) ioctl$FIONREAD(r0, 0x541b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='0\n\x00', 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="000102030405060708090a0b0c0d0e0f", 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="0102030405060708090a0b0c0d0e0f101112131415", 0x15}], 0x1, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x28, 0x117, 0x2, 0x10, '\x00'/16}], 0x40}, 0x0) read$alg(r3, &(0x7f0000000600)=""/37, 0x25) 725.237611ms ago: executing program 7 (id=1772): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) setns(0xc9, 0x0) mkdir(0x0, 0x4e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 724.686409ms ago: executing program 7 (id=1773): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x8000000000000006, 0x180, 0x2, 0xc, 0x8, 0xfab3, 0x3, 0x5, 0x0, 0xd, 0x1, 0x6, 0x0, 0xbd9], 0x1000, 0x43102}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000800)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f0000000840)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000000004d0640fe8000000000000000000000000000bbfe8000000000000000000000003f00aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="509b10009078000057bb2ba27b5db4180be2a24df9f50feb5eed9cc0c1b22182f9d39173139337cf9a15675f44ea4404fd8db866a1c24738ddff6f0fc551e509efe53db649c43f0794e6d9844aee6f606ffc2865a2ae0f99e96ca48d2d94df481940a87d6d1ca60f95ce9207a52a25d81a15b9c9dae2fdef40e22ec684bf0488a61aa2188aa4ec98185a"], 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) 224.183876ms ago: executing program 6 (id=1775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a6c1c000e0c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000401c03803c1c0080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c000280080001400000080010000780090001006c617374"], 0x1c94}}, 0x50) 223.982191ms ago: executing program 6 (id=1776): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000028100000086dd6016450800182cfffe8000000000000000000000000000aafe8000000000000000000000050000aa000040"], 0x0) 148.977259ms ago: executing program 3 (id=1777): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) setns(0xc9, 0x0) mkdir(0x0, 0x4e) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) setns(0xc9, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4001, 0x0, @empty}, 0x1c) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1b4, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x3f}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x100, {0x3, 0x8f, 0x3, 0x6}}}, @NL80211_ATTR_VHT_CAPABILITY={0xfffffffffffffe69, 0x9d, {0xc, {0x6fa8, 0x48, 0x7, 0x5}}}, @NL80211_ATTR_IE={0x16b, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x99, 0x3}}, @fast_bss_trans={0x37, 0x83, {0x2, 0x3, "5dbbc0245ea68cd542427d02d26f3632", "37443661bfbb90a79aa47f5f3c59173f522aed52bb44d6b55197c7db72452d37", "c3c7337f5ac6a9258a9a78705e8fd6005a304b47d48b7a0782feb08cfd2137b0", [{0x1, 0x4, "721d7ce5"}, {0x4}, {0x3, 0x27, "1aed365fbee86910beb2ae241f1490cd2333699f3bac0db30b3587b5579af0b5360d776c135060"}]}}, @measure_req={0x26, 0xa0, {0xff, 0x8a, 0x5, "f28a32943cd4d7aed9a6ed13ff6fb5de4c36cd9cb983ae85f5c4acf51bacccf50075817cc0900dc85a21c0dd1e270057dde4ffd198acc393e82cd612a54cced12ba5a2fe48773a5f3e5f58292dffb0ef36ad4cdf60d5504b97bea446924cd65c7d8d02ccba40345d50cb21dec38bd1b82a84a5d062db66bc65a88d6180b362ba6306688d16a4c031fef657c22ce12ab8074713282c7b6bc06aaa1ecaad"}}, @supported_rates={0x1, 0x8, [{0x48, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x18, 0x1}, {0x30, 0x1}, {0x2, 0x1}, {0x17}]}, @tim={0x5, 0x2e, {0x9, 0x45, 0x10, "f99963b6a0f2c3da93bc1248b052fb50f100ed593493739e8814a476ff3342be960608f3e5f958caee3ed9"}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x18}}, 0x24000000) 148.842643ms ago: executing program 6 (id=1778): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d286165732900000000000000000000000000000000000000000000000014"], 0x68}, 0x1, 0x0, 0x1000000}, 0x0) 148.397665ms ago: executing program 6 (id=1779): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400020202020202000004001501153d072912f16524041cdb061ddb02a52a69d51ea77e343b89fbe51535b64e072097ae0db41a26380d1c94b4dd13f1274f5cd7e28f9f05ef175d93217d068159b7a5e1fbd5c5b5d468913e8d555b93acca20acec5ebdf1c581b673f7bf89825013faa3af62ba7cedcf6474cbe3f1fa9d9e8fdf9d404d"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090) 74.362645ms ago: executing program 3 (id=1780): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000540)={0x18, 0x0, {0x100, @remote, 'gretap0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000580)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000600)) pselect6(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000680)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f00000006c0)={0x0, 0x3938700}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000400)=0x1, 0x4) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{&(0x7f0000000480)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000500)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) r5 = fsmount(r0, 0x1, 0x0) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x542afb84ad3daa4a}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20009}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000800c}, 0x40054) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) 74.258101ms ago: executing program 6 (id=1781): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) setns(0xc9, 0x0) mkdir(0x0, 0x4e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) (fail_nth: 19) 0s ago: executing program 6 (id=1782): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000140)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='mon_addr\x00', &(0x7f00000001c0)='127.0.0.1:678)\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='mount_timeout\x00', &(0x7f0000000240)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='pstore\x00', 0xaa434f2d05cb2df1, 0x0) r1 = syz_io_uring_setup(0x7b7d, &(0x7f00000002c0)={0x0, 0x2667, 0x800, 0x1, 0x1b0}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) r2 = io_uring_setup(0x5afc, &(0x7f0000000400)={0x0, 0xde57, 0x1, 0x0, 0x78}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r1, 0x1f, &(0x7f0000000540)={0x28, 0x1a, 0x0, r2, &(0x7f0000000480)="4c347a36a6f6902c84a2d2ff1df50b11642dea9a99509bac292e9053e38c6ba4ba05a2833f1c28409931694cb30f52582f698a0f1d9d95d9e8269de45963c004093a64ea5cbe8a1513542c5c2988083f33d81803cdd634ee19d733e242eb578353318ee98c197b47e551795a24c23b87c7136dee0040a6da8baacf9fbe507d0d0254273032c03a1f5ba9e2626a89988391654bdeba49ecf7b4f48505fdea511ca522a980a9e03a7a7b8fa0fedc6d603d3a376007ad1f1d", 0x0, 0x8, 0x1, 0x1, {0x0, 0x0, r0, 0x9}}, 0x1) kernel console output (not intermixed with test programs): tering): Released all slaves [ 133.166991][T10358] net_ratelimit: 5 callbacks suppressed [ 133.167005][T10358] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.182011][ T8385] bond12 (unregistering): Released all slaves [ 133.191775][ T8385] bond13 (unregistering): Released all slaves [ 133.197393][ T8385] bond14 (unregistering): Released all slaves [ 133.205676][ T8385] bond15 (unregistering): Released all slaves [ 133.211380][ T8385] bond16 (unregistering): Released all slaves [ 133.216738][ T8385] bond17 (unregistering): Released all slaves [ 133.223628][ T8385] bond18 (unregistering): Released all slaves [ 133.229212][ T8385] bond19 (unregistering): Released all slaves [ 133.238030][ T8385] bond20 (unregistering): Released all slaves [ 133.259193][ T8385] bond21 (unregistering): Released all slaves [ 133.269691][ T8385] bond22 (unregistering): Released all slaves [ 133.278804][ T8385] bond23 (unregistering): Released all slaves [ 133.287767][ T8385] bond24 (unregistering): Released all slaves [ 133.297610][ T8385] bond25 (unregistering): Released all slaves [ 133.307867][ T8385] bond26 (unregistering): (slave veth0_to_bond): Releasing active interface [ 133.307887][ T8385] veth0_to_bond: left promiscuous mode [ 133.308003][ T8385] veth0_to_bond: left allmulticast mode [ 133.309299][ T8385] bond26 (unregistering): Released all slaves [ 133.323777][ T8385] bond27 (unregistering): Released all slaves [ 133.333559][ T8385] bond28 (unregistering): Released all slaves [ 133.343422][ T8385] bond29 (unregistering): Released all slaves [ 133.355507][ T8385] bond30 (unregistering): Released all slaves [ 133.367299][ T8385] bond31 (unregistering): (slave dummy0): Removing an active aggregator [ 133.368040][ T8385] bond31 (unregistering): (slave dummy0): Releasing backup interface [ 133.383012][ T8385] bond31 (unregistering): Released all slaves [ 133.392450][ T8385] bond32 (unregistering): Released all slaves [ 133.545304][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 133.545318][ T43] audit: type=1400 audit(1791603325.871:804): avc: denied { write } for pid=10375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.598572][T10340] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.598692][T10340] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.598805][T10340] bridge_slave_0: entered allmulticast mode [ 133.601360][T10340] bridge_slave_0: entered promiscuous mode [ 133.603648][T10340] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.603737][T10340] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.603817][T10340] bridge_slave_1: entered allmulticast mode [ 133.605042][T10340] bridge_slave_1: entered promiscuous mode [ 133.635181][T10340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.637387][T10340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.637415][ T8385] ovs-dp0: left promiscuous mode [ 133.677074][ T43] audit: type=1400 audit(1791603326.021:805): avc: denied { write } for pid=10381 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.711030][T10340] team0: Port device team_slave_0 added [ 133.711063][ T8385] ovs-system: left promiscuous mode [ 133.747833][T10340] team0: Port device team_slave_1 added [ 133.753326][ T5441] 8021q: adding VLAN 0 to HW filter on device eth14 [ 133.782924][T10340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.782941][T10340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.782963][T10340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.799463][T10340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.799478][T10340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.799499][T10340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.824269][ T8385] tipc: Left network mode [ 133.841133][T10340] hsr_slave_0: entered promiscuous mode [ 133.841858][T10340] hsr_slave_1: entered promiscuous mode [ 133.914506][ T43] audit: type=1400 audit(1791603326.251:806): avc: denied { write } for pid=10384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.965806][ T8385] team0: Port device wlan0 removed [ 133.999893][ T43] audit: type=1400 audit(1791603326.331:807): avc: denied { write } for pid=10387 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.055515][ T8385] hsr_slave_0: left promiscuous mode [ 134.056113][ T8385] hsr_slave_1: left promiscuous mode [ 134.056740][ T8385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.056756][ T8385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.058608][ T8385] veth1_macvtap: left promiscuous mode [ 134.058649][ T8385] veth0_macvtap: left promiscuous mode [ 134.103271][T10390] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 134.206427][ T8385] team0 (unregistering): Port device team_slave_1 removed [ 134.216536][ T8385] team0 (unregistering): Port device team_slave_0 removed [ 134.335769][ T5441] 8021q: adding VLAN 0 to HW filter on device eth15 [ 134.336037][T10395] tipc: Cannot configure node identity twice [ 134.367041][T10340] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 134.370785][T10340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.371439][T10340] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 134.385480][T10340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.386659][T10340] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 134.391495][T10340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.395142][T10340] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 134.404156][T10340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.410110][ T5732] Bluetooth: hci0: command tx timeout [ 134.449953][T10340] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.453956][T10340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.454163][T10340] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.454277][T10340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.500903][ T43] audit: type=1400 audit(1791603326.841:808): avc: denied { read } for pid=10410 comm="syz.6.1449" laddr=172.20.20.170 lport=6639 faddr=172.20.20.170 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.509065][ T176] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.520265][ T176] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.535852][ T43] audit: type=1400 audit(1791603326.871:809): avc: denied { write } for pid=10409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.587809][T10340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.591678][ T43] audit: type=1400 audit(1791603326.931:810): avc: denied { write } for pid=10418 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.602529][T10340] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.606077][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.606121][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.618019][ T43] audit: type=1400 audit(1791603326.951:811): avc: denied { ioctl } for pid=10410 comm="syz.6.1449" path="socket:[36260]" dev="sockfs" ino=36260 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.630047][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.630124][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.645969][ T8385] IPVS: stop unused estimator thread 0... [ 134.655807][T10415] zswap: compressor z not available [ 134.659082][ T5441] 8021q: adding VLAN 0 to HW filter on device eth16 [ 134.692583][T10427] netlink: 'syz.3.1452': attribute type 1 has an invalid length. [ 134.708316][T10427] 8021q: adding VLAN 0 to HW filter on device bond32 [ 134.719393][T10427] bond25: (slave veth0_to_bond): Releasing active interface [ 134.719420][T10427] veth0_to_bond: left promiscuous mode [ 134.719547][T10427] veth0_to_bond: left allmulticast mode [ 134.729443][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1453'. [ 134.729731][T10427] bond32: (slave veth0_to_bond): making interface the new active one [ 134.736888][T10427] bond32: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 134.748078][T10427] bond32: entered promiscuous mode [ 134.748096][T10427] veth0_to_bond: entered promiscuous mode [ 134.748245][T10427] bond32: entered allmulticast mode [ 134.748257][T10427] veth0_to_bond: entered allmulticast mode [ 134.758945][ T43] audit: type=1400 audit(1791603327.091:812): avc: denied { write } for pid=10431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.783627][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1453'. [ 134.798897][T10438] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 134.823406][ T43] audit: type=1400 audit(1791603327.161:813): avc: denied { write } for pid=10439 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.843025][T10444] netlink: 'syz.3.1455': attribute type 11 has an invalid length. [ 134.843043][T10444] netlink: 'syz.3.1455': attribute type 4 has an invalid length. [ 134.879461][ T5441] 8021q: adding VLAN 0 to HW filter on device eth17 [ 135.013064][T10340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.063597][T10466] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.178228][T10476] tipc: Cannot configure node identity twice [ 135.208351][T10340] veth0_vlan: entered promiscuous mode [ 135.222489][T10340] veth1_vlan: entered promiscuous mode [ 135.244857][T10340] veth0_macvtap: entered promiscuous mode [ 135.248542][T10340] veth1_macvtap: entered promiscuous mode [ 135.257211][T10340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.260832][T10340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.290485][ T8385] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.290534][ T8385] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.290568][ T8385] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.290596][ T8385] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.339632][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.339651][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.364461][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.364480][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.413864][T10483] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.440739][ T57] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 135.497827][T10493] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.563493][T10499] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 135.600461][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 135.601174][ T57] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 135.603730][ T57] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 135.603750][ T57] usb 8-1: config 0 has no interface number 0 [ 135.603785][ T57] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 135.603803][ T57] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 135.603824][ T57] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.603844][ T57] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.603872][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.608837][ T57] usb 8-1: config 0 descriptor?? [ 135.621887][ T57] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 135.823929][ T57] usb 8-1: USB disconnect, device number 14 [ 135.831009][ T57] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 136.377163][T10514] Could not find key with description: [syz] [ 136.377173][T10514] process_request_key_err: No key [ 136.377178][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.377183][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.377199][T10514] Error validating options; rc = [-2] [ 136.377402][T10514] Could not find key with description: [syz] [ 136.377407][T10514] process_request_key_err: No key [ 136.377412][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.377417][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.377430][T10514] Error validating options; rc = [-2] [ 136.377602][T10514] Could not find key with description: [syz] [ 136.377609][T10514] process_request_key_err: No key [ 136.377615][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.377622][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.377643][T10514] Error validating options; rc = [-2] [ 136.377955][T10514] Could not find key with description: [syz] [ 136.377962][T10514] process_request_key_err: No key [ 136.377969][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.377977][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.378000][T10514] Error validating options; rc = [-2] [ 136.378337][T10514] Could not find key with description: [syz] [ 136.378344][T10514] process_request_key_err: No key [ 136.378351][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.378359][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.378387][T10514] Error validating options; rc = [-2] [ 136.378624][T10514] Could not find key with description: [syz] [ 136.378630][T10514] process_request_key_err: No key [ 136.378634][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.378639][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.378652][T10514] Error validating options; rc = [-2] [ 136.378668][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 136.378819][T10514] Could not find key with description: [syz] [ 136.378824][T10514] process_request_key_err: No key [ 136.378828][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.378833][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.378847][T10514] Error validating options; rc = [-2] [ 136.379024][T10514] Could not find key with description: [syz] [ 136.379029][T10514] process_request_key_err: No key [ 136.379033][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.379039][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.379052][T10514] Error validating options; rc = [-2] [ 136.379259][T10514] Could not find key with description: [syz] [ 136.379266][T10514] process_request_key_err: No key [ 136.379271][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.379278][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.379296][T10514] Error validating options; rc = [-2] [ 136.379617][T10514] Could not find key with description: [syz] [ 136.379624][T10514] process_request_key_err: No key [ 136.379631][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.379639][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.379662][T10514] Error validating options; rc = [-2] [ 136.379964][T10514] Could not find key with description: [syz] [ 136.381524][T10514] process_request_key_err: No key [ 136.381531][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.381536][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.381551][T10514] Error validating options; rc = [-2] [ 136.381763][T10514] Could not find key with description: [syz] [ 136.381768][T10514] process_request_key_err: No key [ 136.381772][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.381777][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.381791][T10514] Error validating options; rc = [-2] [ 136.381959][T10514] Could not find key with description: [syz] [ 136.381964][T10514] process_request_key_err: No key [ 136.381968][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.381973][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.381986][T10514] Error validating options; rc = [-2] [ 136.382160][T10514] Could not find key with description: [syz] [ 136.382165][T10514] process_request_key_err: No key [ 136.382169][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.382174][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.382187][T10514] Error validating options; rc = [-2] [ 136.382517][T10514] Could not find key with description: [syz] [ 136.382525][T10514] process_request_key_err: No key [ 136.382532][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.382540][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.382563][T10514] Error validating options; rc = [-2] [ 136.382879][T10514] Could not find key with description: [syz] [ 136.382887][T10514] process_request_key_err: No key [ 136.382893][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.382901][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.382925][T10514] Error validating options; rc = [-2] [ 136.383144][T10514] Could not find key with description: [syz] [ 136.383150][T10514] process_request_key_err: No key [ 136.383154][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.383159][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.383172][T10514] Error validating options; rc = [-2] [ 136.383348][T10514] Could not find key with description: [syz] [ 136.383353][T10514] process_request_key_err: No key [ 136.383357][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.383363][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.383380][T10514] Error validating options; rc = [-2] [ 136.383583][T10514] Could not find key with description: [syz] [ 136.383589][T10514] process_request_key_err: No key [ 136.383593][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.383598][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.383611][T10514] Error validating options; rc = [-2] [ 136.383875][T10514] Could not find key with description: [syz] [ 136.383881][T10514] process_request_key_err: No key [ 136.383884][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.383889][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.383909][T10514] Error validating options; rc = [-2] [ 136.384199][T10514] Could not find key with description: [syz] [ 136.384207][T10514] process_request_key_err: No key [ 136.384214][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.384222][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.384246][T10514] Error validating options; rc = [-2] [ 136.384584][T10514] Could not find key with description: [syz] [ 136.384591][T10514] process_request_key_err: No key [ 136.384598][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.384606][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.384628][T10514] Error validating options; rc = [-2] [ 136.384823][T10514] Could not find key with description: [syz] [ 136.384828][T10514] process_request_key_err: No key [ 136.384832][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.384837][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.384850][T10514] Error validating options; rc = [-2] [ 136.385034][T10514] Could not find key with description: [syz] [ 136.385039][T10514] process_request_key_err: No key [ 136.385042][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.385047][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.385060][T10514] Error validating options; rc = [-2] [ 136.385279][T10514] Could not find key with description: [syz] [ 136.385286][T10514] process_request_key_err: No key [ 136.385292][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.385298][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.385318][T10514] Error validating options; rc = [-2] [ 136.385640][T10514] Could not find key with description: [syz] [ 136.385647][T10514] process_request_key_err: No key [ 136.385652][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.385659][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.385679][T10514] Error validating options; rc = [-2] [ 136.386041][T10514] Could not find key with description: [syz] [ 136.386048][T10514] process_request_key_err: No key [ 136.386053][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.386060][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.386079][T10514] Error validating options; rc = [-2] [ 136.386608][T10514] Could not find key with description: [syz] [ 136.386616][T10514] process_request_key_err: No key [ 136.386623][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.386631][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.386655][T10514] Error validating options; rc = [-2] [ 136.387883][T10514] Could not find key with description: [syz] [ 136.387892][T10514] process_request_key_err: No key [ 136.387898][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.387906][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.387931][T10514] Error validating options; rc = [-2] [ 136.388264][T10514] Could not find key with description: [syz] [ 136.388272][T10514] process_request_key_err: No key [ 136.388279][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.388287][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.388311][T10514] Error validating options; rc = [-2] [ 136.388640][T10514] Could not find key with description: [syz] [ 136.388647][T10514] process_request_key_err: No key [ 136.388654][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.388662][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.388687][T10514] Error validating options; rc = [-2] [ 136.388971][T10514] Could not find key with description: [syz] [ 136.388978][T10514] process_request_key_err: No key [ 136.388983][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.388989][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.389007][T10514] Error validating options; rc = [-2] [ 136.389305][T10514] Could not find key with description: [syz] [ 136.389313][T10514] process_request_key_err: No key [ 136.389319][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.389328][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.389351][T10514] Error validating options; rc = [-2] [ 136.389660][T10514] Could not find key with description: [syz] [ 136.389668][T10514] process_request_key_err: No key [ 136.389674][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.389682][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.389706][T10514] Error validating options; rc = [-2] [ 136.391739][T10514] Could not find key with description: [syz] [ 136.391746][T10514] process_request_key_err: No key [ 136.391750][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.391755][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.391769][T10514] Error validating options; rc = [-2] [ 136.391981][T10514] Could not find key with description: [syz] [ 136.391987][T10514] process_request_key_err: No key [ 136.391991][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.391996][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.392009][T10514] Error validating options; rc = [-2] [ 136.392180][T10514] Could not find key with description: [syz] [ 136.392185][T10514] process_request_key_err: No key [ 136.392189][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.392194][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.392250][T10514] Error validating options; rc = [-2] [ 136.392558][T10514] Could not find key with description: [syz] [ 136.392565][T10514] process_request_key_err: No key [ 136.392572][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.392580][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.392604][T10514] Error validating options; rc = [-2] [ 136.392919][T10514] Could not find key with description: [syz] [ 136.392927][T10514] process_request_key_err: No key [ 136.392934][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.392942][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.392965][T10514] Error validating options; rc = [-2] [ 136.393186][T10514] Could not find key with description: [syz] [ 136.393191][T10514] process_request_key_err: No key [ 136.393195][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.393200][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.393213][T10514] Error validating options; rc = [-2] [ 136.393384][T10514] Could not find key with description: [syz] [ 136.393389][T10514] process_request_key_err: No key [ 136.393393][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.393398][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.393411][T10514] Error validating options; rc = [-2] [ 136.393636][T10514] Could not find key with description: [syz] [ 136.393644][T10514] process_request_key_err: No key [ 136.393650][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.393658][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.393681][T10514] Error validating options; rc = [-2] [ 136.394052][T10514] Could not find key with description: [syz] [ 136.394060][T10514] process_request_key_err: No key [ 136.394066][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.394074][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.395757][T10514] Error validating options; rc = [-2] [ 136.395998][T10514] Could not find key with description: [syz] [ 136.396004][T10514] process_request_key_err: No key [ 136.396008][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.396013][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.396028][T10514] Error validating options; rc = [-2] [ 136.396207][T10514] Could not find key with description: [syz] [ 136.396212][T10514] process_request_key_err: No key [ 136.396216][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.396221][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.396235][T10514] Error validating options; rc = [-2] [ 136.396431][T10514] Could not find key with description: [syz] [ 136.396437][T10514] process_request_key_err: No key [ 136.396441][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.396446][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.396460][T10514] Error validating options; rc = [-2] [ 136.396755][T10514] Could not find key with description: [syz] [ 136.396763][T10514] process_request_key_err: No key [ 136.396770][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.396778][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.396801][T10514] Error validating options; rc = [-2] [ 136.397179][T10514] Could not find key with description: [syz] [ 136.397192][T10514] process_request_key_err: No key [ 136.397198][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.397205][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.397229][T10514] Error validating options; rc = [-2] [ 136.397513][T10514] Could not find key with description: [syz] [ 136.397520][T10514] process_request_key_err: No key [ 136.397526][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.397534][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.397550][T10514] Error validating options; rc = [-2] [ 136.397725][T10514] Could not find key with description: [syz] [ 136.397730][T10514] process_request_key_err: No key [ 136.397734][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.397739][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.397752][T10514] Error validating options; rc = [-2] [ 136.397921][T10514] Could not find key with description: [syz] [ 136.397926][T10514] process_request_key_err: No key [ 136.397931][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.397936][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.397953][T10514] Error validating options; rc = [-2] [ 136.398259][T10514] Could not find key with description: [syz] [ 136.398268][T10514] process_request_key_err: No key [ 136.398275][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.398283][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.398307][T10514] Error validating options; rc = [-2] [ 136.398613][T10514] Could not find key with description: [syz] [ 136.398619][T10514] process_request_key_err: No key [ 136.398624][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.398631][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.398648][T10514] Error validating options; rc = [-2] [ 136.398931][T10514] Could not find key with description: [syz] [ 136.398937][T10514] process_request_key_err: No key [ 136.398941][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.398946][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.398959][T10514] Error validating options; rc = [-2] [ 136.399169][T10514] Could not find key with description: [syz] [ 136.399174][T10514] process_request_key_err: No key [ 136.399178][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.399183][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.399197][T10514] Error validating options; rc = [-2] [ 136.399388][T10514] Could not find key with description: [syz] [ 136.399393][T10514] process_request_key_err: No key [ 136.399397][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.399402][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.399415][T10514] Error validating options; rc = [-2] [ 136.399732][T10514] Could not find key with description: [syz] [ 136.399740][T10514] process_request_key_err: No key [ 136.399746][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.399754][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.399778][T10514] Error validating options; rc = [-2] [ 136.402938][T10514] Could not find key with description: [syz] [ 136.402948][T10514] process_request_key_err: No key [ 136.402955][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.402963][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.402989][T10514] Error validating options; rc = [-2] [ 136.403305][T10514] Could not find key with description: [syz] [ 136.403313][T10514] process_request_key_err: No key [ 136.403319][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.403327][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.403352][T10514] Error validating options; rc = [-2] [ 136.403684][T10514] Could not find key with description: [syz] [ 136.403692][T10514] process_request_key_err: No key [ 136.403698][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.403707][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.403730][T10514] Error validating options; rc = [-2] [ 136.404029][T10514] Could not find key with description: [syz] [ 136.404036][T10514] process_request_key_err: No key [ 136.404043][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.404050][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.404073][T10514] Error validating options; rc = [-2] [ 136.404384][T10514] Could not find key with description: [syz] [ 136.404392][T10514] process_request_key_err: No key [ 136.404398][T10514] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 136.404406][T10514] One or more global auth toks could not properly register; rc = [-2] [ 136.404430][T10514] Error validating options; rc = [-2] [ 136.480880][ T5732] Bluetooth: hci0: command tx timeout [ 136.521267][T10518] netlink: 'syz.6.1473': attribute type 1 has an invalid length. [ 136.538974][T10518] 8021q: adding VLAN 0 to HW filter on device bond7 [ 136.554720][T10518] bond3: (slave veth0_to_bond): Releasing active interface [ 136.554736][T10518] veth0_to_bond: left promiscuous mode [ 136.554850][T10518] veth0_to_bond: left allmulticast mode [ 136.597994][T10518] bond7: (slave veth0_to_bond): making interface the new active one [ 136.611864][T10518] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 136.616515][T10521] bond7: entered promiscuous mode [ 136.616534][T10521] veth0_to_bond: entered promiscuous mode [ 136.616682][T10521] bond7: entered allmulticast mode [ 136.616695][T10521] veth0_to_bond: entered allmulticast mode [ 137.003959][T10528] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.089564][T10532] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.133083][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1480'. [ 137.135501][T10535] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1480'. [ 137.135527][T10535] netlink: 'syz.7.1480': attribute type 7 has an invalid length. [ 137.135537][T10535] netlink: 'syz.7.1480': attribute type 8 has an invalid length. [ 137.135546][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1480'. [ 137.374452][T10540] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.375534][T10540] netlink: 'syz.3.1482': attribute type 1 has an invalid length. [ 137.386030][T10540] 8021q: adding VLAN 0 to HW filter on device bond33 [ 137.463207][T10546] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.527169][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1486'. [ 137.584577][T10554] team0: Device xfrm0 is of different type [ 137.714944][T10558] FAULT_INJECTION: forcing a failure. [ 137.714944][T10558] name failslab, interval 1, probability 0, space 0, times 0 [ 137.714976][T10558] CPU: 3 UID: 0 PID: 10558 Comm: syz.3.1490 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.715005][T10558] Tainted: [L]=SOFTLOCKUP [ 137.715012][T10558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.715023][T10558] Call Trace: [ 137.715035][T10558] [ 137.715042][T10558] dump_stack_lvl+0x100/0x190 [ 137.715084][T10558] should_fail_ex.cold+0x5/0xa [ 137.715113][T10558] should_failslab+0xc2/0x120 [ 137.715146][T10558] __kvmalloc_node_noprof+0x113/0x9b0 [ 137.715171][T10558] ? __pfx___mutex_lock+0x10/0x10 [ 137.715225][T10558] ? nf_hook_entries_grow+0x255/0x870 [ 137.715266][T10558] nf_hook_entries_grow+0x255/0x870 [ 137.715294][T10558] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 137.715328][T10558] __nf_register_net_hook+0x112/0x780 [ 137.715361][T10558] nf_register_net_hook+0xdb/0x170 [ 137.715391][T10558] nf_register_net_hooks+0x5d/0xd0 [ 137.715422][T10558] ip_vs_register_hooks+0xe3/0x150 [ 137.715446][T10558] ip_vs_add_service+0x515/0x2240 [ 137.715478][T10558] ? __ip_vs_service_find+0x4d0/0x9c0 [ 137.715513][T10558] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 137.715538][T10558] do_ip_vs_set_ctl+0xb86/0xc90 [ 137.715569][T10558] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 137.715594][T10558] ? rcu_is_watching+0x13/0xc0 [ 137.715624][T10558] ? find_held_lock+0x2b/0x80 [ 137.715652][T10558] ? nf_sockopt_find.isra.0+0x222/0x290 [ 137.715695][T10558] ? nf_sockopt_find.isra.0+0x222/0x290 [ 137.715743][T10558] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.715793][T10558] ? nf_setsockopt+0x8d/0xf0 [ 137.715812][T10558] nf_setsockopt+0x8d/0xf0 [ 137.715835][T10558] ip_setsockopt+0xcb/0xf0 [ 137.715866][T10558] tcp_setsockopt+0xa7/0x100 [ 137.715886][T10558] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 137.715912][T10558] do_sock_setsockopt+0xf3/0x1d0 [ 137.715938][T10558] __sys_setsockopt+0x195/0x220 [ 137.715962][T10558] __x64_sys_setsockopt+0xbd/0x160 [ 137.715979][T10558] ? do_syscall_64+0xae/0x790 [ 137.716005][T10558] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.716031][T10558] do_syscall_64+0x123/0x790 [ 137.716059][T10558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.716096][T10558] RIP: 0033:0x7f29c799e1d9 [ 137.716114][T10558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.716131][T10558] RSP: 002b:00007f29c88f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 137.716155][T10558] RAX: ffffffffffffffda RBX: 00007f29c7c25fa0 RCX: 00007f29c799e1d9 [ 137.716168][T10558] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000008 [ 137.716180][T10558] RBP: 00007f29c7a35888 R08: 000000000000002c R09: 0000000000000000 [ 137.716191][T10558] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 137.716201][T10558] R13: 00007f29c7c26038 R14: 00007f29c7c25fa0 R15: 00007ffedcaec538 [ 137.716229][T10558] [ 138.212455][T10577] netlink: 'syz.7.1494': attribute type 1 has an invalid length. [ 138.221412][T10577] veth1_to_bond: entered promiscuous mode [ 138.221431][T10577] veth1_to_bond: entered allmulticast mode [ 138.381211][T10581] input: syz0 as /devices/virtual/input/input23 [ 138.419048][T10588] tipc: Cannot configure node identity twice [ 138.463658][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1501'. [ 138.560329][ T5732] Bluetooth: hci0: command tx timeout [ 138.560612][T10604] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.632338][T10610] netlink: 'syz.6.1510': attribute type 2 has an invalid length. [ 138.633107][T10610] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1510'. [ 138.635473][T10611] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.665945][T10613] ip_tables: iptables: counters copy to user failed while replacing table [ 138.724880][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 138.724893][ T43] audit: type=1400 audit(1791603331.061:822): avc: denied { recv } for pid=5714 comm="syz-executor" saddr=127.0.0.1 src=55826 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 138.727503][ T43] audit: type=1400 audit(1791603331.061:823): avc: denied { read } for pid=8309 comm="syz-executor" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.727671][ T43] audit: type=1400 audit(1791603331.061:824): avc: denied { open } for pid=8309 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.727836][ T43] audit: type=1400 audit(1791603331.061:825): avc: denied { ioctl } for pid=8309 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.749440][ T43] audit: type=1400 audit(1791603331.081:826): avc: denied { read write } for pid=10616 comm="syz.5.1513" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 138.749669][ T43] audit: type=1400 audit(1791603331.081:827): avc: denied { open } for pid=10616 comm="syz.5.1513" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 138.782834][ T43] audit: type=1400 audit(1791603331.121:828): avc: denied { recv } for pid=34 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=55826 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 138.796203][T10621] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.796785][ T76] input: syz0 as /devices/virtual/misc/uhid/0005:0003:0386.000E/input/input24 [ 138.835301][ T76] hid-generic 0005:0003:0386.000E: input,hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 138.872064][T10629] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.877135][T10629] netlink: 'syz.7.1515': attribute type 1 has an invalid length. [ 138.884960][T10623] fido_id[10623]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 138.950997][T10640] netlink: 'syz.6.1517': attribute type 1 has an invalid length. [ 138.978396][T10640] 8021q: adding VLAN 0 to HW filter on device bond8 [ 138.991781][T10640] bond7: (slave veth0_to_bond): Releasing active interface [ 138.991804][T10640] veth0_to_bond: left promiscuous mode [ 138.991928][T10640] veth0_to_bond: left allmulticast mode [ 139.003295][T10640] bond8: (slave veth0_to_bond): making interface the new active one [ 139.011869][T10640] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 139.024149][T10640] bond8: entered promiscuous mode [ 139.024161][T10640] veth0_to_bond: entered promiscuous mode [ 139.024249][T10640] bond8: entered allmulticast mode [ 139.024257][T10640] veth0_to_bond: entered allmulticast mode [ 139.048087][ T43] audit: type=1400 audit(1791603331.381:829): avc: denied { setopt } for pid=10645 comm="syz.3.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 139.092585][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1521'. [ 139.095101][T10653] tipc: Started in network mode [ 139.095123][T10653] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 139.185371][T10668] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 139.227938][ T43] audit: type=1400 audit(1791603331.561:830): avc: denied { read } for pid=10670 comm="syz.6.1530" path="socket:[35629]" dev="sockfs" ino=35629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.229444][ T43] audit: type=1400 audit(1791603331.561:831): avc: denied { getopt } for pid=10670 comm="syz.6.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 139.318382][T10686] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 139.474495][ T62] wiimote 0005:057E:0330.000F: hidraw1: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 139.474801][ T62] wiimote 0005:057E:0330.000F: New device registered [ 139.481219][T10694] wiimote 0005:057E:0330.000F: Device removed [ 139.537255][T10697] fido_id[10697]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 139.696609][ T1289] IPVS: starting estimator thread 0... [ 139.720989][ T8309] overlayfs: failed lookup in lower (newroot/109, name='file0', err=-40): overlapping layers [ 139.721075][ T8309] overlayfs: failed lookup in lower (newroot/109, name='file0', err=-40): overlapping layers [ 139.780080][T10709] IPVS: using max 43 ests per chain, 103200 per kthread [ 140.162800][T10719] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.191347][T10722] __nla_validate_parse: 1 callbacks suppressed [ 140.191359][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1548'. [ 140.480151][ T62] wiimote 0005:057E:0330.000F: detected device: Nintendo Wii Remote Plus (Gen 2) [ 140.483783][ T30] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 140.483797][ T30] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 140.496580][ T62] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.000F/input/input26 [ 140.503428][ T62] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.000F/input/input27 [ 140.514771][ T62] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.000F/input/input25 [ 140.584265][T10730] netlink: 'syz.3.1550': attribute type 1 has an invalid length. [ 140.608198][T10730] 8021q: adding VLAN 0 to HW filter on device bond34 [ 140.622882][T10730] bond32: (slave veth0_to_bond): Releasing active interface [ 140.622909][T10730] veth0_to_bond: left promiscuous mode [ 140.623065][T10730] veth0_to_bond: left allmulticast mode [ 140.636076][T10730] bond34: (slave veth0_to_bond): making interface the new active one [ 140.641471][T10730] bond34: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 140.664521][T10730] bond34: entered promiscuous mode [ 140.664540][T10730] veth0_to_bond: entered promiscuous mode [ 140.664686][T10730] bond34: entered allmulticast mode [ 140.664697][T10730] veth0_to_bond: entered allmulticast mode [ 140.841277][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1553'. [ 140.841297][T10738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1553'. [ 140.920455][ T5809] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.979671][T10744] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 141.006347][T10744] team0: Port device wlan0 removed [ 141.046006][ T5809] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.061717][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.070827][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.074486][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.077874][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.078408][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.098827][ T5732] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.099120][ T5732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.099359][ T5732] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.109165][ T5732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.109655][ T5732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.144898][ T5809] bond0: (slave netdevsim1): Releasing backup interface [ 141.147820][ T5809] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.225544][ T5809] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.279159][T10762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10762 comm=syz.7.1559 [ 141.371973][T10771] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.377411][ T5809] bridge_slave_1: left allmulticast mode [ 141.377427][ T5809] bridge_slave_1: left promiscuous mode [ 141.380357][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.382870][ T5809] bridge_slave_0: left allmulticast mode [ 141.382884][ T5809] bridge_slave_0: left promiscuous mode [ 141.383016][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.475967][ T5809] bond7 (unregistering): (slave geneve2): Releasing active interface [ 141.490783][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.492331][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.493223][ T5809] bond0 (unregistering): Released all slaves [ 141.496246][ T5809] bond1 (unregistering): Released all slaves [ 141.501980][ T5809] bond2 (unregistering): Released all slaves [ 141.507220][ T5809] bond3 (unregistering): Released all slaves [ 141.512464][ T5809] bond4 (unregistering): Released all slaves [ 141.518544][ T5809] bond5 (unregistering): Released all slaves [ 141.525278][ T5809] bond6 (unregistering): Released all slaves [ 141.533566][ T5809] bond7 (unregistering): Released all slaves [ 141.542579][ T5809] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 141.542595][ T5809] veth0_to_bond: left promiscuous mode [ 141.542666][ T5809] veth0_to_bond: left allmulticast mode [ 141.545737][ T5809] bond8 (unregistering): Released all slaves [ 141.556617][ T5809] bond9 (unregistering): (slave dummy0): Removing an active aggregator [ 141.557016][ T5809] bond9 (unregistering): (slave dummy0): Releasing backup interface [ 141.558430][ T5809] bond9 (unregistering): Released all slaves [ 141.571138][ T5809] bond10 (unregistering): Released all slaves [ 141.581503][ T5809] bond11 (unregistering): Released all slaves [ 141.734678][ T5809] tipc: Left network mode [ 141.841724][ T5441] 8021q: adding VLAN 0 to HW filter on device eth18 [ 141.897008][T10747] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.897132][T10747] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.897230][T10747] bridge_slave_0: entered allmulticast mode [ 141.898605][T10747] bridge_slave_0: entered promiscuous mode [ 141.903650][T10747] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.903770][T10747] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.903863][T10747] bridge_slave_1: entered allmulticast mode [ 141.905161][T10747] bridge_slave_1: entered promiscuous mode [ 141.924605][T10747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.927336][T10747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.948760][T10747] team0: Port device team_slave_0 added [ 141.951130][T10747] team0: Port device team_slave_1 added [ 141.970788][T10747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.970801][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.971139][T10747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.972640][T10747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.972651][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.972673][T10747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.007093][T10747] hsr_slave_0: entered promiscuous mode [ 142.007888][T10747] hsr_slave_1: entered promiscuous mode [ 142.008462][T10747] debugfs: 'hsr0' already exists in 'hsr' [ 142.008479][T10747] Cannot create hsr debugfs directory [ 142.118676][T10754] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.118703][T10754] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 142.146606][ T5441] 8021q: adding VLAN 0 to HW filter on device eth19 [ 142.203021][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1565'. [ 142.203305][T10801] FAULT_INJECTION: forcing a failure. [ 142.203305][T10801] name failslab, interval 1, probability 0, space 0, times 0 [ 142.203324][T10801] CPU: 0 UID: 0 PID: 10801 Comm: syz.3.1565 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.203341][T10801] Tainted: [L]=SOFTLOCKUP [ 142.203345][T10801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.203352][T10801] Call Trace: [ 142.203356][T10801] [ 142.203361][T10801] dump_stack_lvl+0x100/0x190 [ 142.203383][T10801] should_fail_ex.cold+0x5/0xa [ 142.203399][T10801] should_failslab+0xc2/0x120 [ 142.203417][T10801] kmem_cache_alloc_noprof+0x92/0x6a0 [ 142.203432][T10801] ? __kernfs_new_node+0xd2/0xa10 [ 142.203448][T10801] __kernfs_new_node+0xd2/0xa10 [ 142.203462][T10801] ? __pfx___kernfs_new_node+0x10/0x10 [ 142.203477][T10801] ? lock_acquire+0x1d1/0x380 [ 142.203490][T10801] ? kernfs_root+0x23/0x2a0 [ 142.203502][T10801] ? find_held_lock+0x2b/0x80 [ 142.203519][T10801] ? kernfs_root+0xee/0x2a0 [ 142.203529][T10801] ? kernfs_root+0xee/0x2a0 [ 142.203543][T10801] kernfs_new_node+0x117/0x150 [ 142.203558][T10801] __kernfs_create_file+0x53/0x350 [ 142.203575][T10801] sysfs_add_file_mode_ns+0x207/0x3c0 [ 142.203596][T10801] sysfs_merge_group+0x194/0x340 [ 142.203607][T10801] ? kernfs_add_one+0x214/0xaa0 [ 142.203620][T10801] ? __pfx_sysfs_merge_group+0x10/0x10 [ 142.203631][T10801] ? bus_add_device+0x2e2/0x6c0 [ 142.203647][T10801] ? __pfx_bus_add_device+0x10/0x10 [ 142.203661][T10801] ? __pfx_dev_add_physical_location+0x10/0x10 [ 142.203677][T10801] dpm_sysfs_add+0x237/0x280 [ 142.203690][T10801] device_add+0x9f4/0x1970 [ 142.203704][T10801] ? __pfx_device_add+0x10/0x10 [ 142.203715][T10801] ? kfree_const+0x5a/0x70 [ 142.203726][T10801] ? kfree+0x1e5/0x6d0 [ 142.203741][T10801] device_create_groups_vargs+0x1f8/0x270 [ 142.203756][T10801] device_create+0xed/0x130 [ 142.203769][T10801] ? __pfx_device_create+0x10/0x10 [ 142.203781][T10801] ? lockdep_init_map_type+0x5c/0x250 [ 142.203796][T10801] ? timer_init_key+0x150/0x310 [ 142.203811][T10801] ? ieee80211_roc_setup+0x136/0x270 [ 142.203825][T10801] ? ieee80211_alloc_hw_nm+0x1a2a/0x2310 [ 142.203843][T10801] mac80211_hwsim_new_radio+0x37c/0x6510 [ 142.203856][T10801] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 142.203877][T10801] ? rcu_is_watching+0x13/0xc0 [ 142.203893][T10801] ? do_trace_netlink_extack+0x72/0x1e0 [ 142.203927][T10801] ? __nla_validate_parse+0x1e7/0x28b0 [ 142.203942][T10801] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 142.203960][T10801] hwsim_new_radio_nl+0xc6b/0x13f0 [ 142.203974][T10801] ? trace_kmalloc+0xeb/0x110 [ 142.203991][T10801] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 142.204008][T10801] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 142.204022][T10801] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 142.204041][T10801] genl_family_rcv_msg_doit+0x214/0x300 [ 142.204060][T10801] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 142.204082][T10801] ? bpf_lsm_capable+0x9/0x10 [ 142.204096][T10801] ? security_capable+0x80/0x260 [ 142.204114][T10801] ? ns_capable+0xd2/0xf0 [ 142.204130][T10801] genl_rcv_msg+0x560/0x800 [ 142.204150][T10801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.204165][T10801] ? __lock_acquire+0x5c0/0x1f40 [ 142.204183][T10801] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 142.204207][T10801] netlink_rcv_skb+0x159/0x420 [ 142.204231][T10801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.204250][T10801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.204311][T10801] ? netlink_deliver_tap+0x1ae/0xcc0 [ 142.204344][T10801] genl_rcv+0x28/0x40 [ 142.204360][T10801] netlink_unicast+0x585/0x850 [ 142.204390][T10801] ? __pfx_netlink_unicast+0x10/0x10 [ 142.204422][T10801] netlink_sendmsg+0x8b0/0xda0 [ 142.204452][T10801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.204484][T10801] ? selinux_socket_sendmsg+0x198/0x2f0 [ 142.204514][T10801] ____sys_sendmsg+0xa4d/0xbe0 [ 142.204537][T10801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.204565][T10801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.204591][T10801] ___sys_sendmsg+0x190/0x1e0 [ 142.204617][T10801] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.204641][T10801] ? futex_wait+0x11e/0x370 [ 142.204669][T10801] ? find_held_lock+0x2b/0x80 [ 142.204707][T10801] __sys_sendmsg+0x160/0x210 [ 142.204725][T10801] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.204759][T10801] do_syscall_64+0x123/0x790 [ 142.204787][T10801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.204807][T10801] RIP: 0033:0x7f29c799e1d9 [ 142.204823][T10801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.204840][T10801] RSP: 002b:00007f29c88f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.204860][T10801] RAX: ffffffffffffffda RBX: 00007f29c7c25fa0 RCX: 00007f29c799e1d9 [ 142.204872][T10801] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 142.204883][T10801] RBP: 00007f29c7a35888 R08: 0000000000000000 R09: 0000000000000000 [ 142.204894][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.204905][T10801] R13: 00007f29c7c26038 R14: 00007f29c7c25fa0 R15: 00007ffedcaec538 [ 142.204933][T10801] [ 142.263342][T10747] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 142.275840][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.276477][T10747] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 142.284394][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.302723][ T5809] hsr_slave_0: left promiscuous mode [ 142.307606][T10806] FAULT_INJECTION: forcing a failure. [ 142.307606][T10806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.307635][T10806] CPU: 3 UID: 0 PID: 10806 Comm: syz.3.1566 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.307657][T10806] Tainted: [L]=SOFTLOCKUP [ 142.307662][T10806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.307672][T10806] Call Trace: [ 142.307678][T10806] [ 142.307685][T10806] dump_stack_lvl+0x100/0x190 [ 142.307714][T10806] should_fail_ex.cold+0x5/0xa [ 142.307738][T10806] _copy_from_iter+0x1f4/0x1690 [ 142.307765][T10806] ? __asan_memset+0x23/0x50 [ 142.307785][T10806] ? __pfx__copy_from_iter+0x10/0x10 [ 142.307808][T10806] ? __pfx___alloc_skb+0x10/0x10 [ 142.307823][T10806] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 142.307846][T10806] ? sock_has_perm+0x25a/0x2f0 [ 142.307867][T10806] ? __pfx_sock_has_perm+0x10/0x10 [ 142.307891][T10806] netlink_sendmsg+0x808/0xda0 [ 142.307920][T10806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.307948][T10806] ? selinux_socket_sendmsg+0x198/0x2f0 [ 142.307974][T10806] ____sys_sendmsg+0xa4d/0xbe0 [ 142.307994][T10806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.308020][T10806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.308041][T10806] ? lock_acquire+0x1d1/0x380 [ 142.308052][ T5809] hsr_slave_1: left promiscuous mode [ 142.308054][T10806] ? get_pid_task+0x2a/0x250 [ 142.308071][T10806] ___sys_sendmsg+0x190/0x1e0 [ 142.308086][T10806] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.308101][T10806] ? get_pid_task+0x106/0x250 [ 142.308122][T10806] ? find_held_lock+0x2b/0x80 [ 142.308147][T10806] __sys_sendmsg+0x160/0x210 [ 142.308158][T10806] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.308177][T10806] do_syscall_64+0x123/0x790 [ 142.308198][T10806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.308210][T10806] RIP: 0033:0x7f29c799e1d9 [ 142.308219][T10806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.308229][T10806] RSP: 002b:00007f29c88f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.308240][T10806] RAX: ffffffffffffffda RBX: 00007f29c7c25fa0 RCX: 00007f29c799e1d9 [ 142.308247][T10806] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 142.308254][T10806] RBP: 00007f29c88f0090 R08: 0000000000000000 R09: 0000000000000000 [ 142.308260][T10806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.308266][T10806] R13: 00007f29c7c26038 R14: 00007f29c7c25fa0 R15: 00007ffedcaec538 [ 142.308281][T10806] [ 142.308550][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.308562][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.312095][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.312140][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.321318][ T5809] veth1_macvtap: left promiscuous mode [ 142.321340][ T5809] veth0_macvtap: left promiscuous mode [ 142.321393][ T5809] veth1_vlan: left promiscuous mode [ 142.321422][ T5809] veth0_vlan: left promiscuous mode [ 142.367691][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1569'. [ 142.523838][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 142.534770][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 142.651621][T10747] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 142.655173][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.655914][T10747] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 142.661870][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.671622][ T5441] 8021q: adding VLAN 0 to HW filter on device eth20 [ 142.718050][T10747] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.718182][T10747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.718417][T10747] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.718501][T10747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.775272][T10747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.788041][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.795567][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.810901][T10747] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.822713][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.822757][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.828013][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.828091][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.883115][T10835] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 142.931351][ T5809] IPVS: stop unused estimator thread 0... [ 143.004240][ T5441] 8021q: adding VLAN 0 to HW filter on device eth21 [ 143.028621][T10849] netlink: 'syz.7.1575': attribute type 1 has an invalid length. [ 143.050875][T10849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.075297][T10849] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 143.218331][T10747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.282626][T10875] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1579'. [ 143.288327][T10875] x_tables: duplicate underflow at hook 1 [ 143.334976][T10880] netlink: 'syz.3.1580': attribute type 83 has an invalid length. [ 143.386758][T10747] veth0_vlan: entered promiscuous mode [ 143.396381][T10747] veth1_vlan: entered promiscuous mode [ 143.417021][T10747] veth0_macvtap: entered promiscuous mode [ 143.426049][T10747] veth1_macvtap: entered promiscuous mode [ 143.442456][T10747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.448152][T10747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.499446][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.499496][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.499527][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.499559][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.575304][T10891] FAULT_INJECTION: forcing a failure. [ 143.575304][T10891] name failslab, interval 1, probability 0, space 0, times 0 [ 143.575335][T10891] CPU: 3 UID: 0 PID: 10891 Comm: syz.3.1585 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.575359][T10891] Tainted: [L]=SOFTLOCKUP [ 143.575365][T10891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.575376][T10891] Call Trace: [ 143.575383][T10891] [ 143.575390][T10891] dump_stack_lvl+0x100/0x190 [ 143.575423][T10891] should_fail_ex.cold+0x5/0xa [ 143.575455][T10891] should_failslab+0xc2/0x120 [ 143.575482][T10891] __kmalloc_noprof+0xfc/0x840 [ 143.575504][T10891] ? __pfx___mutex_lock+0x10/0x10 [ 143.575532][T10891] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 143.575559][T10891] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 143.575586][T10891] genl_start+0x18f/0x970 [ 143.575608][T10891] __netlink_dump_start+0x60e/0x990 [ 143.575640][T10891] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 143.575662][T10891] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 143.575689][T10891] ? __pfx_genl_get_cmd+0x10/0x10 [ 143.575706][T10891] ? __pfx_genl_start+0x10/0x10 [ 143.575722][T10891] ? __pfx_genl_dumpit+0x10/0x10 [ 143.575739][T10891] ? __pfx_genl_done+0x10/0x10 [ 143.575759][T10891] ? netlink_sendmsg+0x680/0xda0 [ 143.575785][T10891] ? ____sys_sendmsg+0xa4d/0xbe0 [ 143.575806][T10891] ? __radix_tree_lookup+0x217/0x2b0 [ 143.575835][T10891] genl_rcv_msg+0x471/0x800 [ 143.575857][T10891] ? __pfx_genl_rcv_msg+0x10/0x10 [ 143.575876][T10891] ? __lock_acquire+0x5c0/0x1f40 [ 143.575896][T10891] ? __pfx_ethnl_default_start+0x10/0x10 [ 143.575920][T10891] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 143.575944][T10891] ? __pfx_ethnl_default_done+0x10/0x10 [ 143.575971][T10891] ? __lock_acquire+0x5c0/0x1f40 [ 143.575998][T10891] netlink_rcv_skb+0x159/0x420 [ 143.576025][T10891] ? __pfx_genl_rcv_msg+0x10/0x10 [ 143.576046][T10891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.576085][T10891] ? netlink_deliver_tap+0x1ae/0xcc0 [ 143.576116][T10891] genl_rcv+0x28/0x40 [ 143.576132][T10891] netlink_unicast+0x585/0x850 [ 143.576163][T10891] ? __pfx_netlink_unicast+0x10/0x10 [ 143.576191][T10891] ? __pfx_sock_has_perm+0x10/0x10 [ 143.576220][T10891] netlink_sendmsg+0x8b0/0xda0 [ 143.576252][T10891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.576282][T10891] ? selinux_socket_sendmsg+0x198/0x2f0 [ 143.576311][T10891] ____sys_sendmsg+0xa4d/0xbe0 [ 143.576332][T10891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.576362][T10891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.576392][T10891] ? lock_acquire+0x1d1/0x380 [ 143.576411][T10891] ? get_pid_task+0x2a/0x250 [ 143.576444][T10891] ___sys_sendmsg+0x190/0x1e0 [ 143.576469][T10891] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.576493][T10891] ? get_pid_task+0x106/0x250 [ 143.576528][T10891] ? find_held_lock+0x2b/0x80 [ 143.576573][T10891] __sys_sendmsg+0x160/0x210 [ 143.576592][T10891] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.576625][T10891] do_syscall_64+0x123/0x790 [ 143.576654][T10891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.576673][T10891] RIP: 0033:0x7f29c799e1d9 [ 143.576687][T10891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.576704][T10891] RSP: 002b:00007f29c88f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.576722][T10891] RAX: ffffffffffffffda RBX: 00007f29c7c25fa0 RCX: 00007f29c799e1d9 [ 143.576733][T10891] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 143.576744][T10891] RBP: 00007f29c88f0090 R08: 0000000000000000 R09: 0000000000000000 [ 143.576755][T10891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.576782][T10891] R13: 00007f29c7c26038 R14: 00007f29c7c25fa0 R15: 00007ffedcaec538 [ 143.576811][T10891] [ 143.581044][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.581054][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.600324][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.600337][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.754440][T10901] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 143.929588][T10912] netlink: 'syz.8.1593': attribute type 1 has an invalid length. [ 143.933593][T10912] bridge0: port 3(dummy0) entered blocking state [ 143.933673][T10912] bridge0: port 3(dummy0) entered disabled state [ 143.934297][T10912] dummy0: entered allmulticast mode [ 143.935867][T10912] dummy0: entered promiscuous mode [ 144.011769][T10915] bridge0: port 3(dummy0) entered blocking state [ 144.012004][T10915] bridge0: port 3(dummy0) entered forwarding state [ 144.103976][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 144.103993][ T43] audit: type=1400 audit(1791603336.264:848): avc: denied { write } for pid=10916 comm="syz.8.1596" name="nbd8" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.105409][T10917] IPVS: length: 18 != 8 [ 144.110306][ T43] audit: type=1400 audit(1791603336.273:849): avc: denied { append } for pid=10916 comm="syz.8.1596" name="sda1" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.112372][T10917] macvlan0: entered promiscuous mode [ 144.657231][ T43] audit: type=1400 audit(1791603336.779:850): avc: denied { rmdir } for pid=5730 comm="syz-executor" name="proc" dev="tmpfs" ino=2768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 144.704474][T10923] tipc: Started in network mode [ 144.704501][T10923] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 144.743129][T10927] netlink: 'syz.8.1600': attribute type 1 has an invalid length. [ 144.750612][T10927] bridge0: port 3(dummy0) entered disabled state [ 144.752359][T10927] dummy0: left allmulticast mode [ 144.752392][T10927] dummy0: left promiscuous mode [ 144.752722][T10927] bridge0: port 3(dummy0) entered disabled state [ 144.762974][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1600'. [ 144.764971][T10929] net_ratelimit: 5 callbacks suppressed [ 144.764985][T10929] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 144.841887][T10935] openvswitch: netlink: Missing key (keys=d0, expected=2000) [ 144.855386][ T5831] logitech-hidpp-device 0005:046D:B012.0010: hidraw2: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 144.908161][T10939] fido_id[10939]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 144.910110][T10942] fuse: Unknown parameter 'f•ÒÝnÞÖ>lé-Ç“€ª»Œ6'ì ùá”UX›è¬nZÿÈDSSPaî"“áHûÆ“ BCËp65·ºø¾Jƒõübá±4Ú_ [ 144.910110][T10942]  Iæ>IŠ çƒJiNK‰î¯?(µGTÊ­÷eªÖˆ£»Ï’©á™Sª²JbqCÖe¾é~&†‹UìÄ´ þèC¢d 6' [ 144.925194][ T43] audit: type=1400 audit(1791603337.031:851): avc: denied { ioctl } for pid=10932 comm="syz.3.1604" path="socket:[37718]" dev="sockfs" ino=37718 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.940422][T10946] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.117523][ T43] audit: type=1400 audit(1791603337.209:852): avc: denied { bind } for pid=10956 comm="syz.3.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.164892][T10961] netlink: 'syz.3.1613': attribute type 1 has an invalid length. [ 145.183655][T10961] 8021q: adding VLAN 0 to HW filter on device bond35 [ 145.194838][T10961] bond28: (slave dummy0): Removing an active aggregator [ 145.195271][T10961] bond28: (slave dummy0): Releasing backup interface [ 145.211311][T10961] bond35: (slave dummy0): Enslaving as a backup interface with an up link [ 145.263855][T10966] FAULT_INJECTION: forcing a failure. [ 145.263855][T10966] name failslab, interval 1, probability 0, space 0, times 0 [ 145.263887][T10966] CPU: 1 UID: 0 PID: 10966 Comm: syz.3.1615 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.263910][T10966] Tainted: [L]=SOFTLOCKUP [ 145.263917][T10966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.263928][T10966] Call Trace: [ 145.263934][T10966] [ 145.263941][T10966] dump_stack_lvl+0x100/0x190 [ 145.263972][T10966] should_fail_ex.cold+0x5/0xa [ 145.263999][T10966] should_failslab+0xc2/0x120 [ 145.264026][T10966] __kmalloc_noprof+0xfc/0x840 [ 145.264048][T10966] ? kasan_save_track+0x14/0x30 [ 145.264075][T10966] ? ethnl_default_start+0x15a/0x3f0 [ 145.264107][T10966] ethnl_default_start+0x15a/0x3f0 [ 145.264133][T10966] ? __pfx_ethnl_default_start+0x10/0x10 [ 145.264159][T10966] genl_start+0x601/0x970 [ 145.264180][T10966] __netlink_dump_start+0x60e/0x990 [ 145.264210][T10966] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 145.264231][T10966] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 145.264258][T10966] ? __pfx_genl_get_cmd+0x10/0x10 [ 145.264273][T10966] ? __pfx_genl_start+0x10/0x10 [ 145.264296][T10966] ? __pfx_genl_dumpit+0x10/0x10 [ 145.264313][T10966] ? __pfx_genl_done+0x10/0x10 [ 145.264333][T10966] ? netlink_sendmsg+0x680/0xda0 [ 145.264358][T10966] ? ____sys_sendmsg+0xa4d/0xbe0 [ 145.264379][T10966] ? __radix_tree_lookup+0x217/0x2b0 [ 145.264408][T10966] genl_rcv_msg+0x471/0x800 [ 145.264430][T10966] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.264448][T10966] ? __lock_acquire+0x5c0/0x1f40 [ 145.264468][T10966] ? __pfx_ethnl_default_start+0x10/0x10 [ 145.264492][T10966] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 145.264516][T10966] ? __pfx_ethnl_default_done+0x10/0x10 [ 145.264543][T10966] ? __lock_acquire+0x5c0/0x1f40 [ 145.264568][T10966] netlink_rcv_skb+0x159/0x420 [ 145.264595][T10966] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.264614][T10966] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.264652][T10966] ? netlink_deliver_tap+0x1ae/0xcc0 [ 145.264682][T10966] genl_rcv+0x28/0x40 [ 145.264698][T10966] netlink_unicast+0x585/0x850 [ 145.264729][T10966] ? __pfx_netlink_unicast+0x10/0x10 [ 145.264756][T10966] ? __pfx_sock_has_perm+0x10/0x10 [ 145.264785][T10966] netlink_sendmsg+0x8b0/0xda0 [ 145.264816][T10966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.264846][T10966] ? selinux_socket_sendmsg+0x198/0x2f0 [ 145.264875][T10966] ____sys_sendmsg+0xa4d/0xbe0 [ 145.264895][T10966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.264924][T10966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.264952][T10966] ? lock_acquire+0x1d1/0x380 [ 145.264972][T10966] ? get_pid_task+0x2a/0x250 [ 145.264998][T10966] ___sys_sendmsg+0x190/0x1e0 [ 145.265024][T10966] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.265047][T10966] ? get_pid_task+0x106/0x250 [ 145.265082][T10966] ? find_held_lock+0x2b/0x80 [ 145.265146][T10966] __sys_sendmsg+0x160/0x210 [ 145.265168][T10966] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.265202][T10966] do_syscall_64+0x123/0x790 [ 145.265231][T10966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.265248][T10966] RIP: 0033:0x7f29c799e1d9 [ 145.265263][T10966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.265284][T10966] RSP: 002b:00007f29c88f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.265301][T10966] RAX: ffffffffffffffda RBX: 00007f29c7c25fa0 RCX: 00007f29c799e1d9 [ 145.265312][T10966] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 145.265323][T10966] RBP: 00007f29c88f0090 R08: 0000000000000000 R09: 0000000000000000 [ 145.265333][T10966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.265343][T10966] R13: 00007f29c7c26038 R14: 00007f29c7c25fa0 R15: 00007ffedcaec538 [ 145.265368][T10966] [ 145.303489][T10968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.305885][ T5809] bond35: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 145.323207][T10972] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.427889][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1621'. [ 145.433645][ T5811] bond35: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 145.591242][T10994] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.682646][T11000] vivid-007: ================= START STATUS ================= [ 145.682664][T11000] vivid-007: Enable Output Cropping: true grabbed [ 145.682688][T11000] vivid-007: Enable Output Composing: true grabbed [ 145.682707][T11000] vivid-007: Enable Output Scaler: true grabbed [ 145.682727][T11000] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 145.682748][T11000] vivid-007: Transmit Mode: HDMI grabbed [ 145.682767][T11000] vivid-007: Hotplug Present: 0x00000000 [ 145.682783][T11000] vivid-007: RxSense Present: 0x00000000 [ 145.682799][T11000] vivid-007: EDID Present: 0x00000000 [ 145.682816][T11000] vivid-007: ================== END STATUS ================== [ 145.726047][T11003] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.917466][T11015] bond0: entered promiscuous mode [ 145.917487][T11015] bond_slave_0: entered promiscuous mode [ 145.917657][T11015] bond_slave_1: entered promiscuous mode [ 145.919522][T11015] batadv0: entered promiscuous mode [ 145.922293][T11019] FAULT_INJECTION: forcing a failure. [ 145.922293][T11019] name failslab, interval 1, probability 0, space 0, times 0 [ 145.922320][T11019] CPU: 0 UID: 0 PID: 11019 Comm: syz.3.1635 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.922344][T11019] Tainted: [L]=SOFTLOCKUP [ 145.922351][T11019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.922362][T11019] Call Trace: [ 145.922368][T11019] [ 145.922375][T11019] dump_stack_lvl+0x100/0x190 [ 145.922407][T11019] should_fail_ex.cold+0x5/0xa [ 145.922433][T11019] should_failslab+0xc2/0x120 [ 145.922460][T11019] __kmalloc_noprof+0xfc/0x840 [ 145.922482][T11019] ? kasan_save_track+0x14/0x30 [ 145.922511][T11019] ? ethnl_default_start+0x15a/0x3f0 [ 145.922542][T11019] ethnl_default_start+0x15a/0x3f0 [ 145.922569][T11019] ? __pfx_ethnl_default_start+0x10/0x10 [ 145.922595][T11019] genl_start+0x601/0x970 [ 145.922617][T11019] __netlink_dump_start+0x60e/0x990 [ 145.922648][T11019] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 145.922669][T11019] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 145.922696][T11019] ? __pfx_genl_get_cmd+0x10/0x10 [ 145.922712][T11019] ? __pfx_genl_start+0x10/0x10 [ 145.922728][T11019] ? __pfx_genl_dumpit+0x10/0x10 [ 145.922744][T11019] ? __pfx_genl_done+0x10/0x10 [ 145.922765][T11019] ? netlink_sendmsg+0x680/0xda0 [ 145.922790][T11019] ? ____sys_sendmsg+0xa4d/0xbe0 [ 145.922810][T11019] ? __radix_tree_lookup+0x217/0x2b0 [ 145.922839][T11019] genl_rcv_msg+0x471/0x800 [ 145.922860][T11019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.922878][T11019] ? __lock_acquire+0x5c0/0x1f40 [ 145.922898][T11019] ? __pfx_ethnl_default_start+0x10/0x10 [ 145.922921][T11019] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 145.922945][T11019] ? __pfx_ethnl_default_done+0x10/0x10 [ 145.922972][T11019] ? __lock_acquire+0x5c0/0x1f40 [ 145.922998][T11019] netlink_rcv_skb+0x159/0x420 [ 145.923026][T11019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.923046][T11019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.923084][T11019] ? netlink_deliver_tap+0x1ae/0xcc0 [ 145.923114][T11019] genl_rcv+0x28/0x40 [ 145.923130][T11019] netlink_unicast+0x585/0x850 [ 145.923161][T11019] ? __pfx_netlink_unicast+0x10/0x10 [ 145.923209][T11019] ? __pfx_sock_has_perm+0x10/0x10 [ 145.923242][T11019] netlink_sendmsg+0x8b0/0xda0 [ 145.923275][T11019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.923304][T11019] ? selinux_socket_sendmsg+0x198/0x2f0 [ 145.923333][T11019] ____sys_sendmsg+0xa4d/0xbe0 [ 145.923353][T11019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.923382][T11019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.923411][T11019] ? lock_acquire+0x1d1/0x380 [ 145.923430][T11019] ? get_pid_task+0x2a/0x250 [ 145.923458][T11019] ___sys_sendmsg+0x190/0x1e0 [ 145.923484][T11019] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.923508][T11019] ? get_pid_task+0x106/0x250 [ 145.923543][T11019] ? find_held_lock+0x2b/0x80 [ 145.923587][T11019] __sys_sendmsg+0x160/0x210 [ 145.923606][T11019] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.923640][T11019] do_syscall_64+0x123/0x790 [ 145.923668][T11019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.923686][T11019] RIP: 0033:0x7f29c799e1d9 [ 145.923701][T11019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.923717][T11019] RSP: 002b:00007f29c88f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.923734][T11019] RAX: ffffffffffffffda RBX: 00007f29c7c25fa0 RCX: 00007f29c799e1d9 [ 145.923746][T11019] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 145.923756][T11019] RBP: 00007f29c88f0090 R08: 0000000000000000 R09: 0000000000000000 [ 145.923766][T11019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.923776][T11019] R13: 00007f29c7c26038 R14: 00007f29c7c25fa0 R15: 00007ffedcaec538 [ 145.923802][T11019] [ 145.927481][T11015] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 145.932707][ T43] audit: type=1400 audit(1791603337.976:853): avc: denied { ioctl } for pid=11016 comm="syz.7.1634" path="socket:[38383]" dev="sockfs" ino=38383 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.934156][T11015] bond0: left promiscuous mode [ 145.934173][T11015] bond_slave_0: left promiscuous mode [ 145.934353][T11015] bond_slave_1: left promiscuous mode [ 145.939739][T11015] batadv0: left promiscuous mode [ 145.963557][ T43] audit: type=1400 audit(1791603338.004:854): avc: denied { create } for pid=11016 comm="syz.7.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 145.970771][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1633'. [ 146.022711][ T43] audit: type=1400 audit(1791603338.061:855): avc: denied { write } for pid=11016 comm="syz.7.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 146.022823][ T43] audit: type=1400 audit(1791603338.061:856): avc: denied { read } for pid=11016 comm="syz.7.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 146.078335][ T43] audit: type=1400 audit(1791603338.117:857): avc: denied { ioctl } for pid=11016 comm="syz.7.1634" path="socket:[38388]" dev="sockfs" ino=38388 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 146.159290][T11032] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.651574][ T7092] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 146.741906][T11050] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.834268][ T7092] usb 13-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 146.835241][ T7092] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 146.835279][ T7092] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 146.841437][ T7092] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.841473][ T7092] usb 13-1: Product: syz [ 146.841481][ T7092] usb 13-1: Manufacturer: syz [ 146.841501][ T7092] usb 13-1: SerialNumber: syz [ 146.850552][ T7092] usb 13-1: config 0 descriptor?? [ 146.855880][ T7092] hub 13-1:0.0: bad descriptor, ignoring hub [ 146.855890][ T7092] hub 13-1:0.0: probe with driver hub failed with error -5 [ 146.857488][ T7092] input: syz syz as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input28 [ 146.948379][T11061] Bluetooth: MGMT ver 1.23 [ 146.973037][T11061] Format for deleting device is "id" (uint). [ 147.074510][T11068] tipc: Cannot configure node identity twice [ 147.240220][T11077] tipc: Enabled bearer , priority 10 [ 147.243180][T11076] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 147.245042][T11077] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 147.434502][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1652'. [ 147.536920][T11094] netlink: 'syz.3.1654': attribute type 12 has an invalid length. [ 147.622004][T11101] syzkaller0: entered promiscuous mode [ 147.622045][T11101] syzkaller0: entered allmulticast mode [ 147.715384][T11105] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.716722][T11105] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.827474][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1660'. [ 148.084602][ T1289] raw-gadget.0 gadget.8: failed to queue suspend event [ 148.106168][ T30] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 148.158313][ T5123] raw-gadget.0 gadget.8: failed to queue resume event [ 148.191397][ T44] raw-gadget.0 gadget.8: failed to queue suspend event [ 148.239366][T11126] FAULT_INJECTION: forcing a failure. [ 148.239366][T11126] name failslab, interval 1, probability 0, space 0, times 0 [ 148.239399][T11126] CPU: 3 UID: 0 PID: 11126 Comm: syz.3.1664 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.239423][T11126] Tainted: [L]=SOFTLOCKUP [ 148.239430][T11126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.239441][T11126] Call Trace: [ 148.239447][T11126] [ 148.239455][T11126] dump_stack_lvl+0x100/0x190 [ 148.239487][T11126] should_fail_ex.cold+0x5/0xa [ 148.239529][T11126] should_failslab+0xc2/0x120 [ 148.239559][T11126] __kmalloc_noprof+0xfc/0x840 [ 148.239581][T11126] ? rcu_is_watching+0x13/0xc0 [ 148.239610][T11126] ? tomoyo_realpath_from_path+0xb6/0x690 [ 148.239644][T11126] tomoyo_realpath_from_path+0xb6/0x690 [ 148.239679][T11126] tomoyo_path_number_perm+0x23c/0x580 [ 148.239701][T11126] ? tomoyo_path_number_perm+0x22e/0x580 [ 148.239726][T11126] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 148.239758][T11126] ? __lock_acquire+0x5c0/0x1f40 [ 148.239789][T11126] ? __fget_files+0x34/0x3d0 [ 148.239810][T11126] ? find_held_lock+0x2b/0x80 [ 148.239831][T11126] ? hook_file_ioctl_common+0x140/0x440 [ 148.239846][T11126] ? __fget_files+0x21f/0x3d0 [ 148.239865][T11126] security_file_ioctl+0xd3/0x230 [ 148.239885][T11126] __x64_sys_ioctl+0xb7/0x210 [ 148.239901][T11126] do_syscall_64+0x123/0x790 [ 148.239919][T11126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.239930][T11126] RIP: 0033:0x7f29c799e1d9 [ 148.239940][T11126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.239952][T11126] RSP: 002b:00007f29c88f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.239964][T11126] RAX: ffffffffffffffda RBX: 00007f29c7c25fa0 RCX: 00007f29c799e1d9 [ 148.239971][T11126] RDX: 0000200000000340 RSI: 000000008030ae7c RDI: 0000000000000004 [ 148.239978][T11126] RBP: 00007f29c88f0090 R08: 0000000000000000 R09: 0000000000000000 [ 148.239985][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.239991][T11126] R13: 00007f29c7c26038 R14: 00007f29c7c25fa0 R15: 00007ffedcaec538 [ 148.240007][T11126] [ 148.240026][T11126] ERROR: Out of memory at tomoyo_realpath_from_path. [ 148.265905][ T30] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 148.266856][ T30] usb 12-1: config 0 has an invalid interface number: 50 but max is 0 [ 148.266872][ T30] usb 12-1: config 0 has no interface number 0 [ 148.266899][ T30] usb 12-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.270734][ T30] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.270748][ T30] usb 12-1: Product: syz [ 148.270760][ T30] usb 12-1: Manufacturer: syz [ 148.270771][ T30] usb 12-1: SerialNumber: syz [ 148.274731][ T30] usb 12-1: config 0 descriptor?? [ 148.275778][ T5123] raw-gadget.0 gadget.8: failed to queue resume event [ 148.290799][ T30] yurex 12-1:0.50: USB YUREX device now attached to Yurex #0 [ 148.299822][ T1289] raw-gadget.0 gadget.8: failed to queue suspend event [ 148.310120][ T42] tipc: Node number set to 3145728 [ 148.375510][ T5123] raw-gadget.0 gadget.8: failed to queue resume event [ 148.412869][ T1163] raw-gadget.0 gadget.8: failed to queue suspend event [ 148.435829][ T2090] wiimote 0005:057E:0330.0011: hidraw1: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 148.440462][ T2090] wiimote 0005:057E:0330.0011: New device registered [ 148.444685][T11128] wiimote 0005:057E:0330.0011: Device removed [ 148.489553][ T5123] raw-gadget.0 gadget.8: failed to queue resume event [ 148.509629][T11110] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1659'. [ 148.516098][T11129] fido_id[11129]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 148.523038][ T1163] raw-gadget.0 gadget.8: failed to queue suspend event [ 148.577355][ T30] usb 12-1: USB disconnect, device number 2 [ 148.605209][ T30] yurex 12-1:0.50: USB YUREX #0 now disconnected [ 148.941558][T11134] No control pipe specified [ 148.950094][T11134] netlink: 'syz.6.1666': attribute type 10 has an invalid length. [ 148.974723][ T5831] wiimote 0005:057E:0330.0012: hidraw2: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 148.975358][ T5831] wiimote 0005:057E:0330.0012: New device registered [ 148.983407][T11134] wiimote 0005:057E:0330.0012: Device removed [ 149.075905][T11135] fido_id[11135]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 149.213363][T11137] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 149.213606][T11137] Cannot find add_set index 0 as target [ 149.219646][ T125] IPVS: starting estimator thread 0... [ 149.328622][T11138] IPVS: using max 26 ests per chain, 62400 per kthread [ 149.438556][T11040] raw-gadget.0 gadget.8: failed to queue disconnect event [ 149.558655][ T6281] usb 13-1: USB disconnect, device number 2 [ 149.579602][ T2090] wiimote 0005:057E:0330.0011: detected device: Nintendo Wii Remote Plus (Gen 2) [ 149.579933][T11145] netlink: 'syz.7.1670': attribute type 3 has an invalid length. [ 149.621483][ T2090] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0011/input/input30 [ 149.638790][ T2090] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0011/input/input31 [ 149.657598][ T2090] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0011/input/input29 [ 150.081741][ T5831] wiimote 0005:057E:0330.0012: detected device: Nintendo Wii Remote Plus (Gen 2) [ 150.082645][ T5831] sysfs: cannot create duplicate filename '/class/power_supply/wiimote_battery_syz0' [ 150.082664][ T5831] CPU: 3 UID: 0 PID: 5831 Comm: kworker/3:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.082689][ T5831] Tainted: [L]=SOFTLOCKUP [ 150.082696][ T5831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.082708][ T5831] Workqueue: events wiimote_init_worker [ 150.082748][ T5831] Call Trace: [ 150.082759][ T5831] [ 150.082767][ T5831] dump_stack_lvl+0x100/0x190 [ 150.082802][ T5831] sysfs_warn_dup.cold+0x1c/0x28 [ 150.082830][ T5831] sysfs_do_create_link_sd+0x113/0x140 [ 150.082856][ T5831] sysfs_create_link+0x61/0xc0 [ 150.082873][ T5831] device_add+0x675/0x1970 [ 150.082897][ T5831] ? __pfx_device_add+0x10/0x10 [ 150.082920][ T5831] ? lockdep_init_map_type+0x5c/0x250 [ 150.082944][ T5831] ? __raw_spin_lock_init+0x3a/0x110 [ 150.082974][ T5831] __power_supply_register.part.0+0x9b5/0x1390 [ 150.083003][ T5831] ? __pfx___power_supply_register.part.0+0x10/0x10 [ 150.083030][ T5831] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 150.083054][ T5831] ? kasprintf+0xc7/0x100 [ 150.083079][ T5831] ? __pfx_kasprintf+0x10/0x10 [ 150.083107][ T5831] ? trace_kmalloc+0xeb/0x110 [ 150.083133][ T5831] ? __kasan_kmalloc+0xaa/0xb0 [ 150.083161][ T5831] power_supply_register+0xce/0x110 [ 150.083186][ T5831] wiimod_battery_probe+0x21e/0x370 [ 150.083212][ T5831] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 150.083236][ T5831] ? input_ff_create+0x256/0x310 [ 150.083262][ T5831] ? __pfx_wiimod_rumble_play+0x10/0x10 [ 150.083298][ T5831] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 150.083321][ T5831] wiimote_init_worker+0xd55/0x2730 [ 150.083350][ T5831] ? __pfx_wiimote_init_worker+0x10/0x10 [ 150.083371][ T5831] ? lock_acquire+0x1d1/0x380 [ 150.083391][ T5831] ? process_one_work+0xa2c/0x1b10 [ 150.083421][ T5831] ? process_one_work+0x906/0x1b10 [ 150.083448][ T5831] ? process_one_work+0x906/0x1b10 [ 150.083480][ T5831] process_one_work+0xac7/0x1b10 [ 150.083519][ T5831] ? __pfx_process_one_work+0x10/0x10 [ 150.083548][ T5831] ? lock_acquire+0x1d1/0x380 [ 150.083576][ T5831] ? __pfx_wiimote_init_worker+0x10/0x10 [ 150.083600][ T5831] worker_thread+0x5ef/0xe50 [ 150.083623][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 150.083642][ T5831] ? kthread+0x13a/0x450 [ 150.083666][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 150.083682][ T5831] kthread+0x373/0x450 [ 150.083706][ T5831] ? __pfx_kthread+0x10/0x10 [ 150.083734][ T5831] ret_from_fork+0x730/0xd60 [ 150.083756][ T5831] ? __pfx_ret_from_fork+0x10/0x10 [ 150.083799][ T5831] ? __switch_to+0x800/0x10f0 [ 150.083826][ T5831] ? __pfx_kthread+0x10/0x10 [ 150.083853][ T5831] ret_from_fork_asm+0x1a/0x30 [ 150.083887][ T5831] [ 150.086618][ T5831] wiimote 0005:057E:0330.0012: cannot register battery device [ 150.092497][T11153] netlink: 'syz.8.1673': attribute type 2 has an invalid length. [ 150.094571][T11153] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1673'. [ 150.124385][ T5441] net_ratelimit: 70 callbacks suppressed [ 150.199698][T11156] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 150.249876][T11158] netlink: 'syz.7.1675': attribute type 7 has an invalid length. [ 150.249892][T11158] netlink: 'syz.7.1675': attribute type 5 has an invalid length. [ 150.249903][T11158] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1675'. [ 150.470343][T11163] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1676'. [ 150.471833][T11163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.471845][T11163] IPv6: NLM_F_CREATE should be set when creating new route [ 150.472176][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1676'. [ 150.557470][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1678'. [ 151.047868][T11189] FAULT_INJECTION: forcing a failure. [ 151.047868][T11189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.047891][T11189] CPU: 3 UID: 0 PID: 11189 Comm: syz.7.1683 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.047907][T11189] Tainted: [L]=SOFTLOCKUP [ 151.047912][T11189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.047918][T11189] Call Trace: [ 151.047922][T11189] [ 151.047927][T11189] dump_stack_lvl+0x100/0x190 [ 151.047948][T11189] should_fail_ex.cold+0x5/0xa [ 151.047965][T11189] _copy_from_iter+0x1f4/0x1690 [ 151.047984][T11189] ? __asan_memset+0x23/0x50 [ 151.047998][T11189] ? __pfx__copy_from_iter+0x10/0x10 [ 151.048014][T11189] ? __pfx___alloc_skb+0x10/0x10 [ 151.048030][T11189] netlink_sendmsg+0x808/0xda0 [ 151.048050][T11189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.048069][T11189] ? selinux_socket_sendmsg+0x198/0x2f0 [ 151.048087][T11189] ____sys_sendmsg+0xa4d/0xbe0 [ 151.048100][T11189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.048119][T11189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.048136][T11189] ? lock_acquire+0x1d1/0x380 [ 151.048149][T11189] ? get_pid_task+0x2a/0x250 [ 151.048166][T11189] ___sys_sendmsg+0x190/0x1e0 [ 151.048182][T11189] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.048199][T11189] ? get_pid_task+0x106/0x250 [ 151.048220][T11189] ? find_held_lock+0x2b/0x80 [ 151.048246][T11189] __sys_sendmsg+0x160/0x210 [ 151.048259][T11189] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.048278][T11189] do_syscall_64+0x123/0x790 [ 151.048305][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.048317][T11189] RIP: 0033:0x7f3efbb9e1d9 [ 151.048326][T11189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.048337][T11189] RSP: 002b:00007f3ef9df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.048348][T11189] RAX: ffffffffffffffda RBX: 00007f3efbe25fa0 RCX: 00007f3efbb9e1d9 [ 151.048355][T11189] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 151.048362][T11189] RBP: 00007f3ef9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 151.048369][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.048376][T11189] R13: 00007f3efbe26038 R14: 00007f3efbe25fa0 R15: 00007ffdb1a400f8 [ 151.048391][T11189] [ 151.244396][T11197] netlink: 'syz.7.1687': attribute type 1 has an invalid length. [ 151.264273][T11197] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.277554][T11197] bond3: (slave veth0_to_bond): making interface the new active one [ 151.278756][T11197] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 151.285753][T11197] bond3: entered promiscuous mode [ 151.285768][T11197] veth0_to_bond: entered promiscuous mode [ 151.285904][T11197] bond3: entered allmulticast mode [ 151.285917][T11197] veth0_to_bond: entered allmulticast mode [ 151.395333][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 151.395347][ T43] audit: type=1400 audit(1791603343.086:866): avc: denied { name_bind } for pid=11202 comm="syz.7.1689" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 151.477892][T11211] IPVS: length: 18 != 8 [ 152.145622][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1695'. [ 152.375951][T11235] netlink: 'syz.8.1701': attribute type 1 has an invalid length. [ 152.397199][T11235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.413756][T11235] bond1: (slave geneve2): making interface the new active one [ 152.414684][T11235] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 152.443591][ T5801] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 152.604965][ T5801] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.607932][ T5801] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.607960][ T5801] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 152.608007][ T5801] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.617125][T11225] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 152.636974][ T5801] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.656096][T11243] sctp: [Deprecated]: syz.8.1704 (pid 11243) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.656096][T11243] Use struct sctp_sack_info instead [ 152.802845][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1705'. [ 152.836402][ T6281] usb 12-1: USB disconnect, device number 3 [ 152.859185][T11250] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 153.050714][T11261] syzkaller0: entered promiscuous mode [ 153.050726][T11261] syzkaller0: entered allmulticast mode [ 153.639746][T11270] UBIFS error (pid: 11270): cannot open "ubi:0", error -19 [ 153.726965][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1719'. [ 153.727050][T11279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.735613][T11279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.792861][T11280] ovs-system: entered promiscuous mode [ 153.877373][ T43] audit: type=1400 audit(1791603345.416:867): avc: denied { getopt } for pid=11284 comm="syz.8.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.886759][ T43] audit: type=1400 audit(1791603345.416:868): avc: denied { write } for pid=11284 comm="syz.8.1721" name="usb_gadget" dev="configfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.890263][ T43] audit: type=1400 audit(1791603345.425:869): avc: denied { read } for pid=11284 comm="syz.8.1721" name="idVendor" dev="configfs" ino=41218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 153.891462][ T43] audit: type=1400 audit(1791603345.425:870): avc: denied { write } for pid=11284 comm="syz.8.1721" name="configs" dev="configfs" ino=41214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.892097][ T43] audit: type=1400 audit(1791603345.425:871): avc: denied { write } for pid=11284 comm="syz.8.1721" name="functions" dev="configfs" ino=41213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.895561][ T43] audit: type=1400 audit(1791603345.425:872): avc: denied { write } for pid=11284 comm="syz.8.1721" name="c.1" dev="configfs" ino=41219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.895867][ T43] audit: type=1400 audit(1791603345.425:873): avc: denied { create } for pid=11284 comm="syz.8.1721" name="ncm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 153.896174][ T43] audit: type=1400 audit(1791603345.425:874): avc: denied { write } for pid=11284 comm="syz.8.1721" name="c.1" dev="configfs" ino=41219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.919026][T11285] configfs-gadget.g1 gadget.0: HOST MAC f6:34:4c:22:c2:45 [ 153.919047][T11285] configfs-gadget.g1 gadget.0: MAC ee:1b:02:ae:ea:e3 [ 153.999181][ T43] audit: type=1400 audit(1791603345.519:875): avc: denied { write } for pid=11288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.185101][ T76] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.356856][ T76] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 154.357531][ T76] usb 5-1: Dual-Role OTG device on HNP port [ 154.357818][ T76] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.409880][ T76] cdc_ncm 5-1:1.0: MAC-Address: f6:34:4c:22:c2:45 [ 154.423899][ T76] cdc_ncm 5-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), f6:34:4c:22:c2:45 [ 154.540385][T11314] syzkaller0: entered promiscuous mode [ 154.540393][T11314] syzkaller0: entered allmulticast mode [ 154.565535][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1726'. [ 154.650454][T11327] netlink: 'syz.6.1729': attribute type 1 has an invalid length. [ 154.682809][T11327] 8021q: adding VLAN 0 to HW filter on device bond9 [ 154.692769][T11327] bond8: (slave veth0_to_bond): Releasing active interface [ 154.692788][T11327] veth0_to_bond: left promiscuous mode [ 154.692920][T11327] veth0_to_bond: left allmulticast mode [ 154.706592][T11327] bond9: (slave veth0_to_bond): making interface the new active one [ 154.707407][T11327] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 154.734950][T11327] bond9: entered promiscuous mode [ 154.734961][T11327] veth0_to_bond: entered promiscuous mode [ 154.735086][T11327] bond9: entered allmulticast mode [ 154.735098][T11327] veth0_to_bond: entered allmulticast mode [ 154.919855][T11356] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1737'. [ 154.924451][T11356] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1737'. [ 155.346895][T11385] netlink: 666 bytes leftover after parsing attributes in process `syz.6.1745'. [ 155.723872][ C2] net_ratelimit: 194 callbacks suppressed [ 155.941698][T11401] netlink: 'syz.8.1746': attribute type 1 has an invalid length. [ 155.973760][T11401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.084983][T11412] FAULT_INJECTION: forcing a failure. [ 156.084983][T11412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.085010][T11412] CPU: 1 UID: 0 PID: 11412 Comm: syz.8.1749 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.085035][T11412] Tainted: [L]=SOFTLOCKUP [ 156.085042][T11412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.085052][T11412] Call Trace: [ 156.085059][T11412] [ 156.085066][T11412] dump_stack_lvl+0x100/0x190 [ 156.085097][T11412] should_fail_ex.cold+0x5/0xa [ 156.085125][T11412] _copy_from_user+0x2e/0xd0 [ 156.085151][T11412] kstrtouint_from_user+0xd6/0x1d0 [ 156.085170][T11412] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 156.085197][T11412] ? lock_acquire+0x1d1/0x380 [ 156.085224][T11412] proc_fail_nth_write+0x83/0x220 [ 156.085252][T11412] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 156.085287][T11412] vfs_write+0x2aa/0x1050 [ 156.085311][T11412] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 156.085338][T11412] ? lock_acquire+0x1d1/0x380 [ 156.085357][T11412] ? __fget_files+0x34/0x3d0 [ 156.085383][T11412] ? __pfx_vfs_write+0x10/0x10 [ 156.085402][T11412] ? find_held_lock+0x2b/0x80 [ 156.085430][T11412] ? __fget_files+0x215/0x3d0 [ 156.085459][T11412] ? __fget_files+0x21f/0x3d0 [ 156.085492][T11412] ksys_write+0x12a/0x250 [ 156.085515][T11412] ? __pfx_ksys_write+0x10/0x10 [ 156.085544][T11412] do_syscall_64+0x123/0x790 [ 156.085573][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.085591][T11412] RIP: 0033:0x7f6d2fd5ea0e [ 156.085606][T11412] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.085623][T11412] RSP: 002b:00007f6d30beefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.085640][T11412] RAX: ffffffffffffffda RBX: 00007f6d30bef6c0 RCX: 00007f6d2fd5ea0e [ 156.085652][T11412] RDX: 0000000000000001 RSI: 00007f6d30bef0a0 RDI: 0000000000000004 [ 156.085663][T11412] RBP: 00007f6d30bef090 R08: 0000000000000000 R09: 0000000000000000 [ 156.085674][T11412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.085685][T11412] R13: 00007f6d30026038 R14: 00007f6d30025fa0 R15: 00007fffeedcbb18 [ 156.085711][T11412] [ 156.140895][T11414] syzkaller0: entered promiscuous mode [ 156.140909][T11414] syzkaller0: entered allmulticast mode [ 156.254815][T11419] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 156.260558][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1753'. [ 156.287726][T11421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.302505][T11424] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 156.317042][T11426] tipc: Cannot configure node identity twice [ 156.474483][T11433] smpboot: CPU 1 is now offline [ 156.553154][T11437] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 156.578640][T11447] netlink: 'syz.6.1762': attribute type 1 has an invalid length. [ 156.608267][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1763'. [ 156.619471][T11447] 8021q: adding VLAN 0 to HW filter on device bond10 [ 156.740082][T11464] UBLK_F_QUIESCE requires UBLK_F_USER_RECOVERY [ 156.743266][T11463] netlink: 'syz.7.1767': attribute type 1 has an invalid length. [ 156.772885][T11463] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.786439][T11463] bond3: (slave veth0_to_bond): Releasing active interface [ 156.786458][T11463] veth0_to_bond: left promiscuous mode [ 156.786593][T11463] veth0_to_bond: left allmulticast mode [ 156.795784][T11463] bond4: (slave veth0_to_bond): making interface the new active one [ 156.800333][T11463] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 156.811864][T11463] bond4: entered promiscuous mode [ 156.811880][T11463] veth0_to_bond: entered promiscuous mode [ 156.812028][T11463] bond4: entered allmulticast mode [ 156.812042][T11463] veth0_to_bond: entered allmulticast mode [ 156.835977][ T9] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 156.974434][ T9] usb 13-1: device descriptor read/64, error -71 [ 157.231106][ T9] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 157.369611][ T9] usb 13-1: device descriptor read/64, error -71 [ 157.487452][ T9] usb usb13-port1: attempt power cycle [ 157.576852][T11490] tipc: Cannot configure node identity twice [ 157.663379][T11498] FAULT_INJECTION: forcing a failure. [ 157.663379][T11498] name failslab, interval 1, probability 0, space 0, times 0 [ 157.663408][T11498] CPU: 1 UID: 0 PID: 11498 Comm: syz.6.1781 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.663431][T11498] Tainted: [L]=SOFTLOCKUP [ 157.663437][T11498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.663447][T11498] Call Trace: [ 157.663454][T11498] [ 157.663462][T11498] dump_stack_lvl+0x100/0x190 [ 157.663490][T11498] should_fail_ex.cold+0x5/0xa [ 157.663515][T11498] should_failslab+0xc2/0x120 [ 157.663539][T11498] __kmalloc_noprof+0xfc/0x840 [ 157.663559][T11498] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 157.663582][T11498] ? strset_prepare_data+0x5f4/0xb40 [ 157.663613][T11498] strset_prepare_data+0x5f4/0xb40 [ 157.663645][T11498] ethnl_default_dump_one+0x3c5/0x1110 [ 157.663675][T11498] ethnl_default_dumpit+0x288/0x6c0 [ 157.663704][T11498] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 157.663728][T11498] ? __alloc_skb+0x5b7/0x710 [ 157.663743][T11498] ? __pfx___alloc_skb+0x10/0x10 [ 157.663763][T11498] genl_dumpit+0x125/0x230 [ 157.663783][T11498] netlink_dump+0x532/0xd00 [ 157.663809][T11498] ? __pfx_netlink_dump+0x10/0x10 [ 157.663842][T11498] ? __pf ** replaying previous printk message ** [ 157.663842][T11498] ? __pfx_ethnl_default_start+0x10/0x10 [ 157.663867][T11498] ? genl_start+0x67a/0x970 [ 157.663887][T11498] __netlink_dump_start+0x6d6/0x990 [ 157.663916][T11498] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 157.663936][T11498] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 157.663961][T11498] ? __pfx_genl_get_cmd+0x10/0x10 [ 157.663976][T11498] ? __pfx_genl_start+0x10/0x10 [ 157.663991][T11498] ? __pfx_genl_dumpit+0x10/0x10 [ 157.664008][T11498] ? __pfx_genl_done+0x10/0x10 [ 157.664028][T11498] ? netlink_sendmsg+0x680/0xda0 [ 157.664050][T11498] ? ____sys_sendmsg+0xa4d/0xbe0 [ 157.664070][T11498] ? __radix_tree_lookup+0x217/0x2b0 [ 157.664095][T11498] genl_rcv_msg+0x471/0x800 [ 157.664118][T11498] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.664135][T11498] ? __lock_acquire+0x5c0/0x1f40 [ 157.664175][T11498] ? __pfx_ethnl_default_start+0x10/0x10 [ 157.664200][T11498] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 157.664222][T11498] ? __pfx_ethnl_default_done+0x10/0x10 [ 157.664251][T11498] ? __lock_acquire+0x5c0/0x1f40 [ 157.664276][T11498] netlink_rcv_skb+0x159/0x420 [ 157.664302][T11498] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.664321][T11498] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.664357][T11498] ? netlink_deliver_tap+0x1ae/0xcc0 [ 157.664384][T11498] genl_rcv+0x28/0x40 [ 157.664400][T11498] netlink_unicast+0x585/0x850 [ 157.664429][T11498] ? __pfx_netlink_unicast+0x10/0x10 [ 157.664454][T11498] ? __pfx_sock_has_perm+0x10/0x10 [ 157.664482][T11498] netlink_sendmsg+0x8b0/0xda0 [ 157.664512][T11498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.664539][T11498] ? selinux_socket_sendmsg+0x198/0x2f0 [ 157.664566][T11498] ____sys_sendmsg+0xa4d/0xbe0 [ 157.664587][T11498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.664614][T11498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.664641][T11498] ? lock_acquire+0x1d1/0x380 [ 157.664660][T11498] ? get_pid_task+0x2a/0x250 [ 157.664686][T11498] ___sys_sendmsg+0x190/0x1e0 [ 157.664710][T11498] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.664733][T11498] ? get_pid_task+0x106/0x250 [ 157.664766][T11498] ? find_held_lock+0x2b/0x80 [ 157.664808][T11498] __sys_sendmsg+0x160/0x210 [ 157.664827][T11498] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.664860][T11498] do_syscall_64+0x123/0x790 [ 157.664886][T11498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.664904][T11498] RIP: 0033:0x7fea5659e1d9 [ 157.664920][T11498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.664936][T11498] RSP: 002b:00007fea57475028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.664953][T11498] RAX: ffffffffffffffda RBX: 00007fea56825fa0 RCX: 00007fea5659e1d9 [ 157.664965][T11498] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 157.664976][T11498] RBP: 00007fea57475090 R08: 0000000000000000 R09: 0000000000000000 [ 157.664986][T11498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.664996][T11498] R13: 00007fea56826038 R14: 00007fea56825fa0 R15: 00007ffec5f08788 [ 157.665021][T11498] [ 157.665227][T11497] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 460 [ 157.665322][ T57] nfc: nfc_urelease_event_work: portid 460 [ 157.690113][ C3] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 12) [ 157.700531][T11502] kcov: kcov_start: t = ffff888064b7cb00, size = 524288, area = ffffc900070ad000 [ 157.703363][T11502] libceph: ceph_parse_param fs_parse 'source' token -519 [ 157.703384][T11502] ceph: ceph_parse_mount_param: fs_parse 'source' token 12 [ 157.703399][T11502] ceph: 'client.admin@00000000-0000-0000-0000-000000000000.ceph=/' [ 157.703420][T11502] ceph: device name 'client.admin@00000000-0000-0000-0000-000000000000.ceph' [ 157.703432][T11502] ceph: server path '/' [ 157.703440][T11502] ceph: trying new device syntax [ 157.703456][T11502] ceph: using client.admin entity name [ 157.703466][T11502] libceph: ceph_parse_fsid '00000000-0000-0000-0000-000000000000.ceph=/' [ 157.703490][T11502] libceph: ceph_parse_fsid ret 0 got fsid 00000000-0000-0000-0000-000000000000 [ 157.703515][T11502] ceph: file system (mds namespace) 'ceph' [ 157.704323][T11502] libceph: ceph_parse_param fs_parse 'mon_addr' token -519 [ 157.704341][T11502] ceph: ceph_parse_mount_param: fs_parse 'mon_addr' token 13 [ 157.704355][T11502] libceph: parse_ips on '127.0.0.1:678)' [ 157.704373][T11502] libceph: ceph_parse_ips got (1)127.0.0.1:678 [ 157.704628][T11502] libceph: ceph_parse_param fs_parse 'mount_timeout' token 1 [ 157.704740][T11502] ceph: ceph_get_tree [ 157.704772][T11502] libceph: ceph_messenger_init ffff888038478120 [ 157.704869][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 157.704881][ T43] audit: type=1400 audit(1791603348.991:897): avc: denied { write } for pid=11499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.704927][T11502] libceph: init [ 157.704954][T11502] libceph: ceph_auth_init name 'client.admin' preferred_mode 0 fallback_mode 0 [ 157.705000][T11502] libceph: ceph_msg_new ffff88804aff31f0 front 20 [ 157.705029][T11502] libceph: ceph_msg_new ffff88804aff3338 front 128 [ 157.705057][T11502] libceph: ceph_msg_new ffff88804aff3480 front 4096 [ 157.705086][T11502] libceph: ceph_msg_new ffff88804aff35c8 front 4096 [ 157.705097][T11502] libceph: con_init ffff888038478418 [ 157.705108][T11502] libceph: con_sock_state_init con ffff888038478418 sock 0 -> 1 [ 157.705126][T11502] libceph: init [ 157.705348][T11502] libceph: msgpool osd_op init [ 157.705406][T11502] libceph: ceph_msg_new ffff88804adeca40 front 4096 [ 157.705418][T11502] libceph: msgpool_alloc (null) ffff88804adeca40 [ 157.705458][T11502] libceph: ceph_msg_new ffff88804adecb88 front 4096 [ 157.705471][T11502] libceph: msgpool_alloc (null) ffff88804adecb88 [ 157.705511][T11502] libceph: ceph_msg_new ffff88804adeccd0 front 4096 [ 157.705522][T11502] libceph: msgpool_alloc (null) ffff88804adeccd0 [ 157.705561][T11502] libceph: ceph_msg_new ffff88804adece18 front 4096 [ 157.705572][T11502] libceph: msgpool_alloc (null) ffff88804adece18 [ 157.705613][T11502] libceph: ceph_msg_new ffff88804adecf60 front 4096 [ 157.705624][T11502] libceph: msgpool_alloc (null) ffff88804adecf60 [ 157.705661][T11502] libceph: ceph_msg_new ffff88804aded0a8 front 4096 [ 157.705673][T11502] libceph: msgpool_alloc (null) ffff88804aded0a8 [ 157.705713][T11502] libceph: ceph_msg_new ffff88804aded1f0 front 4096 [ 157.705726][T11502] libceph: msgpool_alloc (null) ffff88804aded1f0 [ 157.705766][T11502] libceph: ceph_msg_new ffff88804aded338 front 4096 [ 157.705777][T11502] libceph: msgpool_alloc (null) ffff88804aded338 [ 157.705818][T11502] libceph: ceph_msg_new ffff88804aded480 front 4096 [ 157.705829][T11502] libceph: msgpool_alloc (null) ffff88804aded480 [ 157.705868][T11502] libceph: ceph_msg_new ffff88804aded5c8 front 4096 [ 157.705879][T11502] libceph: msgpool_alloc (null) ffff88804aded5c8 [ 157.705891][T11502] libceph: msgpool osd_op_reply init [ 157.705944][T11502] libceph: ceph_msg_new ffff88804aded710 front 4096 [ 157.705956][T11502] libceph: msgpool_alloc (null) ffff88804aded710 [ 157.705994][T11502] libceph: ceph_msg_new ffff88804aded858 front 4096 [ 157.706006][T11502] libceph: msgpool_alloc (null) ffff88804aded858 [ 157.706045][T11502] libceph: ceph_msg_new ffff88804aded9a0 front 4096 [ 157.706056][T11502] libceph: msgpool_alloc (null) ffff88804aded9a0 [ 157.706095][T11502] libceph: ceph_msg_new ffff88804adedae8 front 4096 [ 157.706107][T11502] libceph: msgpool_alloc (null) ffff88804adedae8 [ 157.706175][T11502] libceph: ceph_msg_new ffff88804adedc30 front 4096 [ 157.706189][T11502] libceph: msgpool_alloc (null) ffff88804adedc30 [ 157.706229][T11502] libceph: ceph_msg_new ffff88804adedd78 front 4096 [ 157.706251][T11502] libceph: msgpool_alloc (null) ffff88804adedd78 [ 157.706292][T11502] libceph: ceph_msg_new ffff88804adec8f8 front 4096 [ 157.706305][T11502] libceph: msgpool_alloc (null) ffff88804adec8f8 [ 157.706345][T11502] libceph: ceph_msg_new ffff88804adec7b0 front 4096 [ 157.706357][T11502] libceph: msgpool_alloc (null) ffff88804adec7b0 [ 157.706397][T11502] libceph: ceph_msg_new ffff88804adec668 front 4096 [ 157.706409][T11502] libceph: msgpool_alloc (null) ffff88804adec668 [ 157.706449][T11502] libceph: ceph_msg_new ffff88804adec520 front 4096 [ 157.706461][T11502] libceph: msgpool_alloc (null) ffff88804adec520 [ 157.710613][T11502] libceph: __ceph_monc_want_map fsmap.user epoch 0 continuous 0 [ 157.711089][T11502] ceph: [00000000-0000-0000-0000-000000000000 0] ceph_set_super: ffff88802ebfc000 [ 157.711123][T11502] ceph: get_sb using new client ffff88802580e000 [ 157.713865][ T25] Added buffer head 1 to ffff88802880c400 [ 157.713906][ T25] Added buffer head 0 to ffff88802880c400 [ 157.714302][T11502] device: 'ceph-3': device_add [ 157.714322][T11502] kobject: 'ceph-3' (ffff8880310f4000): kobject_add_internal: parent: 'bdi', set: 'devices' [ 157.714394][T11502] bdi ceph-3: No ACPI support [ 157.714855][T11502] PM: Adding info for No Bus:ceph-3 [ 157.714872][T11502] kobject: 'ceph-3' (ffff8880310f4000): kobject_uevent_env [ 157.714907][T11502] kobject: 'ceph-3' (ffff8880310f4000): fill_kobj_path: path = '/devices/virtual/bdi/ceph-3' [ 157.715103][ C0] virtqueue callback for ffff88802880c400 (ffffffff8666f700) [ 157.715109][T11506] kcov: kcov_start: t = ffff8880626fa580, size = 524288, area = ffffc900260c2000 [ 157.715196][ T5801] No more buffers in queue [ 157.717961][T11502] debugfs: creating file 'ceph-3' [ 157.718057][T11502] debugfs: creating file 'stats' [ 157.718162][T11502] debugfs: creating file 'wb_stats' [ 157.718912][T11502] ceph: [00000000-0000-0000-0000-000000000000 0] ceph_real_mount: mount start ffff88802580e000 [ 157.718930][T11502] libceph: __ceph_monc_want_map monmap epoch 0 continuous 1 [ 157.718940][T11502] libceph: __ceph_monc_want_map osdmap epoch 0 continuous 0 [ 157.719995][T11502] ------------[ cut here ]------------ [ 157.720002][T11502] kernel BUG at net/ceph/mon_client.c:211! [ 157.720023][T11502] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 157.733221][T11496] sock ffff88805dd439c0 [ 157.733525][T11496] cmd 400448ca arg 0 [ 157.733556][T11496] channel 2 len 36 [ 157.733580][T11496] 0 [ 157.733589][T11496] hci0 orig refcnt 5 [ 157.733602][T11496] hci0 ffff88805194c000 [ 157.733614][T11496] hci0: [ 157.764646][T11507] kcov: kcov_start: t = ffff8880626f8000, size = 524288, area = ffffc90024dc1000 [ 157.775553][ C3] bridge4: hello timer expired [ 157.787285][ T9] raw-gadget.0 gadget.8: gadget resumed [ 157.787317][ T9] dummy_hcd dummy_hcd.8: port status 0x00100503 has changes [ 157.850392][ T9] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 157.850604][ C0] dummy_udc dummy_udc.8: set_address = 5 [ 157.873170][ T9] usb 13-1: device descriptor read/8, error -71 [ 157.930302][T11479] kcov: kcov_task_exit: t = ffff888032404b00, kcov->t = ffff888032404b00 [ 157.946525][ C0] bridge2: hello timer expired [ 157.968104][ T5809] bond2: (slave geneve2): Send learning packet: mac 86:ae:42:79:8d:af vlan 0 [ 157.989373][ T9] raw-gadget.0 gadget.8: gadget suspended [ 157.989541][ T9] kobject: '13-1' (ffff88802efe50b0): kobject_cleanup, parent 0000000000000000 [ 157.989558][ T9] kobject: '13-1' (ffff88802efe50b0): calling ktype release [ 157.989577][ T9] kobject: '13-1': free name [ 157.989643][ T9] raw-gadget.0 gadget.8: gadget reset [ 158.032412][T11508] kcov: kcov_start: t = ffff88802c534b00, size = 524288, area = ffffc900270c6000 [ 158.067158][ T9] raw-gadget.0 gadget.8: gadget resumed [ 158.067195][ T9] dummy_hcd dummy_hcd.8: port status 0x00100503 has changes [ 158.078676][T11502] CPU: 2 UID: 0 PID: 11502 Comm: syz.6.1782 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.082102][T11502] Tainted: [L]=SOFTLOCKUP [ 158.083701][T11502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.086708][T11502] RIP: 0010:__open_session+0x60f/0x740 [ 158.088685][T11502] Code: f6 44 89 e7 e8 a2 93 25 fa 89 c5 e9 2b fb ff ff e8 06 a5 7a f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 f2 a4 7a f6 90 <0f> 0b e8 8a e6 ee f6 e9 7b fa ff ff 4c 89 f7 e8 7d e6 ee f6 e9 16 [ 158.094995][T11502] RSP: 0018:ffffc90006bffbe0 EFLAGS: 00010283 [ 158.096788][T11502] RAX: 0000000000016d19 RBX: ffff888038478290 RCX: ffffc900070ad000 [ 158.099438][T11502] RDX: 0000000000080000 RSI: ffffffff8b91a15e RDI: ffff888064b7cb00 [ 158.101913][T11502] RBP: ffff888037d59500 R08: 0000000000000005 R09: 0000000000000000 [ 158.104540][T11502] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 158.106974][T11502] R13: 00000000ffffffff R14: ffff888038478400 R15: ffff888038478298 [ 158.109403][T11502] FS: 00007fea574756c0(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000 [ 158.112221][T11502] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.114301][T11502] CR2: 0000560aab515300 CR3: 0000000056341000 CR4: 0000000000352ef0 [ 158.116995][T11502] Call Trace: [ 158.117923][T11502] [ 158.119008][T11502] ? __ceph_monc_want_map+0x189/0x360 [ 158.120922][T11502] ceph_monc_open_session+0x46/0x60 [ 158.122379][T11502] __ceph_open_session+0x135/0x590 [ 158.123956][T11502] ? __pfx___mutex_lock+0x10/0x10 [ 158.125815][T11502] ? __pfx___ceph_open_session+0x10/0x10 [ 158.127541][T11502] ? __pfx_woken_wake_function+0x10/0x10 [ 158.128253][ T9] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 158.128468][ C0] dummy_udc dummy_udc.8: set_address = 6 [ 158.133530][T11502] ceph_get_tree+0xd98/0x1fd0 [ 158.134963][T11502] ? security_capable+0x80/0x260 [ 158.136764][T11502] vfs_get_tree+0x92/0x320 [ 158.138369][T11502] vfs_cmd_create+0xd7/0x2a0 [ 158.139640][T11502] __do_sys_fsconfig+0x55a/0xcb0 [ 158.141087][T11502] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 158.143003][T11502] do_syscall_64+0x123/0x790 [ 158.144514][T11502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.146173][T11502] RIP: 0033:0x7fea5659e1d9 [ 158.147784][T11502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.150029][ T9] usb 13-1: device descriptor read/8, error -71 [ 158.156067][T11502] RSP: 002b:00007fea57475028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 158.158696][T11502] RAX: ffffffffffffffda RBX: 00007fea56825fa0 RCX: 00007fea5659e1d9 [ 158.161470][T11502] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 158.164075][T11502] RBP: 00007fea56635888 R08: 0000000000000000 R09: 0000000000000000 [ 158.167090][T11502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.169912][T11502] R13: 00007fea56826038 R14: 00007fea56825fa0 R15: 00007ffec5f08788 [ 158.172908][T11502] [ 158.173992][T11502] Modules linked in: [ 158.176220][ C2] bridge3: hello timer expired [ 158.177812][ C2] bridge5: hello timer expired [ 158.179468][T11502] ---[ end trace 0000000000000000 ]--- [ 158.182088][T11502] RIP: 0010:__open_session+0x60f/0x740 [ 158.182116][T11496] hci0: err 0x13 [ 158.182160][T11496] hci0: cancelling interleave scan [ 158.182127][T11502] Code: f6 44 89 e7 e8 a2 93 25 fa 89 c5 e9 2b fb ff ff e8 06 a5 7a f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 f2 a4 7a f6 90 <0f> 0b e8 8a e6 ee f6 e9 7b fa ff ff 4c 89 f7 e8 7d e6 ee f6 e9 16 [ 158.182178][T11496] hci0 orig refcnt 6 [ 158.182228][T11502] RSP: 0018:ffffc90006bffbe0 EFLAGS: 00010283 [ 158.182246][T11502] RAX: 0000000000016d19 RBX: ffff888038478290 RCX: ffffc900070ad000 [ 158.182258][T11502] RDX: 0000000000080000 RSI: ffffffff8b91a15e RDI: ffff888064b7cb00 [ 158.182269][T11502] RBP: ffff888037d59500 R08: 0000000000000005 R09: 0000000000000000 [ 158.182281][T11502] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 158.182292][T11502] R13: 00000000ffffffff R14: ffff888038478400 R15: ffff888038478298 [ 158.182305][T11502] FS: 00007fea574756c0(0000) GS:ffff8880d4c46000(0000) knlGS:0000000000000000 [ 158.182339][T11502] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.182381][T11495] sock ffff88805dd439c0 sk ffff888058437000 [ 158.182414][T11495] channel 2 len 10 [ 158.182434][T11502] CR2: 0000560aab515300 CR3: 0000000056341000 CR4: 0000000000352ef0 [ 158.182451][T11502] Kernel panic - not syncing: Fatal exception [ 158.223766][T11502] Kernel Offset: disabled [ 158.225510][T11502] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:35:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000000 RDX=ffff88802beacb00 RSI=ffffffff81ff81be RDI=ffff88802beacb00 RBP=ffff88806a441900 RSP=ffffc90005c0f8a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffffffff81d75a49 R12=ffffed10057d5c13 R13=0000000000000003 R14=ffffed100d488321 R15=0000000000000001 RIP=ffffffff81ff81c0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3d879d CR3=000000004b3de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedcaeca26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedcaeca26 00007ffedcaeca2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29c7a35e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29c7a35eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29c7a3600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29c7a35e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff888020294b00 RSI=ffffffff81ffac4e RDI=0000000000000000 RBP=ffffc90000167cd8 RSP=ffffc90000167bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a533de0 R12=ffff88806a33d280 R13=ffffed100d467a51 R14=ffff88806a33d288 R15=0000000000000001 RIP=ffffffff81ffac6b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f29c88ceff8 CR3=00000000355c7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec5f08c76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec5f08c76 00007ffec5f08c7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea56635e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea56635eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea5663600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea56635e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2c0c5 RDI=ffffffff9cc7e660 RBP=ffffffff9cc7e620 RSP=ffffc90006bff408 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000037 R14=0000000000000007 R15=ffffc90006bff720 RIP=ffffffff85b2c0ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fea574756c0 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000560aab515300 CR3=0000000056341000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000000000001 Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000ff7fffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c68601eeb0 000055c68601eeb0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c685ff8c40 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c685ffe2b0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000ff0000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737332 7373737373734b12 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 17005c1217005c18 101c1f115c434943 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 682f6d697377685f 313132303863616d 2f6c617574726976 2f73656369766564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4131302c43413130 2c423731302c3137 31302c453631302c 353631302c343631 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000001 RDX=ffff88803dbd2580 RSI=ffffffff81ff81be RDI=ffff88803dbd2580 RBP=ffff88806a443ce0 RSP=ffffc90006d9f4d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed1007b7a763 R13=0000000000000003 R14=ffffed100d48879d R15=0000000000000001 RIP=ffffffff81ff81c0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd2f420fc80 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000560aab516968 CR3=0000000056f50000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3efc95d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb1a405e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb1a405e6 00007ffdb1a405ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3efbc35e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3efbc35eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3efbc3600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3efbc35e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0700010006000000 00000b000800000a a8000c0008000000 0200090008000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3efbdf45f8 00007f3efbdf45c8 00007f3efbdf4600 00007f3efbdf45e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5a1898eca48a18a2 1aa68804bf84c62e e240effde2dac9b9 151ad8252aa50792 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ce950fa61c6d7da8 401948df942d8da4 6ce9990faea26528 fc6f606fee4a84d9 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e694073fc449b63d e5ef09e551c50f6f ffdd3847c2a166b8 8dfd0444ea445f67 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 159acf3793137391 d3f98221b2c1c09c ed5eeb0ff5f94da2 e20b18b45d7ba22b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000